Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: 97pZUQD8saAqt+c/WfIx9/htQpSkkH+JyVQq1cWJzwM=
Subject key identifier: 69:A6:74:31:5F:F1:1B:C8:28:25:AB:AF:E1:F1:70:94:F9:ED:9A:26
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019CAB6B9C8D7EEB13BBCD665E9CA857CC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0FA6
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: EQg9l32UslFhZ466QrY8ugCSDlwjmILLGPrDg2WBr10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9c:8d:7e:eb:13:bb:cd:66:5e:9c:a8:57:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=69a674315ff11bc82825abafe1f17094f9ed9a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:15:47:44:b5:c2:b1:a6:47:f8:34:a3:13:
19:93:80:03:8d:5b:a7:27:f7:f5:84:2e:50:1a:e8:
5a:c2:86:98:85:24:61:96:96:f2:05:89:85:ed:bc:
ce:c7:38:93:7f:a4:cf:18:39:c6:44:6f:fa:6e:42:
7a:1f:15:2f:4f:bf:c5:b1:94:4a:f0:df:33:ef:07:
8e:64:01:5a:c5:78:ed:5f:c6:d6:d6:b5:19:03:3f:
c0:60:d5:a2:5b:03:3a:97:5a:c7:d7:50:5f:2d:94:
da:af:cc:df:ce:f8:11:83:0b:f3:e9:bd:74:0d:56:
e4:32:66:1f:29:b4:fb:2b:25:fc:02:1f:56:c0:3a:
d9:74:18:0a:22:ed:04:d9:d0:49:77:3d:0e:fd:07:
44:e7:74:cf:9f:9c:0a:5c:3d:3c:c9:f8:3f:df:1b:
54:99:17:ba:e0:a4:76:75:eb:c2:90:8c:71:48:af:
ce:72:8c:58:1a:4b:50:4f:8d:3d:6e:28:f1:34:80:
cb:b7:34:7e:97:ff:fe:fa:9e:99:cb:2d:04:33:f7:
20:2c:f0:55:25:ec:f2:53:4a:af:9c:32:70:86:5d:
77:93:90:f4:47:41:94:bc:11:5e:89:47:8e:4b:0b:
a3:e9:17:f3:12:fd:d5:c3:6d:a9:cd:c6:29:57:b0:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:74:31:5F:F1:1B:C8:28:25:AB:AF:E1:F1:70:94:F9:ED:9A:26
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6d:af:d3:36:0e:0e:55:23:1a:37:c6:a3:ba:d9:76:b2:bd:
8e:e1:ec:af:c4:96:a9:84:ac:af:41:e2:f6:1b:ca:ac:7f:65:
7f:eb:26:fd:37:1b:d0:ed:ef:3f:0c:42:c5:2f:3b:10:7c:10:
16:73:8c:2d:c6:b5:72:2f:19:9f:01:fb:aa:8c:52:f1:b5:dc:
bc:4b:5b:02:55:77:93:d3:b6:cd:0c:55:9e:cf:72:e4:1c:e2:
c6:f7:89:f0:36:b2:ec:57:5e:34:1b:6f:e3:7b:99:26:31:39:
0a:2b:a9:23:7a:8c:3f:43:48:dd:b7:1b:e4:f7:33:db:58:da:
af:7b:44:5a:2b:56:33:67:8c:72:f3:97:27:71:b8:60:a0:89:
8d:dd:bb:7b:7a:95:00:04:00:bd:f5:82:7b:10:c9:b8:a5:e7:
e5:b8:e5:21:0a:ce:f3:4c:95:fc:94:a7:ea:55:c9:19:94:f9:
46:4d:cf:ac:ca:a1:00:c6:2b:87:64:08:24:c7:e5:ca:d3:f4:
6c:4f:77:78:b7:5e:63:bd:e0:17:ef:8c:6e:7f:fb:07:66:4f:
57:4f:40:f1:15:34:5f:71:eb:85:f2:1f:97:1a:55:7e:01:a4:
67:01:53:99:34:96:88:0b:10:cc:f0:a3:e4:ec:37:1d:81:17:
cc:d9:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:54 2026 by rpki-client