Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: HP4rK6Bw8DusXZNiDNt8xFSLPK090X25rhuqDE6IlQQ=
Subject key identifier: F8:C2:BD:51:3B:5E:08:52:88:DC:79:A6:FB:11:38:41:BF:C9:65:99
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 019D28F2D5C3EC4B9851D632B7A9D8F6E8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: cbGy3q+eGZ1lTMqhtDfKugcDWxBvgzfp7yZO5G+YwZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d5:c3:ec:4b:98:51:d6:32:b7:a9:d8:f6:e8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=f8c2bd513b5e085288dc79a6fb113841bfc96599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:0a:88:cb:df:35:df:c9:68:54:a0:5c:0a:
50:cc:58:7c:bf:02:a0:35:bf:02:fa:91:7e:33:04:
ab:82:57:15:01:47:6c:61:03:11:37:2c:18:ce:b6:
06:01:50:4c:fc:8b:4d:11:be:a8:77:07:b5:37:ad:
a0:cc:e0:16:5f:ef:67:61:87:f9:c4:5e:62:eb:b2:
b6:4f:19:89:d8:73:5f:c7:cf:f7:33:56:02:12:37:
ad:75:01:da:3f:a2:d0:c6:50:b5:5f:c8:56:a8:11:
c9:88:b0:71:fd:98:43:a0:51:f0:93:39:21:5a:e4:
5a:a3:44:33:3a:1f:76:1f:06:1a:05:92:2b:e7:98:
aa:71:78:d3:84:ae:66:e6:4f:b9:a2:d6:26:d9:40:
59:66:5d:a7:5d:11:49:31:f8:36:ae:dd:b0:41:37:
8c:43:56:6e:24:e4:23:ad:5a:3a:fa:06:32:29:c0:
77:0a:d4:7a:df:3c:7a:9f:d3:9e:35:bb:5c:28:96:
90:93:76:17:c1:1f:ac:66:cc:c3:24:0f:37:e9:19:
1d:00:4e:e6:54:d3:40:3c:25:a1:ed:79:d6:96:8d:
6b:c5:b4:d5:61:6e:17:12:ca:d6:de:94:fe:0e:e4:
e1:d9:57:d4:b9:ce:80:fb:25:30:16:cb:d4:f9:5b:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:BD:51:3B:5E:08:52:88:DC:79:A6:FB:11:38:41:BF:C9:65:99
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:ef:14:15:e3:1f:d6:62:c0:18:df:e9:97:75:05:0a:20:
41:83:b5:8c:da:a7:18:ad:65:59:36:b8:98:88:f3:cc:29:c3:
c9:7e:6b:88:64:6a:b5:56:9a:4a:3a:65:81:55:93:7c:c0:8a:
70:77:7f:10:f1:83:2b:f5:44:02:e6:6a:ae:19:8c:17:19:f7:
7b:66:3a:dd:8a:58:b9:6e:cc:23:e9:1f:18:9e:e2:d4:c6:cd:
27:ab:79:06:ed:23:09:47:0b:e4:f7:d6:4c:13:5a:f8:4e:ae:
c0:05:3c:6b:6a:7a:4f:15:58:5d:60:fe:4d:5c:b2:b3:49:19:
a8:c9:29:f5:0f:ef:a4:e9:c7:c7:ef:12:b1:30:b4:60:1a:13:
9e:d5:44:e6:78:f9:d9:00:8f:5f:70:1b:ca:67:18:61:7b:44:
e9:ca:0f:a9:21:f5:20:b1:0d:08:27:4b:9e:4c:a9:70:aa:d4:
80:2f:99:8e:39:a5:e7:4f:56:00:77:93:8a:0d:bf:31:68:35:
5b:ee:56:6b:c0:55:a0:89:9b:7e:67:a2:51:bd:7a:b1:0e:41:
66:c7:b9:76:78:8f:a9:dd:69:b9:59:6e:30:f1:90:95:e6:d6:
ee:d0:82:c2:2b:6e:d4:d6:76:4f:3b:4c:dd:a6:f4:0d:a5:1a:
fa:bd:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:52 2026 by rpki-client