Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: tE7lnFM60ngwrlKDm4JeWmvO3l5aSSIe5KP1hU7BNFc=
Subject key identifier: 97:35:E9:A1:19:72:42:10:5B:9B:B6:2A:BC:D0:89:DE:2C:7C:B5:A9
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019D27A885BDD4BE859CD247014004CD5325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0A91
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: LjVSInIDHpsWhperaf0Bv+Y5Ls/zBTH+w3VS+UqRoGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:85:bd:d4:be:85:9c:d2:47:01:40:04:cd:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=9735e9a1197242105b9bb62abcd089de2c7cb5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:78:98:47:8d:de:23:d9:a6:7c:26:8c:bb:
e7:e3:b0:d3:5d:9e:1d:e8:8e:79:92:3c:b2:1c:8b:
21:a6:82:09:ca:0b:a6:7d:c2:a3:e7:4b:77:c1:f8:
cc:3d:2b:d2:76:3c:99:da:d0:68:6a:96:09:93:ff:
36:f9:34:4d:28:02:3c:e4:d0:c7:1e:f4:26:71:3d:
d6:44:e7:39:06:ef:c5:3d:90:34:91:6f:f5:9d:85:
c1:df:5b:bd:9a:15:6b:1f:de:26:db:3f:c5:dd:1f:
a8:41:9f:cd:80:0e:76:29:fc:4c:cf:88:df:c7:43:
dc:14:21:ab:b9:1b:a9:92:d2:15:79:fc:85:8e:a3:
c6:e5:a4:eb:2d:d2:70:90:94:1c:bb:34:d3:d7:93:
e4:2b:bb:00:82:6c:4c:b0:2d:2d:fd:62:5d:5c:6a:
99:e2:ce:75:2b:ff:6e:b5:a4:50:f5:3a:b4:34:36:
28:6c:b6:50:9d:63:07:01:19:52:9b:7d:ba:9b:2c:
5b:d8:1e:a1:09:0b:de:7b:85:20:70:d9:c5:10:51:
63:c9:d2:68:f3:8d:3f:c7:4e:e2:6f:cc:20:96:12:
ac:09:4b:78:62:2f:e8:ef:08:bf:07:26:2e:23:b2:
35:cd:43:37:fc:7c:c3:d9:78:db:df:a5:64:3b:17:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:E9:A1:19:72:42:10:5B:9B:B6:2A:BC:D0:89:DE:2C:7C:B5:A9
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:97:73:d1:14:25:3a:77:d2:b6:27:aa:93:8f:ed:15:21:9c:
62:0d:a0:58:cf:51:42:2a:ad:51:17:53:6e:83:cb:9f:6a:73:
8c:f4:1a:00:ed:2d:16:63:0e:6d:23:2a:b6:83:0d:59:d5:09:
30:15:19:8e:4f:1f:05:08:59:69:0b:3a:cf:48:09:97:80:f7:
77:52:27:94:50:b2:a9:47:43:40:9d:d1:d1:5b:2f:6b:29:61:
6e:b6:17:6c:69:8b:ca:5d:3a:f9:c2:89:58:21:8c:da:5b:94:
4e:a5:6d:8d:c4:d0:f8:d4:98:d2:14:3b:88:23:6c:58:56:88:
83:a8:ce:ef:59:74:bf:bf:27:8c:d6:f6:0a:a7:7c:01:a9:e7:
42:5f:a3:8e:55:77:b8:ed:9f:1b:3b:67:0f:37:f4:be:cd:da:
d9:31:5f:c4:50:76:85:c4:a4:80:48:f2:6a:20:a7:28:a4:c7:
39:7e:a8:10:98:5a:7a:2d:26:da:9e:1f:81:5c:9f:c2:e2:eb:
5c:d3:00:28:55:19:95:f2:a7:e2:43:36:04:60:6f:e4:6d:c5:
0f:5f:b9:4b:97:3d:65:dd:f6:d0:c0:9c:32:d2:8d:0e:28:8c:
6c:ad:a1:85:81:03:57:28:ee:c5:4f:47:91:3b:c1:19:d1:a9:
f5:f2:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:15 2026 by rpki-client