Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: ekKoQFl16nktveRh8HuE7QCvCm6p8l8hFKIBTJLPfFE=
Subject key identifier: 46:63:5B:CC:02:02:E8:E3:CA:03:F5:02:84:78:75:0E:F8:DA:26:CB
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019D284D8D96B85634EC00BAC3A4AB80A705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 1007
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: 13w9uSmXxe+pFdj3/Ify7xCJW3ENO5E5EsWq2z6FA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8d:96:b8:56:34:ec:00:ba:c3:a4:ab:80:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=46635bcc0202e8e3ca03f5028478750ef8da26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:06:8c:83:c6:6d:9d:dd:78:8c:ab:aa:04:
8b:b4:21:75:c3:f9:cb:d4:92:af:96:e2:9a:01:a6:
fb:ad:79:e4:d0:bc:5e:88:4c:b2:48:68:a7:50:23:
da:01:de:9e:7e:37:3f:20:fc:aa:c9:a7:37:12:86:
4d:d4:b3:5e:b9:c3:c0:31:62:a6:65:53:26:90:3b:
22:9f:01:78:cd:92:63:78:6f:aa:16:5d:54:a4:85:
a9:70:91:54:18:6a:65:de:e2:c5:da:af:93:ba:a7:
81:3d:4e:9d:09:c2:8b:4e:51:e0:51:c8:39:d5:bd:
b5:7b:11:88:af:97:b1:5a:a6:aa:5b:33:65:2a:a0:
b6:35:f4:c8:d1:ce:e2:71:45:86:57:81:fa:5e:01:
ef:40:b1:37:aa:23:cf:c4:22:05:9c:cb:0d:6e:08:
44:87:b0:23:e0:d7:c7:00:a3:7f:2e:a6:83:40:d9:
32:cd:fd:ad:3c:28:d9:6b:89:04:49:74:7d:b1:41:
e9:52:f8:93:b4:e4:02:df:2a:34:33:21:bc:3d:f0:
52:27:19:a7:68:d9:c1:e7:9b:19:bf:00:d6:62:a7:
6b:97:ad:be:fd:18:c0:45:02:09:4f:18:40:3f:48:
d6:65:fd:2d:40:c4:5c:1a:47:24:f1:04:89:c9:30:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:5B:CC:02:02:E8:E3:CA:03:F5:02:84:78:75:0E:F8:DA:26:CB
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4c:74:1e:64:ca:75:1f:3a:43:e5:01:69:88:16:13:02:1b:
66:77:b1:01:ef:37:d5:d1:09:fe:65:1d:83:6b:db:cf:b9:a0:
94:34:13:2d:70:6b:4d:86:99:95:34:3f:45:e2:e3:52:99:0e:
fe:2f:16:d4:f7:d2:78:39:98:32:47:5b:33:78:77:43:f8:ef:
de:01:6a:f5:b1:0d:6d:fd:fa:ce:57:fc:48:e4:67:9b:65:0e:
1d:48:81:49:d4:8a:c2:54:c9:a0:a5:9c:9b:b5:16:60:1f:92:
29:7c:63:06:a4:03:e8:17:92:01:46:bd:81:24:49:ef:d1:c6:
2e:11:86:7c:66:99:be:9d:a5:b5:3d:db:07:da:7b:a9:3d:b0:
61:4c:1a:c0:6d:ec:14:1a:3f:01:fc:ff:2a:5f:6e:31:5b:4e:
c9:d9:c5:76:ca:1e:6a:ba:cd:bc:0f:01:90:4e:6d:b9:86:a3:
a0:c7:df:35:90:c4:ff:34:9e:8e:ff:c7:76:74:ae:10:36:bb:
d1:5b:62:99:31:a7:60:e2:bb:51:b0:28:1b:c2:68:56:71:dc:
0b:cc:c7:9a:5d:68:3d:32:bd:2d:da:60:34:bb:4a:96:d8:89:
1e:97:d4:7e:e9:e0:22:0c:fc:01:c5:11:53:eb:2a:cf:a6:7b:
69:45:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:42 2026 by rpki-client