Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: FisHHfh8eloixC3CDKcIBXo+f1J2AuSXJ0jUR2dJfT0=
Subject key identifier: CE:17:12:81:2E:5E:EC:20:2F:7B:B0:DC:11:95:0F:E7:BC:6C:65:6B
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 019D27A8E53082D40CCBD4676374B18B640A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 17E3
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: R8LhzHlMgyUQxG46nYKyZntU8G9SAnucrESq92CrBZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e5:30:82:d4:0c:cb:d4:67:63:74:b1:8b:64:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=ce1712812e5eec202f7bb0dc11950fe7bc6c656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:f8:f5:fe:bf:ae:de:de:15:a0:ef:12:9e:
5b:c4:d0:cf:75:ac:e9:1c:e5:86:21:1f:ee:7e:47:
da:4c:cb:98:4c:00:fa:37:c4:ce:f1:62:4f:06:c0:
4d:56:df:eb:f8:72:85:c7:32:5f:a5:07:9a:38:05:
c3:b1:c8:0b:de:d0:b6:06:0c:36:e2:2c:f7:a4:a0:
d7:14:a7:1a:a2:f3:38:36:03:c0:06:51:45:c5:5c:
6e:ff:8c:04:eb:c3:2b:d5:00:20:51:a4:a3:f6:7b:
07:9c:f5:23:0f:6e:4a:c2:cf:64:86:75:89:51:38:
60:0d:11:c4:f7:26:e4:a6:80:fe:a8:7e:fd:e9:d2:
05:a9:c5:af:f3:11:f3:c7:32:e9:5e:c7:c3:d7:3c:
00:b3:ee:a3:ad:89:ba:7a:1d:a0:a3:2d:9d:b0:6c:
93:ca:33:09:72:0b:25:e8:75:c3:b1:c1:ba:64:fe:
a2:1b:24:19:e6:b8:c1:4e:dc:c0:d0:e6:a0:e2:bb:
db:f3:d5:d1:51:c8:f6:a5:db:29:c7:f7:e9:ca:21:
48:c6:f8:20:35:05:95:7e:3f:13:5f:2b:1f:59:7a:
20:0b:ed:7c:15:0a:e7:2b:81:8a:cb:af:1c:fe:46:
42:7a:0f:6f:c7:3d:b8:06:0e:fe:2f:c7:c1:6b:92:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:12:81:2E:5E:EC:20:2F:7B:B0:DC:11:95:0F:E7:BC:6C:65:6B
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:52:cf:2a:7a:23:5c:39:f9:24:6d:bc:8a:ac:39:81:bc:
cd:c8:dc:80:19:98:7b:96:21:49:61:f6:6e:d6:4e:59:17:f4:
9a:f4:52:3a:d9:0e:51:ae:dd:8f:19:51:3e:a6:cf:8a:77:dc:
6b:31:f2:07:85:e9:96:f6:41:b0:89:68:d7:1a:1c:b6:a9:e3:
94:7d:1c:fa:0b:02:c2:21:a6:f7:db:05:6c:2f:70:e9:74:21:
db:75:8d:02:2b:5d:6a:78:2d:c6:15:67:18:73:c4:ed:97:c3:
26:d9:09:66:3f:84:3e:de:74:d3:3c:37:22:8a:4b:12:ad:26:
12:9c:8c:01:7a:af:98:14:14:d7:dd:76:63:09:3b:c6:5f:f1:
48:57:16:d3:ff:9d:46:f4:59:ca:26:2d:a4:c3:d1:70:5e:04:
96:03:4d:04:51:a3:4b:aa:b4:f9:53:1a:89:86:97:13:17:b1:
2f:f3:67:55:b2:24:f6:f8:66:ec:e6:fb:2b:4f:56:70:7e:5b:
d9:7f:d2:6d:e3:93:a7:4c:e8:23:a2:ac:86:1e:f2:ca:17:f1:
c6:e7:24:df:05:82:f7:71:ea:1f:0b:d3:88:cd:06:c5:08:f4:
ac:1f:19:96:9f:0e:46:8e:94:4e:63:80:41:61:c5:bf:21:58:
3d:2f:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:13 2026 by rpki-client