Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: kt0C1oReN4gUn1t+R+Td6STZniwDbpRM6W/W/QQZT6Y=
Subject key identifier: E6:A2:EE:EA:06:BF:F5:1D:9F:95:79:1A:FE:88:B3:E1:87:E1:93:79
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 019E1C470410E5EE3DCAB21373F64E0C31BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0855
Signing time: Tue 12 May 2026 13:01:16 +0000
Manifest this update: Tue 12 May 2026 13:01:16 +0000
Manifest next update: Wed 13 May 2026 13:01:16 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: n324rqB2Tmd8MJkE6/GzzNm4+cTpFzOyxkocBVoC6jU=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:04:10:e5:ee:3d:ca:b2:13:73:f6:4e:0c:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: May 12 13:01:16 2026 GMT
Not After : May 13 13:01:16 2026 GMT
Subject: CN=e6a2eeea06bff51d9f95791afe88b3e187e19379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:79:1c:2f:2a:94:32:40:66:83:1a:34:00:
e2:de:6e:74:ca:82:b6:85:ce:7b:9e:6a:f9:81:58:
14:2f:e0:ac:e1:1c:1b:7a:ef:cd:e7:43:7d:a1:b5:
26:b1:f8:04:97:4b:19:16:30:b9:c9:8c:5e:c8:21:
d7:84:80:9d:00:9e:de:6a:dd:4c:62:e4:b2:68:bd:
77:bc:7d:3e:ef:e4:a0:78:86:a0:e3:b9:83:e4:b5:
54:bb:be:33:5e:c3:9f:58:cb:56:5d:30:89:6d:2f:
f4:d9:32:50:75:35:02:72:31:32:ab:9e:b0:73:80:
a7:05:37:b4:ac:93:5b:ec:21:6b:0b:ee:cd:71:e2:
97:bb:d7:d5:0a:92:ff:a5:80:1e:60:f7:76:74:e5:
82:8b:17:56:c0:15:6a:47:85:cb:70:43:ee:c3:9e:
f1:f5:e1:51:4a:6a:aa:93:ad:c3:17:4b:95:dd:66:
35:5d:cc:ff:fa:43:89:b3:c9:34:bd:ad:60:d7:aa:
96:37:b9:7d:31:d6:e1:9c:72:4e:8e:60:55:8f:be:
22:66:2d:cc:0e:21:62:a8:36:d4:cb:e8:65:c1:27:
5a:02:34:30:90:5f:89:8c:75:c9:76:33:a5:02:b3:
45:a2:3a:e1:78:65:7d:4f:0b:5a:4f:e9:c2:56:50:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:EE:EA:06:BF:F5:1D:9F:95:79:1A:FE:88:B3:E1:87:E1:93:79
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:50:fa:38:bb:89:49:0d:36:ff:4b:c8:41:54:03:1a:a0:
d2:66:74:08:fd:6b:35:6f:bf:1f:31:c5:b0:aa:79:05:b2:62:
14:71:fa:4f:39:49:80:8c:99:e5:fb:88:f8:e7:94:e5:9f:5b:
57:45:60:ab:98:a0:91:0f:94:e0:a4:f6:b3:38:41:2b:3c:3b:
fd:35:ec:4f:b6:96:2e:97:78:a6:5f:2d:0b:ba:ca:45:58:97:
5e:67:c0:d4:2a:33:24:ed:9c:73:7b:93:d6:86:dc:22:a9:fd:
f6:2c:5e:ca:b4:cb:ad:de:d7:bc:91:85:46:4d:59:d9:ee:b0:
38:ce:28:8d:26:17:8d:4f:81:b6:2f:a1:04:40:ee:43:9e:9b:
d2:df:e4:d3:b4:3b:5e:67:cc:7c:e1:11:e8:f3:ff:75:2b:0f:
78:fa:cc:fa:ee:ea:08:4f:87:6d:65:fd:34:a0:6d:a7:bc:14:
fe:3f:00:01:77:9a:06:a4:71:c8:0a:8a:dc:ab:52:3b:6a:6c:
10:e6:e5:1b:3e:9e:d5:d3:2b:c3:73:4a:8e:b3:9b:b7:83:06:
80:26:fb:4a:98:de:77:7c:05:7e:c9:49:7e:60:c5:62:d8:7d:
ac:8f:0c:d1:aa:39:29:56:0a:8a:03:de:ad:ab:e1:7e:63:14:
25:a9:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:01 2026 by rpki-client