Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: 3/RWbEXwnRYK9P/wbNGlyX+tJcmWVf2LcycnNM6A4SQ=
Subject key identifier: 0D:7E:A7:7F:C3:EB:20:EE:4F:50:66:22:B0:5D:5D:20:09:2F:2D:16
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 019D329ADECDA8C5E1FA8B306DD4A758B2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 081B
Signing time: Sat 28 Mar 2026 04:01:43 +0000
Manifest this update: Sat 28 Mar 2026 04:01:43 +0000
Manifest next update: Sun 29 Mar 2026 04:01:43 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: eCYiDp+aKrg8GzLVHr4RcExFkpuUjNXXPIDOvADl4P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:de:cd:a8:c5:e1:fa:8b:30:6d:d4:a7:58:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Mar 28 04:01:43 2026 GMT
Not After : Mar 29 04:01:43 2026 GMT
Subject: CN=0d7ea77fc3eb20ee4f506622b05d5d20092f2d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:7d:b3:85:04:69:79:3d:18:1e:ad:a1:41:
06:82:32:fc:f8:07:6d:83:dc:04:c1:14:6c:3a:a4:
3b:8f:f0:05:5f:cc:1f:eb:31:d0:d1:fb:f2:28:1a:
e0:2a:ff:0b:c6:77:2c:ba:86:f8:b2:9a:0e:24:0c:
3e:32:e5:6d:1e:68:ad:0f:81:40:2f:2a:ee:55:fa:
08:ba:e9:c9:f9:a4:ae:71:df:0b:e3:7e:5e:63:03:
51:ee:8a:9d:7d:dd:88:8e:77:4b:fe:e2:da:cb:cb:
0f:9e:3b:67:3d:4e:ca:77:05:dd:52:f1:50:79:19:
c2:07:e7:0b:71:ca:b4:a0:8c:bd:de:01:28:6d:56:
be:94:08:30:c7:ba:ee:80:b8:9d:c4:01:1a:c7:5e:
a0:99:62:e3:a6:da:2c:b4:b8:d2:3e:0a:65:c8:76:
04:a1:c1:09:ef:de:7d:7b:63:e1:d2:b8:df:e0:42:
ff:52:30:9c:f7:dc:e5:ff:fc:49:df:f8:70:0e:30:
30:38:1f:20:7a:f5:65:d5:cc:b0:a1:56:9e:2b:44:
5d:fc:7a:3d:1c:4b:0e:e8:44:0d:f7:cd:2c:48:ff:
5b:1d:f4:56:a1:71:a8:84:be:7f:92:27:f8:6e:2c:
97:4f:23:73:ba:e1:89:9b:2c:b9:cd:9a:d0:a5:d0:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:A7:7F:C3:EB:20:EE:4F:50:66:22:B0:5D:5D:20:09:2F:2D:16
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:be:27:07:75:89:d1:cf:f7:e5:e3:43:97:47:48:27:0b:8b:
ec:22:08:44:80:d1:38:62:13:cb:7b:e5:c0:38:b4:6f:23:10:
02:ec:e7:c7:4a:32:a9:68:fd:f2:0f:80:30:1f:2e:db:2d:bc:
1c:b0:5b:ce:25:13:d0:22:f2:55:c3:44:e9:25:3d:f0:a5:66:
9f:89:f3:d5:b9:8a:88:0e:d5:15:87:73:46:bd:5c:6a:13:71:
d8:d9:1b:3c:a9:62:e2:06:1f:77:2d:2f:f0:68:24:f4:f7:e3:
3e:e3:a8:5c:ef:00:e2:54:5f:85:10:14:03:06:f0:d0:77:07:
19:cb:5e:08:7d:57:4c:38:f0:d9:da:e9:9c:51:25:96:be:fc:
ad:3f:c8:9e:ad:32:3e:e1:40:ab:a4:c6:41:a3:d6:91:9a:93:
6c:a1:83:c0:42:22:a6:03:33:8d:30:de:74:e2:3d:6f:07:29:
00:80:ac:cb:75:21:59:ee:1a:e1:f8:6e:84:1f:db:11:62:c2:
67:82:39:88:f6:bb:c6:1a:8d:06:1d:62:db:f5:c8:d6:74:4b:
1a:ee:fb:77:f7:fe:f2:8f:9b:da:bb:97:ed:a4:fd:bb:22:b7:
56:31:4a:be:e9:ac:da:cc:9f:bc:45:a2:57:0a:05:21:56:8e:
7f:9e:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:56 2026 by rpki-client