Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: d1+9fzx8KvNsD5WJuvfRlVwK2LVZg9JNF5wXOZ4prsg=
Subject key identifier: CF:FE:36:2C:7F:E3:52:33:B4:CB:A9:B1:04:70:F2:84:6F:AC:0E:7B
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019D29CE4460EA205F93EAE08070B1EA54FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 0B56
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: a5m8pPZAQnuD/rYiqEfEOFeTxhC0pkemUp57RoneWpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:44:60:ea:20:5f:93:ea:e0:80:70:b1:ea:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=cffe362c7fe35233b4cba9b10470f2846fac0e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:a5:6c:bd:14:42:91:07:82:32:38:7e:95:
9f:83:45:16:af:d8:10:d6:1d:69:5e:f0:10:c7:ce:
bf:29:46:d9:bd:be:bb:34:1b:a1:d2:17:7a:f8:95:
f8:19:10:ba:a4:51:b1:1e:5a:f7:95:65:5c:53:a0:
77:54:f7:a7:8e:ce:15:1a:f2:95:f5:5a:d9:2c:56:
05:e6:04:80:7f:a3:f6:b4:c9:0c:e2:61:ee:9c:cb:
6d:85:a0:92:be:a1:bc:2b:1d:2b:b3:21:6e:98:e4:
6b:ec:7c:8a:bf:5f:e4:29:12:6d:d5:4d:52:3a:42:
a9:8f:a4:5a:0e:3b:dd:c7:14:2a:5a:02:52:a3:7d:
e1:7a:71:64:9d:8c:a0:e5:98:a9:e7:bc:6f:ad:d7:
39:3b:3a:c1:9c:c9:64:f0:10:d1:69:bd:29:7d:10:
ec:a1:f6:7b:05:7d:ea:e2:51:0a:5c:cd:93:82:8d:
58:3f:d3:d3:fd:b5:64:63:74:a8:a1:fb:31:25:15:
61:25:6a:4c:72:16:ac:3e:a1:80:c5:6c:f9:84:29:
f5:7c:20:19:e2:dc:69:0d:0c:b0:1f:c2:e4:f6:e7:
8b:3b:ac:0f:c1:fe:84:6e:97:97:d3:ab:a3:3c:d7:
74:56:c7:39:11:00:ec:55:a5:3d:2b:f8:b9:ea:88:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:36:2C:7F:E3:52:33:B4:CB:A9:B1:04:70:F2:84:6F:AC:0E:7B
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bc:17:ea:5a:1f:ff:81:ca:5a:5f:ba:56:f8:46:ab:15:43:
c5:85:68:a1:7a:34:d0:a7:25:59:ec:70:55:b2:8c:a8:ae:08:
df:05:24:5e:88:16:f0:bd:5a:f0:8b:46:85:49:4f:87:45:d2:
4c:40:2c:08:b1:f4:08:9e:f7:59:02:15:43:f0:17:db:fe:9c:
31:e0:b9:fb:b1:61:d4:42:58:12:f6:0f:55:2b:ed:be:5a:f9:
54:1a:e0:18:5f:ba:eb:12:cf:a3:29:0f:4b:17:62:af:23:4f:
56:d0:cb:72:74:eb:b1:2f:44:ea:90:da:23:d1:c1:6c:90:77:
9b:60:a1:ec:1e:ea:a9:a0:75:64:e8:90:e9:32:b3:cd:df:26:
e4:5a:25:2f:25:e3:2b:6b:19:cb:de:e3:98:6f:92:84:f5:60:
4d:52:33:44:7d:55:e8:a0:c0:73:0b:8a:93:57:f8:a4:39:71:
5c:c0:de:45:f0:6b:c2:f1:ff:19:0f:e5:ea:d0:33:cb:62:41:
1e:ef:16:8c:3e:6a:48:b5:09:61:97:5c:52:07:1a:71:64:4d:
5b:02:46:41:7e:7e:2f:e4:4f:de:a1:4a:41:72:df:09:12:5c:
58:04:cd:6b:ec:50:c7:ed:24:79:f8:7a:16:d2:72:8f:5d:77:
7d:54:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:31 2026 by rpki-client