Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
File: frHgvC-KBA2BVYCM9LKcVM2tlEI.mft (raw, json)
Hash identifier: +nKV53sef0sD4RcldWHNM2N/idNqgkpXEuGGSxxroi4=
Subject key identifier: 39:B7:9F:09:DA:29:0E:BD:A3:D0:3D:03:B5:35:98:D5:8E:4A:7D:14
Authority key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
Certificate issuer: /CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Certificate serial: 019D292970E57ABBCC3783D5F8611495A6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
Manifest number: 01E9
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: frHgvC-KBA2BVYCM9LKcVM2tlEI.crl (hash: dFIRxNIqT1FhxroVBqaEaFiqQHhgEHx+p1V2BsQKApk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:70:e5:7a:bb:cc:37:83:d5:f8:61:14:95:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=39b79f09da290ebda3d03d03b53598d58e4a7d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:9c:1d:a5:5d:05:2a:56:0a:75:2f:c6:4f:
65:ae:62:d2:33:a6:4b:97:95:d4:aa:a2:9a:44:53:
44:65:2c:61:07:cc:9b:4e:84:a1:2d:b4:20:8f:30:
ca:32:5a:9b:81:6c:fb:73:17:23:43:31:17:2f:ee:
e7:b9:9c:b0:5e:f6:13:d4:7c:e0:53:f8:92:2d:6f:
69:7c:83:82:af:80:24:cb:97:9e:20:c6:c1:61:7c:
48:ce:64:ff:ba:46:9b:93:74:06:be:b2:0f:20:40:
47:ff:95:79:a0:9f:87:67:8d:c0:f3:49:72:be:d9:
e2:45:4c:15:f4:0e:30:7f:6c:50:ba:52:84:66:cf:
86:a5:b8:5b:90:42:b9:8b:f4:a2:3b:fd:1b:ce:f8:
7b:df:e1:cc:a6:c5:c7:4f:28:8f:46:bc:0b:13:bc:
36:d0:f8:05:14:61:67:67:bf:5b:bf:1c:4b:dc:dd:
ad:2c:03:64:37:2b:9b:34:74:35:08:6b:f1:0b:8c:
b0:5f:52:68:a1:51:86:47:a5:b1:61:44:3f:d9:9d:
29:14:59:f3:c9:0f:96:12:1e:f6:70:ad:b9:c0:37:
f7:51:52:9b:a5:3b:29:ed:b5:0d:f8:be:ba:c2:3e:
c3:db:f3:e0:45:8b:34:e2:68:9f:a3:61:b5:b2:45:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:9F:09:DA:29:0E:BD:A3:D0:3D:03:B5:35:98:D5:8E:4A:7D:14
X509v3 Authority Key Identifier:
keyid:7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bb:3e:0e:84:3f:81:a7:f1:28:ee:f7:49:13:dc:ba:f7:54:
da:9f:fc:bb:45:d6:16:2d:5c:fd:c1:bc:48:cf:27:47:9a:c8:
62:25:d4:60:f0:9e:6b:6c:13:43:8b:f9:79:b7:72:04:45:f8:
f8:48:52:7d:a1:92:dc:78:a8:6e:a3:4b:9d:66:ba:16:77:d6:
19:f5:c7:b9:27:8f:3c:31:95:d8:0d:f2:85:7a:31:38:11:5c:
6b:e4:19:a3:44:07:a8:72:04:c2:68:63:a0:b6:8e:5a:42:fb:
3a:af:89:9f:a5:39:6b:29:a0:61:b5:6a:37:81:9f:a6:ce:ed:
2f:94:6d:35:4d:5f:d0:50:7b:d7:28:61:62:ce:18:c9:04:ca:
06:a4:16:0d:4c:f2:75:63:19:b5:e4:36:43:d1:6f:4d:99:53:
2b:94:71:fa:ae:86:63:7f:61:89:34:80:0e:0e:4b:1f:dc:25:
bd:11:3e:23:3a:60:bf:d1:0d:a2:ce:70:da:6f:32:86:c0:68:
0a:67:c9:da:6c:a4:32:79:69:f9:52:c0:34:8e:65:a6:43:c9:
da:91:ff:2c:0c:90:7f:4c:9b:35:bb:1d:b6:99:0b:f3:b7:98:
20:0b:32:0e:c7:f0:26:d1:d8:1f:02:3a:9a:38:46:8b:f9:24:
3b:cd:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:37 2026 by rpki-client