Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: A51xKyjyXufRW7dz+O1EiEZDwXHwE/0pjWtkdG2i8hk=
Subject key identifier: 48:A0:96:4A:8E:31:D4:B7:3C:BE:CF:32:09:DB:39:E0:4B:19:B8:2C
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019D28F2242AD7765DBE34B176E5B0D0927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0BB9
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 4zTTn3mmYfOiX2hSvlA5Dwm3oVDrnMDvo4C1cnVuA1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:24:2a:d7:76:5d:be:34:b1:76:e5:b0:d0:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=48a0964a8e31d4b73cbecf3209db39e04b19b82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:31:56:8e:04:ba:38:fc:83:1a:23:fb:6c:
25:90:62:0a:92:a8:96:0b:4a:a0:92:01:8e:dc:ae:
32:9c:fd:ec:03:6a:7a:d0:7e:fd:ad:00:5a:3a:e0:
28:1f:04:4c:19:97:06:29:1e:3c:af:c0:75:d9:45:
05:24:38:42:31:99:42:ca:13:b4:71:c5:96:d5:1e:
4e:5d:fd:b1:7b:e2:0e:a8:fa:f3:c1:8a:72:18:ff:
43:c4:45:f2:48:08:60:74:47:6e:ba:f4:ee:2d:a6:
3e:32:c4:69:23:5b:e3:23:5c:2a:82:9f:0f:b5:f4:
dd:ce:e8:56:b9:f7:72:7d:b0:84:b4:91:e7:36:cb:
b2:ef:a5:af:80:87:b9:ee:d6:22:8d:68:a8:83:99:
43:9e:e8:4b:08:84:de:66:35:bc:5d:8f:b7:4d:91:
83:f3:74:ee:f6:02:16:e3:4f:09:b0:88:13:46:a9:
70:d6:d7:68:34:c1:98:1e:95:3e:06:d9:36:d4:5c:
db:f3:ed:86:97:59:34:08:85:fb:5f:7f:8c:24:bd:
3d:d4:cf:67:4e:45:da:1e:05:df:c8:21:35:26:a2:
02:6e:9e:0f:e1:cf:b8:d6:df:f2:08:d7:57:5c:85:
78:b0:6b:23:a1:e4:c2:d2:86:0c:ca:27:3d:39:53:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:96:4A:8E:31:D4:B7:3C:BE:CF:32:09:DB:39:E0:4B:19:B8:2C
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:2e:76:56:74:b5:00:78:13:0c:1f:bd:5e:95:53:6d:50:
53:f5:15:2d:d5:71:30:a3:fb:5e:05:b4:10:c1:54:24:b5:21:
17:5a:df:1f:87:22:ed:87:13:61:ac:60:0f:42:6e:ad:88:66:
fc:06:46:ef:12:3e:b8:8a:53:02:df:66:9b:e8:8f:12:7b:15:
a8:34:c7:49:c4:32:f6:a8:58:a9:54:2e:7c:e4:b8:ef:66:55:
f3:46:72:ef:11:86:cc:65:bf:bb:04:da:56:b9:ff:a9:e8:f3:
53:b5:0a:51:bb:3c:bb:c4:84:2e:5f:0f:09:d5:17:d6:78:c0:
94:57:94:ba:ac:bb:9d:e2:05:07:15:3d:d0:af:1a:68:de:56:
25:95:ed:d9:e0:96:52:df:07:e0:17:95:f1:49:34:4e:cd:f7:
f2:a0:23:b6:74:ea:2e:14:1f:3d:fd:ba:cc:b2:48:00:c4:f9:
6d:1c:76:78:9d:c5:47:1d:ea:94:05:69:76:50:71:ea:e7:89:
b6:e7:d7:27:aa:9a:f1:16:0b:1b:cb:cf:87:27:fd:ef:25:ea:
d8:26:21:05:1b:d0:f3:c0:20:4b:97:a3:26:ba:16:9e:22:68:
8f:01:7d:17:46:3d:d0:5f:3f:26:9c:82:11:3a:d0:f3:a2:88:
83:9c:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:42 2026 by rpki-client