Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: JP+CtCUtRRDaWIkxQH7nefuoQj1K7xF3mJz1yn1HfbY=
Subject key identifier: CE:6D:F8:AD:EB:5C:AA:57:2E:7A:F1:E4:BE:9A:46:E8:11:B9:C8:05
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019D2884D1D5BD0D6A238698E1E54FBE2B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 12B1
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: jeD0X+eDT1vxOHiXbtyLU/Y02QsoKfxSHGYkgXuGts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d1:d5:bd:0d:6a:23:86:98:e1:e5:4f:be:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=ce6df8adeb5caa572e7af1e4be9a46e811b9c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:ca:75:05:4f:19:6d:33:a1:0c:c8:7d:bc:
67:17:c6:bb:67:e0:58:49:f8:6c:fb:2c:1b:8d:c3:
b8:48:0e:05:89:c2:57:a3:49:56:3e:89:83:e4:b3:
80:89:21:37:c6:52:f6:b0:43:ae:8f:a8:78:50:d8:
1d:ec:a1:b6:12:88:5f:54:85:11:2f:14:8e:2d:a3:
91:8f:f9:65:02:f2:23:d4:e1:64:77:5d:48:c2:ca:
fd:ca:fb:09:68:56:aa:3a:9b:09:5c:12:e8:87:51:
ad:9d:76:b2:51:85:40:c2:af:29:fe:03:fa:98:96:
e3:cf:21:8b:2f:05:e0:a8:95:bb:27:d8:f8:29:59:
5a:ed:2b:2e:a1:57:16:8b:3e:f3:30:bc:c1:8f:5a:
b0:93:b2:b6:22:40:4d:04:11:ef:6b:9a:f5:be:35:
27:c8:2f:44:f7:b9:62:90:74:7e:85:c8:c8:88:04:
87:ed:db:62:09:c9:59:3d:4c:6d:a3:c6:d1:5e:79:
54:a6:e9:3e:e6:1e:3c:bd:e2:9c:39:f0:13:a8:03:
2b:7f:38:e7:c5:d6:83:ec:f3:b5:87:09:62:a9:ae:
ec:0c:75:15:96:f4:5c:22:e6:e3:a1:1c:24:52:bd:
ed:07:a1:56:39:a9:28:6e:16:ea:7c:85:a5:7e:fb:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:F8:AD:EB:5C:AA:57:2E:7A:F1:E4:BE:9A:46:E8:11:B9:C8:05
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:12:66:0a:b7:07:65:6e:71:41:7e:6b:c8:39:ab:82:99:94:
10:31:d2:51:11:f5:d1:53:29:96:1d:7b:73:c6:f0:c6:55:03:
77:99:f5:bf:78:69:20:39:84:01:6c:ca:bc:5f:78:a9:a2:bf:
15:5f:c1:1c:ff:60:07:34:b3:84:99:83:f0:f1:ba:84:1c:bd:
af:e7:02:b3:a8:5b:20:76:f6:4b:ae:a4:3f:80:e9:01:bb:8a:
ee:2e:39:4f:49:96:5e:99:05:26:f2:5d:3e:6c:8b:39:79:f1:
d7:86:77:f7:84:50:80:49:b4:1e:e2:54:03:76:a2:be:a2:bb:
3c:c8:fc:26:c8:98:21:cd:4e:bd:e4:c8:28:40:1d:a8:a0:67:
19:3b:7a:eb:e2:18:3b:51:7c:8a:b2:5b:16:b5:7c:7e:05:0b:
c1:8b:cc:71:86:3c:de:2a:11:0a:56:b7:9e:90:4b:13:08:42:
48:1c:e9:49:4d:7b:25:cd:1f:41:73:44:2f:84:e4:00:44:e7:
2f:78:b6:9c:96:71:f3:bc:64:06:ad:bf:2d:42:bd:65:17:d1:
9a:90:66:2b:e9:b7:73:1b:b1:29:8b:86:ae:3f:6e:c9:08:6a:
b3:34:a0:81:06:88:7f:b7:4a:07:37:2c:58:87:a9:49:69:fe:
9e:02:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:04 2026 by rpki-client