Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: L7APaQba0lw4dKeRF95BdXfgYHd5zGK8FxD2bz29wVc=
Subject key identifier: C6:B9:CD:3C:D8:18:37:E8:0A:29:ED:C8:8F:7E:DD:BC:4F:00:56:14
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 019D27DF78B4880EB88788D44C63086A38AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 159D
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: gEqrfLJm0/pcdrVJT8E3ZvGqP1O0SBKW+bw3opOzsZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:78:b4:88:0e:b8:87:88:d4:4c:63:08:6a:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=c6b9cd3cd81837e80a29edc88f7eddbc4f005614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:73:fc:73:4d:fd:c9:80:6f:62:df:28:0b:
72:83:f0:2a:63:54:dd:1a:b6:23:cf:ad:ae:bc:15:
b9:31:83:53:8b:35:3d:dd:df:c4:5d:1c:0c:9f:0d:
dd:5c:72:fc:51:fb:c4:a6:fe:3a:49:93:39:92:f3:
a2:8e:1c:a8:d9:15:00:c6:a1:45:0f:85:58:a9:cf:
e7:8b:2c:6e:f8:bb:a7:4d:9c:a3:5f:85:f1:5d:96:
50:1a:c2:1c:6c:ac:9c:40:2e:92:4a:bb:3b:7c:b0:
f6:43:c0:21:af:32:86:cf:8e:da:56:b9:76:fd:28:
9c:e0:5c:85:5b:e1:dd:eb:e6:06:c0:e6:84:37:ca:
52:a9:03:dc:e8:ef:75:c1:a1:c6:97:33:71:2a:f9:
d1:db:5a:35:1a:a9:10:46:ac:81:c5:30:ec:17:59:
fd:12:d7:40:f5:0e:1f:85:22:16:a5:7d:60:bf:99:
1d:fb:b0:34:0a:0f:9a:6b:c2:7d:f0:51:b0:2f:75:
51:12:d2:18:34:32:1c:9c:2a:f8:76:81:d7:fc:73:
14:12:c2:52:83:e3:d5:93:b1:d2:c5:37:f6:9f:d3:
dc:cc:db:ba:0f:17:d0:a8:0d:d0:33:ea:50:ce:22:
95:06:3b:62:d2:22:54:5b:29:1c:4f:e1:ef:2a:33:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:CD:3C:D8:18:37:E8:0A:29:ED:C8:8F:7E:DD:BC:4F:00:56:14
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:9e:91:f8:d4:51:b3:28:c0:c9:fb:06:c7:b1:11:d8:48:
0d:69:48:85:14:64:8e:94:10:bd:4d:d6:45:67:97:77:11:a6:
fa:cc:0f:ed:93:82:80:cf:1f:2c:be:80:e3:ae:19:15:fe:cc:
c5:50:a1:a5:c5:a7:7a:f3:5f:74:fa:85:f7:51:ef:33:3b:0b:
22:23:df:07:d4:f8:4e:f1:ea:ab:22:7e:d2:8d:a9:db:10:6f:
35:57:19:c5:89:69:ac:a9:30:51:fd:f2:20:fd:2e:0e:c3:09:
b5:f9:0d:6b:18:0c:84:1a:ae:93:ee:ab:09:bf:46:1d:60:38:
bb:73:0a:19:55:4f:ca:6b:7e:ca:8f:4a:c5:90:70:8f:34:cd:
d3:1c:1f:40:c8:1b:0b:7f:9d:2b:ac:67:c8:af:1d:c0:96:67:
8a:77:b9:54:a4:db:23:83:42:7b:b5:ed:6c:cd:5a:3a:97:d8:
cd:0f:51:f1:91:43:a0:12:c4:6a:90:26:ad:90:21:b1:a5:95:
43:b8:32:c4:51:12:49:fa:5d:12:5f:bc:84:a5:91:2c:a6:97:
cc:11:67:7d:0c:8b:be:45:c8:f1:30:5e:6d:f7:9e:92:22:b6:
5e:a0:99:00:5b:d5:dc:2a:56:7c:96:b1:12:1a:53:3c:c2:a5:
d4:b5:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:30 2026 by rpki-client