Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: 9pTPXNLnADNjzUauSwcIzlE5r59Q5aBWqRRCFshllwU=
Subject key identifier: FC:8F:63:C4:57:92:96:AB:A8:5A:FD:1D:F8:4E:E3:50:21:14:96:6F
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 019CABD9560DAD0F4EADFC8C9C959791E97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 10AE
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: 4kPYhgCC8S2XCP59FOC4GfcuZ6nKjmEvsuEXjp6jE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:56:0d:ad:0f:4e:ad:fc:8c:9c:95:97:91:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=fc8f63c4579296aba85afd1df84ee3502114966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:ad:19:df:33:5d:10:b6:8d:ab:58:07:ea:
9d:e1:dd:79:53:ec:b1:2b:d5:5f:a4:03:cb:db:02:
9b:5f:d8:24:14:31:47:54:ee:49:04:f3:66:a5:c4:
fa:f8:14:2c:66:7e:16:8e:2c:32:ab:40:08:6a:04:
80:1d:f8:03:3b:97:ff:2b:48:26:ce:80:d5:65:51:
fc:36:39:12:50:c4:eb:9f:c3:a5:9a:23:59:c5:05:
6b:04:03:a3:51:03:23:d2:46:fc:6c:c2:0c:48:d5:
ce:2c:27:6d:d2:33:30:63:3f:9d:e1:8c:cc:09:a1:
ec:2b:dc:b2:8f:93:48:4c:38:3a:02:fc:ca:64:c9:
52:a3:e3:a8:c7:23:0c:29:df:c7:88:82:14:d1:06:
e8:0d:7b:2d:7e:f5:df:50:ad:43:53:54:66:f6:87:
db:1e:aa:d4:e9:5f:39:39:c8:06:8b:f8:45:55:01:
c7:67:71:ac:8e:6a:0e:b7:68:36:c0:3b:54:5d:05:
3b:f0:57:37:23:e1:84:80:8d:cf:38:4f:3d:ad:1f:
0c:f6:b8:a3:4b:fe:83:2e:f3:eb:36:f0:98:92:ad:
58:5a:5e:31:41:87:0e:15:cc:6b:15:22:8d:f3:b3:
77:19:76:12:e2:9e:78:53:2b:0f:9f:98:c2:5f:b5:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:63:C4:57:92:96:AB:A8:5A:FD:1D:F8:4E:E3:50:21:14:96:6F
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:d2:dd:df:f9:6a:3a:be:a3:6e:6f:0f:9f:06:ef:27:52:
1a:ab:f8:4e:58:fa:a9:eb:52:31:5a:3b:c7:75:24:b0:cb:f5:
33:53:3a:fd:b9:be:ca:a3:c3:ea:b3:ea:08:05:86:fa:f4:f3:
67:55:e0:a5:9a:2e:c0:ff:8c:dc:87:e5:01:7f:35:41:5b:91:
e7:8f:0b:46:25:88:98:00:dd:99:71:46:a5:c2:f9:ea:94:8f:
95:fb:16:2b:8b:c2:4d:af:44:79:ad:f3:f7:ab:00:86:c1:ad:
52:6d:6c:0f:36:9c:93:96:3b:fe:15:c3:ad:34:d6:67:57:4b:
6b:41:7e:69:0d:d5:3f:4a:3b:ec:a0:69:7f:da:eb:0b:c7:27:
c8:29:5e:10:54:4c:31:ac:30:2c:ad:52:16:6e:3a:70:67:da:
1c:bc:de:77:a1:b3:08:ad:03:42:16:df:2d:f2:27:2f:39:1c:
d8:8f:2f:b2:a9:0e:cf:38:34:ee:0e:9a:79:a0:a4:66:82:86:
c7:08:55:e3:ca:99:a1:de:72:57:d2:ac:9a:06:d4:32:aa:4c:
83:23:00:6b:be:58:bb:38:6e:ce:cb:04:d5:d6:cf:d2:97:ce:
5f:12:10:ac:b6:9f:7f:65:c8:16:38:83:2b:56:16:50:58:ed:
f2:79:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:54 2026 by rpki-client