Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier: 8OStzVP1OVOqCSYClTnnKdk00PYPtzQmtyMGIwHmNVo=
Subject key identifier: E1:CD:83:5A:58:7F:D8:46:C3:6B:F3:25:1F:86:22:E0:1A:9E:E8:6F
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial: 019D38D3A98B3C7F44B2552832D5BF168472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number: 0D74
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: S+1IGXA/30T80ryt2i0d2F0J0Xn0v+lUdzfuOSVb/74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a9:8b:3c:7f:44:b2:55:28:32:d5:bf:16:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=e1cd835a587fd846c36bf3251f8622e01a9ee86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:7f:23:35:35:c0:ba:a1:04:49:20:35:1f:
a5:d7:93:2e:3e:20:da:da:45:5f:8a:ee:58:d9:8e:
53:f1:de:14:61:45:c2:81:d1:c1:8d:cc:6a:03:01:
c9:ed:68:a4:93:01:f3:28:b6:57:7d:74:0e:78:1c:
35:2b:6b:f7:72:f3:f8:2e:bc:3e:9e:69:ac:82:73:
90:f2:0a:bb:59:74:42:a8:75:23:1d:53:c6:30:11:
71:42:93:7d:c9:77:06:f3:60:b7:ae:d9:82:c2:4d:
93:69:b7:87:63:92:25:57:43:74:ae:7a:f1:3c:ae:
ae:d2:3a:81:e5:bd:50:c4:70:51:df:77:66:d4:cd:
98:d6:19:53:60:ff:8f:a2:9c:8e:17:b0:dd:5f:e4:
5d:84:89:67:18:47:b2:f1:86:86:38:ac:24:14:38:
c3:a8:ba:e6:34:d4:e8:5a:89:79:90:d4:46:90:6c:
83:cc:98:cb:e1:80:09:33:cd:d0:1e:5f:54:f5:ea:
d6:7b:b9:33:ae:90:95:75:dc:3d:5c:00:ae:50:50:
a7:cc:26:12:13:0b:11:38:f9:6e:1c:c9:44:d2:e6:
27:5e:a0:81:6c:d1:63:59:9a:8f:bc:7d:ae:6f:64:
f8:08:59:29:d1:07:19:51:2c:d7:21:e2:57:85:ad:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:83:5A:58:7F:D8:46:C3:6B:F3:25:1F:86:22:E0:1A:9E:E8:6F
X509v3 Authority Key Identifier:
keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:13:89:8a:27:82:2d:3e:f9:a1:6b:1d:b8:5c:03:3b:8e:
d1:7b:95:12:a7:17:a8:ee:75:4a:f3:5d:8c:3b:2b:06:1a:4b:
e8:b2:16:76:e3:1d:7c:99:75:fb:c7:34:c6:17:6f:ed:2c:ab:
a8:36:85:3e:de:dc:4c:be:dd:0b:26:ed:79:55:85:86:96:9d:
38:1e:a5:db:30:1f:4a:22:ea:17:58:d7:d6:19:ce:f4:b1:96:
d1:b1:2a:63:e5:f7:0d:88:6d:ca:28:6e:08:4b:4c:c1:de:86:
b4:9b:be:91:d0:7b:62:f5:9f:51:1d:eb:94:84:7b:ba:91:c7:
8d:65:63:32:be:98:7a:f1:e0:8c:ce:ab:44:bf:9e:ce:73:a8:
e9:26:55:ca:0b:f0:19:b7:2b:8e:9e:f3:1e:2a:a0:d4:e3:32:
3e:cf:2d:e2:1a:97:54:67:df:54:2a:9c:62:90:ab:43:1d:53:
fd:80:62:06:73:66:c5:f9:f6:38:e0:e5:66:45:50:ce:17:76:
bd:53:1d:73:9b:98:5e:08:26:65:c7:6a:2d:cb:da:ab:ee:70:
0b:a1:ec:c4:b5:1c:6a:46:e6:78:5c:02:ad:b0:df:88:f0:c2:
93:9d:f5:b1:06:c2:cb:62:d9:9c:73:d6:2c:25:f7:8d:42:d4:
cb:0b:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:07 2026 by rpki-client