Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
File: fIJLILMxe7jIm-pPDzTQlC0dcU4.mft (raw, json)
Hash identifier: 6AtZeshcD+vU/ZN/YHVv8vGbFdM6rZZC4va2S2fHNxM=
Subject key identifier: F7:89:65:17:53:4C:3E:C0:0D:31:CB:53:00:82:64:41:02:15:81:60
Authority key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
Certificate issuer: /CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e
Certificate serial: 019D28841C98BBAB9493E7B8F8C9FA8D67A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: fIJLILMxe7jIm-pPDzTQlC0dcU4.crl (hash: qM79Bf9TzzKXF1iFsRzTX0X2/R0ZNzsIBygdv6UaybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1c:98:bb:ab:94:93:e7:b8:f8:c9:fa:8d:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=f7896517534c3ec00d31cb530082644102158160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:60:27:51:2f:0c:e3:ff:d8:8e:fc:70:cf:
f6:f4:23:0c:05:84:b8:fd:c4:59:89:09:2b:24:01:
9c:c3:13:e5:ac:86:72:ea:46:d8:1f:fe:67:c0:3b:
db:74:a8:00:30:5c:eb:51:c5:01:ca:53:93:bc:f9:
70:e2:f1:23:69:d2:44:95:5d:53:09:ad:b5:12:16:
ea:30:53:00:3d:aa:55:e4:70:58:9f:e2:8f:6c:af:
c7:90:6a:a8:1a:3a:a7:d4:45:5c:0b:d1:04:13:d9:
d9:d9:84:c2:89:14:cf:83:44:63:a9:64:53:8e:81:
1f:4b:59:c0:61:b7:c3:2c:99:5b:16:73:80:81:fc:
45:18:7f:0e:85:bc:38:48:49:a9:e1:04:53:23:b3:
13:a1:eb:b8:d1:60:09:74:18:a0:c3:0a:9f:93:8d:
12:a3:66:64:63:57:77:45:0b:05:e7:ba:45:b0:26:
28:4d:27:06:36:5a:69:45:67:f7:b7:e6:f6:75:e2:
61:05:28:f3:4c:2a:d6:60:7b:28:71:0d:68:b5:95:
80:eb:02:44:d5:3a:73:55:20:6e:88:c1:bb:d7:50:
9a:43:31:cc:c0:a8:0c:49:27:5e:c7:53:47:97:83:
4d:2a:b0:49:37:b7:38:8a:69:05:bd:10:1e:56:8f:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:65:17:53:4C:3E:C0:0D:31:CB:53:00:82:64:41:02:15:81:60
X509v3 Authority Key Identifier:
keyid:7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:ac:a1:ea:19:a8:36:42:4c:c2:68:d9:71:2d:3e:68:29:
d4:92:21:aa:cb:74:fb:72:2b:74:d3:52:aa:4c:02:ae:0e:cf:
55:f9:ec:4f:9c:fa:a1:0a:5e:44:e7:f6:2f:08:c8:d1:75:1c:
11:ba:a5:d7:11:7a:c2:92:04:30:f2:db:7b:1c:24:9e:39:98:
83:9b:5a:33:8d:ed:b4:f5:f9:61:e6:02:6f:78:c9:44:0b:dc:
fb:60:be:9d:77:e2:0a:4c:95:0f:34:b8:39:c1:92:3c:c0:44:
a4:9c:c4:bc:4b:9c:00:38:73:8d:8f:36:29:a1:fa:72:e2:f1:
ea:33:8f:0c:fa:42:ff:90:5a:83:80:c0:06:ca:fc:9d:62:7e:
8d:3f:0b:9f:97:38:aa:ca:5b:c0:44:e2:f2:0b:6a:3a:0a:38:
5c:81:b7:96:c1:71:fb:60:dc:d0:83:b8:63:ca:e5:ed:fd:c8:
4f:76:16:ad:8d:20:f4:08:65:c3:6f:5c:9b:0a:30:5b:f1:ee:
49:2a:27:67:07:e6:a0:ec:ce:ac:fa:f9:a7:1c:98:8d:9e:89:
c1:b2:0f:bb:c7:9b:8a:fb:b7:9d:92:66:25:4c:0c:c7:75:d0:
b3:6e:42:a1:fa:65:f3:e1:11:88:24:35:4f:51:7f:e7:05:90:
b9:3f:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:24 2026 by rpki-client