Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: Ac5tl5DGYbZH8AJw85GCDyxFCRBtK+xdI1xR9GjS5bc=
Subject key identifier: FE:FB:5A:B0:1F:01:7A:8B:04:43:6C:CC:67:6D:46:77:32:43:58:FA
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019CAED9F7D6D352ACF3E95BF1FB72F56768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 1272
Signing time: Mon 02 Mar 2026 14:00:46 +0000
Manifest this update: Mon 02 Mar 2026 14:00:46 +0000
Manifest next update: Tue 03 Mar 2026 14:00:46 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: C1MFNRcrMY4BGN3eg9XXpqpZuuKp4C2mQK4utoCxZTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:f7:d6:d3:52:ac:f3:e9:5b:f1:fb:72:f5:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Mar 2 14:00:46 2026 GMT
Not After : Mar 3 14:00:46 2026 GMT
Subject: CN=fefb5ab01f017a8b04436ccc676d4677324358fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:c3:d0:94:3f:f2:c5:d5:01:fa:0d:f8:ad:
31:e2:c0:36:91:23:9d:cd:7c:3f:01:e0:be:08:0a:
c4:7f:74:7c:43:16:4c:0b:fd:8b:85:7b:39:9e:e8:
c6:ad:9f:0b:92:a9:ac:e1:b2:8f:dd:d9:e8:34:d2:
bc:69:09:31:72:ef:60:8f:24:d5:0d:41:df:ff:bb:
c0:db:cf:10:52:a6:c6:6b:af:c0:48:0d:f8:99:ab:
79:83:46:87:ef:96:ce:e0:87:9b:d5:3e:5c:64:00:
28:19:f0:85:58:2b:75:99:ee:5e:09:80:c5:45:11:
a2:ac:43:a2:cc:85:31:58:63:2c:9a:ae:e5:c8:f8:
91:6f:19:bc:4a:21:f2:1f:a2:1f:e4:9d:a3:35:1a:
f3:de:4e:45:2d:97:89:ce:1b:a3:92:6d:5e:69:f4:
f4:81:c0:ae:c6:4a:49:65:9f:48:98:be:5e:0c:01:
c9:1b:c5:a0:a3:63:80:02:11:4f:4f:d1:a4:0a:11:
d6:06:0d:0d:61:cd:53:69:01:41:87:e0:82:95:fc:
ba:08:3a:bb:ce:f9:59:6b:b3:81:60:61:e8:84:12:
f8:b3:46:13:0c:1b:fc:8c:a0:22:89:91:cc:de:97:
38:2e:34:3a:d3:30:d4:bf:9d:b6:34:bb:21:6f:96:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:5A:B0:1F:01:7A:8B:04:43:6C:CC:67:6D:46:77:32:43:58:FA
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:71:d4:61:35:8f:59:c4:ce:f5:f6:d9:b4:c1:0b:6a:e2:
a7:0c:87:58:ee:3f:59:c0:46:81:10:fc:dc:77:70:08:82:e2:
6b:25:aa:26:94:5c:ba:5f:b8:72:06:d4:55:e4:1c:c8:68:8b:
1f:c4:e9:f0:27:4b:fe:24:46:d6:2c:ff:be:91:62:28:eb:bb:
23:5c:ca:1f:27:94:79:e8:ac:7e:f7:9c:5b:eb:0d:6a:2e:90:
13:11:7e:42:7e:99:dd:99:30:32:2f:29:a1:37:fd:27:9e:d6:
cc:4b:dd:0b:f2:87:90:b5:43:db:2d:a6:cc:48:3c:aa:a6:5e:
ca:df:39:3c:c1:39:09:76:be:93:0a:1c:e6:e8:73:da:2e:c6:
1e:1c:eb:40:94:64:3b:7c:50:ff:24:4b:80:0d:4b:e3:1a:45:
98:50:c9:8b:b9:72:9d:ca:be:0d:34:02:12:eb:21:67:05:84:
30:ff:ad:0e:64:ee:1b:fd:c3:22:02:23:46:b7:ae:26:ce:ee:
5b:f4:db:e7:ab:77:6b:f7:28:eb:1c:c9:6f:28:e8:e7:ba:e4:
e1:a3:bf:c5:26:4a:8c:c3:e6:85:57:c9:71:10:37:4f:db:f2:
c1:11:3c:11:ff:15:ca:62:ce:27:92:1a:7a:36:4a:73:15:28:
db:be:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:14 2026 by rpki-client