Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier: M+L1H/45N1xqaeiMW088Z28c7gcc2dJ2j+8aLfuIdKY=
Subject key identifier: 29:1E:0D:50:A9:D5:B5:B3:47:1A:8D:8E:15:55:AB:ED:8B:E1:21:BF
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial: 019D2B4E144628584F7F323FD761A38DD30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number: 0D6D
Signing time: Thu 26 Mar 2026 18:00:30 +0000
Manifest this update: Thu 26 Mar 2026 18:00:30 +0000
Manifest next update: Fri 27 Mar 2026 18:00:30 +0000
Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: fr1coc5Ayna6Tg/du51DQSkhr2YOF3miTVo67L/sU0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:14:46:28:58:4f:7f:32:3f:d7:61:a3:8d:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Validity
Not Before: Mar 26 18:00:30 2026 GMT
Not After : Mar 27 18:00:30 2026 GMT
Subject: CN=291e0d50a9d5b5b3471a8d8e1555abed8be121bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:94:ef:a2:86:7c:41:81:54:e2:74:3d:1c:
fe:37:26:87:76:62:97:e2:42:a7:18:ff:94:15:4e:
a7:e1:1f:d7:37:af:73:d9:d7:07:9a:c0:b6:3f:85:
48:d6:91:65:59:51:73:46:da:41:e5:89:87:15:62:
54:65:1a:be:fe:e8:39:a2:93:d4:a9:56:fa:84:fd:
e5:ed:41:82:19:3c:87:58:67:ec:81:e9:0a:de:95:
2e:77:6e:90:42:0a:b7:4b:20:74:ed:98:87:aa:74:
d5:6b:13:f8:93:12:c1:a2:ee:92:10:39:db:0d:87:
3a:a0:6e:2b:b3:0c:e1:2c:9f:8d:d7:4e:82:7d:05:
e5:06:b2:1e:cb:23:17:a2:91:cf:cd:e0:03:81:f4:
92:80:98:8c:0c:a6:3c:1b:bf:54:00:01:22:59:66:
7d:34:f5:a5:3d:e9:c0:8f:c5:6d:0b:22:99:5d:88:
d9:0d:1e:b6:f5:4a:58:db:d8:02:9d:09:63:f4:50:
47:84:d4:d1:bd:31:9e:8a:17:7c:ac:c5:78:da:d0:
d4:c2:c4:ee:26:21:7b:29:8e:ff:aa:72:4b:75:2c:
22:19:aa:9a:94:5f:0f:fc:2f:0d:1b:d7:53:83:f6:
fa:3b:84:6a:31:7a:e0:91:75:52:ec:22:49:a1:97:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:0D:50:A9:D5:B5:B3:47:1A:8D:8E:15:55:AB:ED:8B:E1:21:BF
X509v3 Authority Key Identifier:
keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0b:75:02:35:0e:2a:0b:ad:91:df:bb:7a:05:f4:35:d9:18:
20:1f:9b:4c:f5:ea:06:cc:66:56:30:93:0b:fd:4b:ab:0d:20:
4e:d1:9e:a7:e9:b1:3b:0e:2d:b6:76:c4:1a:82:af:2e:17:4d:
c0:77:65:9b:48:e6:bf:de:5a:94:0b:ca:d8:ba:f9:20:b9:11:
63:5b:12:62:e5:4a:ef:b5:8e:22:34:96:99:48:51:36:79:c5:
33:90:91:c5:a2:db:71:6e:8d:2a:de:b4:61:7f:d9:08:94:9a:
ff:c8:80:51:ef:a1:78:f1:28:cf:2d:8b:96:b6:6d:f7:48:8e:
81:02:17:85:61:f4:9f:ff:9b:af:b3:77:55:17:7e:04:85:81:
f7:4c:d7:84:fa:ff:d7:43:3f:ae:51:b3:38:a1:e2:6b:93:a9:
26:20:b0:16:45:e8:ce:88:a1:71:5d:0e:a4:cd:7e:d5:a9:81:
58:b4:ae:6e:06:1c:52:9e:8d:23:96:29:59:fc:73:1d:4a:2a:
e1:ea:b6:1c:4b:66:75:44:0a:13:c5:46:94:4c:0e:d3:2c:0a:
ee:05:25:90:f5:40:38:c9:fb:c3:2f:0d:cd:f2:9d:55:9f:b7:
c6:a5:5b:67:d8:33:56:2b:21:39:4b:38:70:b5:19:83:6b:c0:
5b:9b:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:29 2026 by rpki-client