Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: cjF8x0KJ+S5bwHmL4YmrR1Uvh0SF5AQE6voQSmtksWI=
Subject key identifier: 60:7B:1E:81:AB:AD:82:F6:D4:99:89:FA:43:84:5F:6A:B8:B1:A7:E9
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 019D27726AE568E7E7761EB374B44FD7E245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: 0YEAqBvsXj9yXT9XFEqzh2UOUpp2M9iAZLSskTkNnBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6a:e5:68:e7:e7:76:1e:b3:74:b4:4f:d7:e2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=607b1e81abad82f6d49989fa43845f6ab8b1a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:48:99:c5:71:b9:71:f7:1a:7a:c4:9a:29:
05:3b:b8:04:7a:33:6e:88:71:5f:72:d9:90:0f:9c:
fc:17:37:00:8e:92:28:8f:7c:8c:69:73:85:18:9e:
72:62:70:a4:62:de:be:f1:2d:2d:d6:8c:b6:41:53:
0c:79:20:e8:b1:31:0b:7a:67:41:85:88:70:9c:dd:
bd:4a:43:4f:4a:f8:7e:08:12:b5:2a:17:42:2a:5d:
47:03:55:44:eb:64:94:37:77:ff:00:74:84:a0:dc:
a6:6e:60:91:5f:c0:44:08:b6:b5:88:fb:2a:3f:25:
65:f3:53:c2:9d:81:cc:e7:1f:92:df:a6:1e:53:3f:
dc:1d:a7:7a:03:e1:ac:47:72:23:01:c7:bc:df:d9:
05:e2:c4:99:34:55:b3:77:b0:b8:34:9f:db:d3:2a:
70:62:d3:a4:e2:87:cc:1d:13:a4:52:6c:14:0f:64:
3f:07:bc:23:65:1a:e5:c9:e2:19:0f:fb:f1:63:e2:
bc:63:e2:9c:c3:91:0a:07:97:cc:c9:cb:3a:84:3e:
55:61:77:98:87:9f:3d:e6:aa:28:96:94:4c:e7:0f:
aa:17:c0:4c:0a:71:2f:b5:4c:54:07:59:d9:4c:17:
88:fe:87:21:ed:17:ab:6e:f2:ce:64:bb:19:f2:be:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:1E:81:AB:AD:82:F6:D4:99:89:FA:43:84:5F:6A:B8:B1:A7:E9
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:40:f1:8b:03:ff:d9:cf:1d:ce:be:b9:ec:84:0b:7e:c4:4a:
77:f0:94:27:07:c7:e1:f9:d3:2c:b9:28:34:71:6d:cd:1b:5e:
ef:34:3d:2d:fa:9d:d7:ef:e6:83:bb:34:8c:18:a9:f9:cb:d0:
5f:8b:41:f5:33:55:f1:5f:5b:28:58:dc:b7:70:ea:8e:fa:e5:
da:a2:2d:8e:2d:44:ca:6c:98:06:cf:36:f1:33:43:a1:9c:39:
11:59:25:c6:94:b3:1a:26:a3:ff:ab:d6:f0:9d:6d:b4:f5:fd:
68:3c:97:34:3a:0a:37:1f:36:73:1e:5b:5a:76:55:e0:b0:a9:
41:a5:9d:50:b0:5e:40:0f:77:3a:ca:57:39:d6:97:8b:a0:e7:
2c:f0:a9:52:00:52:c8:79:74:5e:1e:2c:c1:a1:e9:77:35:dd:
ce:ce:0b:00:ad:bd:38:66:f6:b6:de:84:73:50:67:3a:16:f1:
e7:d1:0f:25:b5:c5:29:b6:16:ae:e7:88:2b:cb:4a:e6:77:81:
3a:26:27:24:a2:e3:2a:47:e2:49:31:d0:2a:a2:31:c6:4e:6f:
aa:ff:f5:af:ff:20:39:5a:fb:d3:1c:b8:a5:03:0b:92:b4:ad:
2e:1f:65:8a:01:89:52:b2:f8:94:24:52:17:76:9c:e7:fb:b5:
02:2a:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:44 2026 by rpki-client