Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: 7cj6AXD+9lK44hjCtlCA79oHG8mTb002U4Mqcf0mbXs=
Subject key identifier: AF:B7:B9:11:91:79:38:FC:7E:8E:F5:0D:55:4C:0B:F2:7D:D6:BF:0E
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019D28BB6BAA8C1A069ABC7A730EF348BDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0E08
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: bXoWZ/5eJbugtfk8JX/i0ojXXS2F1KND8eDiwDDULlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6b:aa:8c:1a:06:9a:bc:7a:73:0e:f3:48:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=afb7b911917938fc7e8ef50d554c0bf27dd6bf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:b5:fc:0c:22:6e:fb:fb:0e:b6:ec:e8:34:
8f:7e:0c:f5:4c:36:1e:53:64:d9:fa:4e:04:61:e6:
81:fc:04:da:8e:b6:d1:92:53:a9:41:83:cc:32:28:
bd:97:15:3b:91:d4:7d:72:47:71:4a:c6:be:29:58:
6c:0a:f0:f8:2f:cd:13:b0:c6:c4:3d:5a:28:cf:f8:
f6:21:91:e7:71:03:1c:d5:ce:df:bb:78:6b:77:c6:
25:7a:ac:ec:62:f9:06:05:20:ae:a4:47:c7:01:9c:
f7:44:c7:4f:8c:e0:c6:b9:95:8a:bf:71:11:d7:91:
31:a7:50:f5:0e:2b:e8:82:65:96:ee:a1:95:5b:19:
79:04:3b:9b:f1:f9:c9:cf:a7:1d:54:4c:30:4a:90:
c4:f9:01:16:b1:1d:3c:3f:32:94:e4:36:38:19:d4:
89:95:cb:40:2d:1c:83:e5:65:08:a1:f5:73:86:7a:
15:fb:31:37:c3:20:c0:dc:85:a7:48:39:43:c7:3f:
54:25:fb:61:66:e4:03:90:8f:7f:ed:43:03:1f:c5:
46:b0:56:4d:24:8d:ef:09:01:10:c0:0f:12:98:93:
f7:71:de:f6:2b:f9:c8:ed:63:f6:85:02:de:5d:a4:
b7:e3:04:5b:b5:15:31:63:f0:f0:35:76:0a:b3:6c:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:B9:11:91:79:38:FC:7E:8E:F5:0D:55:4C:0B:F2:7D:D6:BF:0E
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:72:90:84:f2:b5:ee:1a:a7:f8:76:97:ad:83:a6:fc:8f:ad:
54:98:7d:48:3e:fa:bf:e7:75:05:26:5f:3d:1b:20:d2:04:6f:
56:a4:2d:ca:86:1c:2c:a6:10:c2:fb:1a:69:19:c8:92:e0:81:
b5:33:93:ac:d5:cd:2c:46:66:fa:f1:50:4d:d9:33:d5:c5:00:
be:5b:8d:44:ff:ef:ed:15:e9:ee:0b:2a:9d:99:64:ce:9c:67:
9d:a3:39:d0:d8:9e:0a:60:2d:e5:e3:8d:94:be:8d:a2:cd:2d:
88:58:2a:2b:55:7f:4d:98:d6:e7:38:4a:bd:30:75:a9:ce:d4:
ba:73:c0:c2:6f:1d:1f:cc:e9:39:68:dc:29:92:4a:05:68:18:
11:e2:58:08:47:19:05:6a:f7:bb:50:c1:a9:ac:a0:0e:1a:16:
dc:22:27:da:e2:ee:cf:5a:b2:d7:5b:f2:61:16:14:87:ad:74:
98:be:cd:8c:d1:22:ec:26:02:58:80:2b:34:05:60:99:8e:3f:
e7:f5:58:27:81:ce:8a:2c:f9:a7:e8:3a:12:bf:cb:6a:12:19:
21:a3:46:69:ca:92:77:95:73:82:52:26:89:4a:9b:6b:dc:ea:
95:fc:85:e8:d3:3a:73:f0:16:c3:a7:46:0d:a1:52:f5:7d:df:
cc:7b:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:46 2026 by rpki-client