Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier: saM49R7WvYivd1sayQkpTY74DApYOhp6cDdvbBiFeYU=
Subject key identifier: 32:8B:D2:DA:22:8F:40:52:16:50:1D:9D:65:FF:BE:70:EF:84:98:8C
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial: 019CABD906D89D48C22595832A1AD34FD7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number: 0A44
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: zkRviCK6f+KTmRC1vysWRx3mDT9DLwhCru80dDnSLyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:06:d8:9d:48:c2:25:95:83:2a:1a:d3:4f:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=328bd2da228f405216501d9d65ffbe70ef84988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:9e:88:0c:05:e4:db:56:f7:d8:b8:9f:77:
92:91:6c:14:17:f1:7a:4c:33:9e:29:b5:02:7d:e5:
07:4e:04:5d:4d:9a:9c:a2:41:0e:6f:f5:e6:1c:49:
08:63:56:2c:b9:2a:ea:d2:4d:b3:8b:99:38:93:e2:
0b:b0:eb:06:89:a5:1e:f7:76:0e:db:d2:9b:9f:76:
3b:a1:61:ed:e0:6b:05:f5:6f:5c:3b:b1:67:11:1e:
d5:82:af:a0:01:91:0c:64:bf:0f:1c:bf:b2:9b:31:
11:35:69:69:bd:ae:a9:71:02:03:6c:6f:62:25:e4:
c2:f5:06:4a:ed:8c:37:ff:8d:a1:c2:e2:eb:60:17:
b2:df:46:db:51:62:66:58:24:ac:67:21:ec:49:f1:
cb:45:95:ea:8a:c1:6d:c0:6a:d8:0f:e8:cf:1b:d4:
cc:3b:2c:5a:57:02:a0:cf:5c:cb:1e:07:7f:4a:7a:
35:1a:90:72:42:7a:2c:c1:5b:a6:7c:7f:c0:d9:0e:
98:6a:fb:f0:1a:da:63:e5:7f:93:a2:96:cc:0b:09:
f6:0f:93:29:36:9c:9e:54:1c:6b:09:a9:99:d0:93:
96:ef:db:d6:d2:ac:93:3b:5a:22:3c:69:a1:f2:17:
8c:32:1b:51:ac:3c:0e:38:03:d6:9e:be:e6:d4:0e:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8B:D2:DA:22:8F:40:52:16:50:1D:9D:65:FF:BE:70:EF:84:98:8C
X509v3 Authority Key Identifier:
keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:be:02:4b:25:6d:c9:4c:51:41:b7:82:cc:82:5d:34:f4:ab:
f0:f9:04:33:9c:51:33:cd:33:f9:cf:4d:85:5d:7e:20:48:b6:
7e:dd:1a:a0:be:37:1b:80:c8:3c:f1:a8:df:fc:a0:75:e2:5c:
67:8a:47:27:25:5e:7a:4d:a6:8e:6f:d7:ce:d0:d1:5b:e4:c7:
7f:55:9a:c1:2e:1b:06:8f:5d:e0:f5:58:1b:f8:91:db:2e:4c:
7d:6f:fa:c7:f2:44:97:2f:b1:1d:f4:d5:58:47:8c:0e:62:b5:
e8:16:ac:6f:c6:ed:f5:50:85:de:2d:36:6a:5d:9c:a3:e0:95:
84:e5:11:5c:bd:f8:1b:ad:de:e8:d5:50:74:9c:71:72:86:4e:
29:0e:14:1d:15:2a:e1:2b:73:98:04:d9:46:6d:62:5f:f3:50:
35:e9:c2:62:e0:7d:23:c7:15:be:39:73:b3:94:92:c1:64:1d:
f1:e7:ab:15:e0:af:12:a3:f1:3c:72:b8:1f:20:c4:ab:ad:e5:
15:0f:42:5b:bc:c6:39:b4:80:90:39:68:b1:db:14:ad:82:fa:
45:e9:00:fb:dd:66:4a:71:54:a5:2f:b0:fa:4e:5c:39:7c:9e:
ad:b5:cc:1a:70:2c:f0:b5:2c:92:f8:b3:a4:32:93:c9:15:0e:
d6:c4:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:39 2026 by rpki-client