Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
File: fIOIMRS3dX0t-tjbBVzaFbScMQw.mft (raw, json)
Hash identifier: dUvnYHBSoC3M94XCeCw6n0apyyM/Sbnkbhl2nNZIGZs=
Subject key identifier: 17:C7:D7:48:80:EF:64:A0:B3:75:90:85:DF:86:B5:9E:DC:12:61:FB
Authority key identifier: 7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
Certificate issuer: /CN=7c83883114b7757d2dfad8db055cda15b49c310c
Certificate serial: 019D33AC9165D08F422370E1A51B6E64436B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
Manifest number: 09
Signing time: Sat 28 Mar 2026 09:00:40 +0000
Manifest this update: Sat 28 Mar 2026 09:00:40 +0000
Manifest next update: Sun 29 Mar 2026 09:00:40 +0000
Files and hashes: 1: fIOIMRS3dX0t-tjbBVzaFbScMQw.crl (hash: RdHQ5RXPFVZHcW/AD8nScGjH57eU4NGXevHqLMuP+Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:91:65:d0:8f:42:23:70:e1:a5:1b:6e:64:43:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c83883114b7757d2dfad8db055cda15b49c310c
Validity
Not Before: Mar 28 09:00:40 2026 GMT
Not After : Mar 29 09:00:40 2026 GMT
Subject: CN=17c7d74880ef64a0b3759085df86b59edc1261fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:49:4a:2a:08:21:e2:51:20:ee:55:99:4c:
0f:8e:a2:ed:3c:8b:f1:99:ed:2f:c3:62:36:27:31:
63:24:2c:cb:19:08:c3:8e:3c:ad:aa:42:f3:09:97:
9b:b5:52:f9:0f:84:5d:16:0b:48:7b:5b:14:12:29:
04:8e:b7:b2:a3:a1:41:00:51:38:bb:d7:c3:3f:d8:
3f:c4:29:d6:10:e1:59:02:b8:8f:f7:a4:98:69:3a:
14:3f:25:c5:dd:7e:a5:28:5f:a4:5d:42:e1:3d:84:
2f:9b:9e:a6:b3:4b:9b:6c:35:a4:de:af:3e:19:c0:
90:ea:e9:48:a3:59:7b:15:57:e9:aa:52:4b:c9:79:
21:bb:ac:b2:74:0c:31:3d:4c:74:9b:3a:30:e9:e0:
8c:b3:e6:ec:ff:80:a9:a3:50:6b:5c:a6:1a:9c:b5:
4f:ea:fb:76:8e:c0:2b:18:34:c5:87:91:96:7c:0e:
56:88:fd:30:ed:f4:b0:ae:e5:47:63:01:7a:a0:98:
98:63:4d:78:65:23:22:f0:34:07:af:fd:b1:eb:4e:
50:7d:48:b3:44:5d:f9:8c:06:16:a9:0c:b9:98:0f:
b1:ef:74:a6:dc:9b:df:18:82:27:78:28:cc:c5:0a:
96:db:ae:f8:a8:b3:6f:1c:f2:a3:bc:ad:a5:55:fc:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:D7:48:80:EF:64:A0:B3:75:90:85:DF:86:B5:9E:DC:12:61:FB
X509v3 Authority Key Identifier:
keyid:7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4a:c0:e2:13:59:78:65:2f:d8:10:18:3b:0b:80:c4:ca:f7:
0a:93:32:f2:fe:26:27:7f:3e:94:26:92:ad:99:83:83:b2:96:
2b:97:ec:c9:f6:6d:86:b7:2e:d0:46:a6:02:7e:36:cd:9d:0f:
94:b7:29:b8:19:d7:5e:d3:3c:8a:02:da:77:51:91:61:a3:d9:
25:f5:43:14:81:fa:5c:ef:47:61:78:7c:07:db:44:67:2d:2c:
17:09:c5:d8:47:6d:f5:68:90:09:8e:0a:c1:d5:98:71:30:25:
ae:be:a4:b2:72:72:c4:54:55:a6:ee:d8:14:a3:54:76:af:da:
c8:5b:6f:11:5b:2c:59:96:cc:4e:a6:72:ea:c0:46:b2:06:9a:
1f:19:ce:1a:d5:f8:cc:79:4d:aa:d2:db:95:a3:de:35:07:de:
3b:81:01:c2:1a:c9:18:1c:26:e6:20:b5:47:88:a6:f2:1e:b7:
6f:56:2f:00:35:c2:ba:7e:e4:f1:a2:f2:05:9d:97:24:6b:d0:
ed:65:c5:5b:e2:a1:c7:28:55:88:ac:7e:22:86:63:a5:ef:3f:
d8:a7:cf:db:2c:c2:65:57:bc:f8:b8:ce:42:cb:3d:11:99:5e:
b7:e1:f3:1d:50:74:df:e5:df:9c:6c:7a:25:2a:3d:50:d1:a9:
c4:09:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:10 2026 by rpki-client