Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier: kWAJ8Eql1bOormg6F7Bh2q+7BOvCADVHuTH3P2UnLTc=
Subject key identifier: E6:04:2C:71:F6:64:D9:C0:35:80:5C:58:B0:0F:CB:81:ED:65:4D:2E
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial: 019D386589F70E9AD4FF87FD8E34AA156742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: 1rVHurN++k6j6uLdVGxqv3U9803p5SEznSynYWhdl8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:89:f7:0e:9a:d4:ff:87:fd:8e:34:aa:15:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=e6042c71f664d9c035805c58b00fcb81ed654d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:77:f4:5f:64:ca:ca:31:f3:92:7e:26:51:
1d:84:28:2e:dd:42:99:53:4f:16:a4:76:0a:f5:6a:
86:ff:eb:b8:61:a9:3e:d5:62:c2:df:0f:62:64:ed:
c7:83:ae:fb:cf:b6:3d:c4:ef:0e:6e:66:d5:92:1d:
eb:00:a7:59:aa:cf:b2:9b:05:fe:ac:28:7c:a3:54:
69:c1:fd:64:5c:0d:5b:2b:7c:6e:89:d7:32:20:46:
b5:a7:12:48:f5:68:fb:55:00:ae:43:4f:93:62:ad:
f4:83:79:0c:6b:e5:63:83:ce:a9:87:66:82:67:20:
ce:5c:d4:c0:9c:71:72:be:0b:6c:ab:1a:66:42:c0:
4f:b9:77:56:65:5d:17:b2:c5:c1:a3:a2:a6:6e:16:
2a:21:d8:2f:d5:2e:56:e4:f7:4a:81:9d:16:7f:af:
67:43:fd:db:0f:b5:6e:d4:8e:cb:c2:04:18:4c:aa:
96:7a:94:c8:79:71:7a:b5:f4:3f:5b:e4:46:23:47:
ce:ed:7c:09:94:5b:70:10:34:a9:5a:76:2a:af:be:
18:38:ad:d8:44:a0:f3:83:b4:c1:8e:5c:9e:c4:42:
19:63:6d:06:43:8b:05:39:d3:9c:7d:71:f6:85:43:
8b:b5:ba:1d:0b:45:3a:52:95:82:31:62:bf:0e:62:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:2C:71:F6:64:D9:C0:35:80:5C:58:B0:0F:CB:81:ED:65:4D:2E
X509v3 Authority Key Identifier:
keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:88:ee:83:9c:2d:21:36:0f:4e:08:e1:20:59:28:00:98:
49:dc:66:7b:b5:f1:c4:94:c3:81:72:cd:a4:fb:3c:4d:3f:a5:
a6:30:7e:c4:32:8c:53:e6:b9:99:c1:a9:3c:28:ee:0e:1a:7a:
6d:89:b6:88:f6:7b:42:19:d4:d8:8e:34:a6:b2:74:4c:c9:32:
5f:bf:79:d6:07:ab:77:63:8a:f2:18:00:54:d0:cf:7d:b9:71:
ef:35:74:80:e0:e6:5b:88:b2:24:08:45:8f:c0:f7:a6:4f:5d:
a1:be:9d:54:f4:e6:fe:d4:12:c8:cc:27:7c:49:96:94:65:62:
77:36:8c:e9:9f:8b:42:d2:23:97:56:86:4d:1c:8d:6d:b7:13:
66:3d:33:a8:5f:cb:7f:f7:26:ef:ed:74:bb:06:ce:96:44:64:
d7:52:23:2a:e2:4f:db:20:49:e0:69:ea:f6:f1:e5:82:48:8b:
9c:c7:6c:c8:dc:b3:17:6d:8a:78:45:1c:36:bd:8c:d0:93:12:
1c:02:3b:44:58:37:79:e1:b3:e3:71:b7:60:db:8a:16:57:ae:
15:54:4d:cb:07:48:3b:4b:15:40:79:7e:60:1a:e8:2d:20:84:
47:13:88:5a:45:27:00:1d:8d:c4:71:28:50:46:c7:a4:bc:c0:
cf:d0:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:53 2026 by rpki-client