Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: oNZfLKygtL222ik1zo20q3fyKIzUH19ccV2jrLInHmY=
Subject key identifier: AB:68:8B:C2:D7:A7:9E:A7:F8:4A:FF:8C:36:C9:67:D1:EA:90:76:42
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 019D2583B5AE1591866F6A2CA4580122BF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 1201
Signing time: Wed 25 Mar 2026 15:01:21 +0000
Manifest this update: Wed 25 Mar 2026 15:01:21 +0000
Manifest next update: Thu 26 Mar 2026 15:01:21 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: Eljqqx21OKs99wJUEpi/nmEhfinFqjKWSS+qbUdEhjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b5:ae:15:91:86:6f:6a:2c:a4:58:01:22:bf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Mar 25 15:01:21 2026 GMT
Not After : Mar 26 15:01:21 2026 GMT
Subject: CN=ab688bc2d7a79ea7f84aff8c36c967d1ea907642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:63:d5:a0:80:c6:5e:7d:67:a1:10:a3:96:
3a:53:5c:99:e9:e9:b3:61:59:36:76:db:f1:f3:d9:
34:74:a7:97:72:77:23:27:f4:9c:20:ff:b8:50:17:
47:9d:98:ac:2e:72:03:46:61:b8:9a:ea:a5:16:dd:
61:39:3e:ce:af:d9:ec:c6:e0:70:92:ee:b9:3b:7c:
42:9c:2c:e1:20:13:16:d2:01:8c:73:27:a8:f2:f3:
8d:43:c5:4f:40:cc:18:e0:ee:9f:9d:00:8d:2c:b7:
75:2f:99:19:30:39:81:4b:43:68:47:05:6a:d7:91:
65:e5:74:fb:56:4f:1e:76:64:dc:e1:8d:71:83:d0:
e3:0c:48:9d:ec:79:09:a1:17:79:82:5c:49:50:63:
dd:75:aa:2c:55:f4:c1:ca:24:f3:08:50:ae:ab:56:
28:f4:14:bc:22:85:24:2d:da:8f:44:fc:f1:01:77:
24:70:d0:2c:66:21:80:c8:6a:72:ca:9a:a2:55:6a:
c3:fb:af:d6:07:ed:c0:25:8e:25:2e:c9:d0:1b:8d:
24:ce:b6:52:75:68:cd:4c:56:0b:38:8a:d4:58:6f:
65:5d:ae:ac:a4:b3:29:56:f4:ca:c4:12:35:06:17:
e6:0b:98:37:99:d1:aa:45:44:1c:26:e0:4b:67:5c:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:8B:C2:D7:A7:9E:A7:F8:4A:FF:8C:36:C9:67:D1:EA:90:76:42
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5b:9d:b8:a4:5f:1e:f8:02:52:5f:9d:a1:07:d0:19:50:a1:
be:43:a4:29:b5:8d:91:63:8e:03:f6:fe:49:3d:3a:9d:c3:ec:
7d:63:8c:fa:2d:d5:e4:1d:1a:98:1e:0e:d8:78:c9:00:77:d3:
68:7f:e2:39:78:40:1b:34:69:f6:e0:99:f9:05:33:21:dd:11:
e1:5d:4d:78:06:b1:92:a3:e7:12:f9:11:0c:e5:05:7e:b2:ff:
24:4a:22:08:65:2e:a3:27:48:d5:07:bd:f1:cc:41:e2:2f:95:
c2:7f:33:eb:45:d0:8d:6a:35:05:b8:60:a7:35:0b:e9:12:c8:
6f:dc:ae:f1:56:a1:6a:2d:73:bf:25:5f:10:c8:e2:97:e7:04:
46:22:34:02:cc:b1:b0:67:30:2f:6e:89:ef:4a:8b:c9:7a:f3:
69:0f:55:06:a1:c1:a3:49:c2:e5:19:53:74:7a:cd:69:9d:51:
d7:ce:5c:62:e9:95:82:74:8b:32:eb:d9:0f:70:c6:da:7f:67:
f8:cf:e5:d9:fe:2a:ef:0a:a0:e5:6b:74:6b:e6:40:43:ad:00:
0f:ec:86:66:37:f8:75:48:a2:77:c2:31:4f:f8:32:ca:dd:90:
ff:ab:53:23:98:b6:89:65:d3:f2:ac:b3:8d:6a:1d:72:d9:81:
e5:51:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:04 2026 by rpki-client