Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: pNFoIebuo8iIudzTX5ccDBHUS+YXWfPRcBIhrq9WZb8=
Subject key identifier: F2:CA:4D:71:E4:21:B4:1E:CC:6A:9B:B2:87:37:BE:3A:3C:85:5A:FB
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 019D2AE12CA380F7732EEE88167F817660CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 051B
Signing time: Thu 26 Mar 2026 16:01:33 +0000
Manifest this update: Thu 26 Mar 2026 16:01:33 +0000
Manifest next update: Fri 27 Mar 2026 16:01:33 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: HUYkuTmyIoCcJs7IAcoaxSU7nLfKPzVj6egiPdCcnnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:2c:a3:80:f7:73:2e:ee:88:16:7f:81:76:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Mar 26 16:01:33 2026 GMT
Not After : Mar 27 16:01:33 2026 GMT
Subject: CN=f2ca4d71e421b41ecc6a9bb28737be3a3c855afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:81:7d:27:0c:5a:0f:0e:bb:99:6d:28:c8:
b8:8b:83:7d:f6:c6:04:3d:b3:1d:4e:b7:e0:37:8e:
55:8a:8c:eb:aa:68:fc:8a:be:ba:88:9a:80:ea:dd:
42:cc:4b:05:d3:db:0b:a0:d5:c8:43:f0:f7:28:c1:
12:2d:31:db:73:e6:5b:65:3c:63:30:60:5c:6e:97:
f5:71:2b:cf:a6:3a:bb:e4:7d:3a:fb:60:92:dd:cd:
bb:88:f5:00:31:2e:26:ae:68:9c:70:3e:3c:ec:33:
de:82:92:ed:5f:17:d8:8d:1e:15:a7:30:eb:9b:2b:
68:bd:0f:9b:dd:3f:cb:43:a8:b3:a4:77:ce:fc:fa:
ad:ff:ee:f8:c6:a4:cb:c2:21:fa:ec:58:9c:c2:a7:
16:4e:11:b6:62:c2:19:21:3a:ef:db:45:db:bd:04:
95:cd:c7:2f:43:c9:be:19:4b:49:af:0f:2f:f9:89:
9e:54:d8:7e:7f:1e:e1:5b:0f:f1:0d:d0:46:ed:0f:
6f:44:cf:c0:24:8a:f4:90:ad:e8:ef:03:ab:9c:93:
95:d7:5f:3b:fa:43:2e:7f:02:5e:69:8d:09:f0:50:
87:ef:c7:c9:ee:b7:d9:7c:f2:a2:62:b5:96:b5:c2:
a7:28:22:9d:d7:15:6d:77:7d:62:2e:3d:c1:f0:bc:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:4D:71:E4:21:B4:1E:CC:6A:9B:B2:87:37:BE:3A:3C:85:5A:FB
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:b5:56:f3:c6:01:fd:b5:42:80:c5:35:47:64:4d:73:3e:
18:76:4d:a6:cb:e4:1f:a7:7e:be:b1:45:95:5c:11:e4:17:2e:
2b:21:87:a4:b0:76:1d:c3:24:61:58:cc:91:a9:11:ea:34:00:
66:b0:fa:03:f5:55:4b:1d:47:43:db:ea:d8:e8:72:b5:36:74:
f9:88:fa:ad:1c:85:27:ba:d1:7d:f6:61:58:a0:2b:3a:7a:15:
9f:8f:7f:a1:cc:a3:95:24:8b:a6:b1:a5:f2:cc:fc:76:0d:d0:
ff:1a:73:35:20:12:b9:8c:bf:e9:90:67:e1:80:b6:66:93:46:
7e:03:57:0d:82:25:28:31:58:3a:65:4b:39:38:92:5f:88:86:
e8:f1:3c:0b:47:f2:84:92:c3:4f:8c:2d:61:d4:49:4e:ae:87:
a2:3d:92:55:08:8f:3a:83:9b:84:41:a3:ee:29:d1:d7:f7:85:
5c:0d:29:bb:18:1f:c3:62:35:71:54:2a:5e:26:35:01:dd:c1:
83:28:65:a0:8c:71:69:66:bc:65:52:7f:88:3b:27:ee:26:fa:
48:c3:15:1a:24:22:a8:ac:a5:8b:3d:6c:20:9c:e8:34:26:72:
04:05:fc:39:f0:92:cc:25:43:bd:43:40:cc:53:94:ed:5f:03:
d7:64:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:07 2026 by rpki-client