Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: zIOfTBwEqCAK13ycZOwcW4wseMx1vKmPrKwCnSZf9tw=
Subject key identifier: 82:F3:24:93:FF:1B:3D:6F:26:0D:A2:72:60:5F:C9:CB:B5:5F:85:00
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019D2AE0ED96CE23295ED7791EFC172B3F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0FE8
Signing time: Thu 26 Mar 2026 16:01:17 +0000
Manifest this update: Thu 26 Mar 2026 16:01:17 +0000
Manifest next update: Fri 27 Mar 2026 16:01:17 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: QS5BP6ksqUw1TPS2awOHPh1AEoyZT9RaPRcT42MfXQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ed:96:ce:23:29:5e:d7:79:1e:fc:17:2b:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Mar 26 16:01:17 2026 GMT
Not After : Mar 27 16:01:17 2026 GMT
Subject: CN=82f32493ff1b3d6f260da272605fc9cbb55f8500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:5f:d0:c7:60:a0:71:2a:60:e0:9b:3a:13:
dc:d6:11:70:9a:68:a2:4d:ab:c5:82:21:54:ff:6a:
04:ae:e4:13:19:f3:ba:d4:1a:55:7b:47:a0:07:00:
a6:f7:94:b5:72:0b:2f:0f:d7:98:b7:f3:3c:37:fe:
d7:b2:17:03:f2:0b:61:c6:2e:02:7b:b9:ea:47:a7:
99:3b:40:c5:f8:ee:c8:36:32:cd:4c:57:7d:a4:7c:
6f:58:73:cd:89:6a:56:11:97:0d:ac:81:1b:e2:1f:
e0:a0:e3:b8:5a:f6:81:60:cd:99:93:b4:55:f9:9b:
46:a1:da:3c:48:b7:0d:db:3a:93:86:96:0d:8a:73:
b6:dd:45:9c:a7:f2:44:0f:d8:fa:c9:64:04:c5:5e:
28:80:3c:75:5a:ec:d3:db:1d:d3:44:ea:4c:34:d3:
19:24:ef:5a:62:c6:cd:af:a2:e8:5c:94:b2:4c:41:
1c:b9:5e:13:7a:33:fb:f4:47:35:d4:7d:26:ea:ae:
39:6d:51:bf:05:71:d0:e0:2d:69:9c:1c:cf:cf:d1:
a2:cd:0b:dc:8a:f6:e9:d8:42:77:f0:e5:7c:3b:6f:
f9:81:fe:c5:08:0b:5e:41:e3:30:c3:84:0e:7c:c1:
d2:21:8e:0e:25:4c:91:cb:c8:c8:03:d1:76:02:9d:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F3:24:93:FF:1B:3D:6F:26:0D:A2:72:60:5F:C9:CB:B5:5F:85:00
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:6a:94:bd:27:ae:5d:39:65:da:e9:55:8b:2c:9e:d7:51:
8d:3a:9e:b3:54:54:b7:1b:43:c7:f2:79:a5:7f:ab:e1:92:c7:
d7:77:77:43:15:29:df:02:16:fd:2b:00:08:05:aa:a0:6f:23:
17:66:b3:11:f5:1e:42:0e:d0:0b:ed:c2:1d:a9:31:39:4e:7a:
0a:03:a0:b3:24:6b:8c:9d:23:0f:64:9a:72:ab:b2:8d:fb:59:
2a:0e:91:2c:2e:a3:19:d3:52:38:43:af:e1:33:8c:30:d9:43:
08:53:65:21:2e:3c:65:45:42:13:e3:e3:e1:fb:ac:e6:bd:dd:
0a:d3:c1:de:aa:d7:7f:ee:07:02:a5:f9:f3:3b:c1:8f:5b:92:
53:93:f4:89:e4:00:f5:ec:1f:60:1b:34:7c:55:2f:f4:f7:60:
5b:ed:63:ab:a4:c6:07:b6:ea:d8:bf:c9:87:e4:1f:01:df:53:
11:4e:c7:0c:8d:fe:9e:a6:b4:22:84:8e:5b:f7:90:72:95:82:
bc:2a:ab:97:9b:f8:a7:11:5c:cd:9f:4c:cc:ed:96:ff:af:f4:
92:dc:a4:e3:2d:ab:ca:f8:51:ae:d2:14:8a:eb:60:47:bb:c1:
c4:b9:51:8f:8d:34:db:9b:3d:49:f2:a8:f3:23:31:ef:5f:f3:
87:fd:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:09 2026 by rpki-client