Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: rLeV1IIj8jhC6PnMpn+uicRhL2Gh9sZ+n8T+xf3Nb7g=
Subject key identifier: 5A:BF:BD:53:B3:62:C6:14:55:CA:91:15:B5:EF:DB:B3:18:16:EB:9F
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 019D27DF906A6B267B7A600165F259E4DE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0AEC
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: cMfkco5nHNOd2SB/zs+j3N7QXyU2Np5bpzBnDH7xVLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:90:6a:6b:26:7b:7a:60:01:65:f2:59:e4:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=5abfbd53b362c61455ca9115b5efdbb31816eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:48:73:48:a3:f1:ae:97:4e:2c:01:6f:be:
04:cc:66:7e:65:9c:38:61:39:b7:b4:bd:ea:e3:ba:
ef:6d:e9:8a:2b:57:d1:cb:c8:a7:36:24:32:dd:6f:
c8:4b:d2:e1:35:d9:93:8e:67:db:98:a2:ff:d7:d3:
c9:c8:7a:af:39:72:2f:b8:da:8d:c1:5d:f1:9b:c9:
43:11:e9:40:8e:b6:8a:07:db:ba:fd:fd:64:3a:5b:
01:fd:b6:43:a4:47:b6:80:95:2e:47:10:a3:eb:ac:
09:8b:47:46:6c:04:3b:87:9c:c8:1f:ce:a2:24:20:
a7:59:7d:24:02:ae:79:cb:7b:91:ac:8e:aa:03:e0:
71:92:c9:b4:28:66:b1:1d:b1:1c:12:b1:0e:0d:ae:
d1:39:75:36:b3:4e:48:e1:5f:15:ac:e3:85:f9:89:
b5:d6:9c:a9:53:5d:ea:b2:cb:e9:59:ce:b7:d0:a7:
63:b2:c7:ac:f0:94:8a:ab:c1:13:36:9f:7c:d7:eb:
f7:90:f9:c3:ad:38:f1:ea:78:8e:c9:03:3f:eb:ff:
31:f4:6b:fa:d2:36:ac:9e:f1:19:6b:c8:9f:58:a3:
6b:60:7c:01:54:5f:0d:47:c7:62:93:e4:b7:79:dd:
c4:0c:76:ce:27:40:33:7d:b4:e2:75:4d:1e:59:71:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:BD:53:B3:62:C6:14:55:CA:91:15:B5:EF:DB:B3:18:16:EB:9F
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:51:bd:e1:cf:78:1c:ec:dd:eb:2f:5f:24:75:c3:f6:3c:
c4:21:a9:51:a6:95:19:5a:e6:87:3b:48:d6:cb:ed:fd:b1:e0:
bd:0c:b0:84:d7:97:6c:f0:66:fd:71:af:2b:80:9f:d3:6d:1e:
a8:49:00:96:d0:bb:f8:55:82:83:a6:7b:cf:4f:9b:20:84:be:
e8:79:1b:8d:f3:60:d6:59:23:f9:0f:67:00:3b:c2:a2:07:8f:
4d:fe:12:07:f8:75:21:55:85:dc:a7:3b:db:2b:11:d2:9e:c5:
e5:48:32:1e:b5:e0:8b:c5:0a:79:e4:de:06:6d:d7:01:5b:1f:
45:9a:aa:05:86:e0:3e:e9:47:cb:ad:a9:23:09:63:c6:cc:32:
eb:69:b3:90:17:a2:b2:e4:79:76:e2:a9:80:78:6c:da:6e:bb:
ac:66:55:a2:12:16:19:f4:b7:2c:62:bb:c1:70:1f:d7:5d:05:
aa:10:5e:22:bd:32:f0:2e:e0:a8:84:76:29:af:a2:01:b1:cc:
fc:57:7a:17:55:9d:97:0f:d0:43:f7:ed:4e:cf:57:a7:ec:3b:
12:cd:f9:fa:8c:e0:0d:e2:f2:16:cc:74:e9:cf:e3:3e:20:4a:
43:f9:ff:c9:55:3b:a8:23:31:3d:d8:8a:10:21:f8:b8:3f:97:
94:81:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:42 2026 by rpki-client