Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json)
Hash identifier: Mgg+e30sAs1eL5swyRHJF6LRfJqoa/HEeijIz3s1AZ4=
Subject key identifier: 2C:F1:24:AC:80:DC:58:2E:94:9C:64:EB:63:F3:E2:7D:CE:0E:C5:41
Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Certificate issuer: /CN=1686f7be9ba171c32746ab4ed20be882bd304356
Certificate serial: 019D26284744DFBC47D6263A4BA8440D8BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
Manifest number: 0615
Signing time: Wed 25 Mar 2026 18:01:06 +0000
Manifest this update: Wed 25 Mar 2026 18:01:06 +0000
Manifest next update: Thu 26 Mar 2026 18:01:06 +0000
Files and hashes: 1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: rfOe66E5nl+8WbZXxrdTeW+9/DfOz2mV9ClDn8QQnPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:47:44:df:bc:47:d6:26:3a:4b:a8:44:0d:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Validity
Not Before: Mar 25 18:01:06 2026 GMT
Not After : Mar 26 18:01:06 2026 GMT
Subject: CN=2cf124ac80dc582e949c64eb63f3e27dce0ec541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:90:d6:cd:39:12:72:67:1a:28:2f:3e:a3:
c9:8a:46:f1:7f:9f:2b:b5:b7:c1:bd:df:4c:c8:59:
bc:70:e4:8c:d9:84:7d:2c:dd:4e:27:21:8d:04:35:
49:38:70:15:9e:6d:c2:43:54:4c:7f:7f:6c:7a:ca:
54:e6:70:4d:c7:c6:23:c6:ed:2b:34:27:ae:f6:98:
79:23:48:43:9f:80:7e:0a:1f:ad:e6:94:45:38:af:
44:d7:27:4c:71:33:4d:a0:c5:fb:98:0e:64:7a:2d:
14:19:64:7c:77:99:3e:fd:e7:bd:aa:5c:98:c9:f9:
d9:cb:df:52:3d:17:58:10:46:22:33:07:11:57:4a:
d9:49:a6:c0:ca:88:ba:84:46:4e:6e:d8:d8:61:4d:
cf:b6:1d:3d:4d:68:96:66:29:09:5a:7b:74:cf:02:
81:12:8a:90:52:c0:3c:b9:88:cf:74:46:b2:2b:62:
af:01:9d:04:40:7d:9c:f8:94:92:04:c0:c9:a6:53:
e3:f5:eb:a5:29:bf:55:c5:02:45:14:36:a9:f2:a1:
a2:f6:04:e6:76:e1:27:12:42:f3:c0:01:d7:f6:f8:
09:59:d1:8e:a9:47:a3:60:84:22:0e:8b:37:8f:2b:
c3:31:f8:eb:99:32:03:a2:25:eb:26:33:8a:6d:73:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:24:AC:80:DC:58:2E:94:9C:64:EB:63:F3:E2:7D:CE:0E:C5:41
X509v3 Authority Key Identifier:
keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:34:4a:8a:78:0a:85:59:6c:39:99:a3:08:49:ab:f4:7c:2b:
36:8f:ee:e6:17:71:7c:3f:1c:4a:93:5f:7c:8a:bb:c3:e2:63:
fd:1e:d0:f4:31:18:1a:36:dd:bb:19:0b:5f:8e:b8:dc:12:90:
c0:fb:aa:8b:93:32:f2:4f:ee:eb:e6:5b:81:dc:a8:a3:19:3a:
11:38:38:f7:39:c4:4c:96:f3:d3:d4:91:f6:da:8c:33:8f:85:
16:1b:0f:4a:26:7e:7a:6f:9b:06:fc:97:f9:23:31:2f:d2:c8:
ff:6a:47:a2:a7:f0:32:f1:52:61:6d:1e:06:1b:e0:03:61:d9:
7b:8a:5b:3f:5d:2a:d8:b6:27:82:04:30:65:0a:7f:f5:c6:18:
b1:ca:9d:29:16:33:00:ab:8b:cb:6a:09:99:3c:92:6b:4e:9f:
16:09:2a:b3:8e:68:a6:f8:28:a7:62:9f:fc:d2:71:8f:c6:f0:
f5:fd:2f:f0:ac:b4:af:28:ac:88:9c:8e:6b:5b:67:4b:fe:29:
75:b9:bb:6a:d5:52:3b:33:26:b8:b3:0d:5b:45:95:17:69:59:
cd:98:da:84:42:f9:9c:3e:73:be:71:43:8f:ae:8a:eb:0a:9e:
e2:3b:b7:54:d9:0d:4f:ce:67:74:48:5b:6b:af:5c:d6:c9:3c:
0f:90:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:23 2026 by rpki-client