Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: F3oGkAXZ0HnImgTXz3YBlJ8YJ2EbRwShUHZEXQKLuOI=
Subject key identifier: 7A:3A:6C:9A:6B:02:68:98:0D:CF:63:33:FC:C5:BC:8B:E1:5B:95:0C
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 019CA97CE76B3FF5A7FA41C385E0B0C6CE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0795
Signing time: Sun 01 Mar 2026 13:01:00 +0000
Manifest this update: Sun 01 Mar 2026 13:01:00 +0000
Manifest next update: Mon 02 Mar 2026 13:01:00 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: zZup547j3pRmFjnWTkPbGD5BnxqoIiJSHfhSbmkpR/U=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e7:6b:3f:f5:a7:fa:41:c3:85:e0:b0:c6:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Mar 1 13:01:00 2026 GMT
Not After : Mar 2 13:01:00 2026 GMT
Subject: CN=7a3a6c9a6b0268980dcf6333fcc5bc8be15b950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:80:a9:02:99:91:bc:a3:a0:88:0a:67:f9:e1:
58:04:08:c9:67:58:fd:52:be:bd:1b:01:3b:1a:4c:
73:79:47:15:d0:d6:96:42:32:2f:dc:4e:75:52:f7:
3a:f8:30:24:ad:c9:8d:94:c2:b0:25:ed:36:45:ac:
aa:f2:24:5c:bb:e9:e0:a9:6b:27:d6:b2:87:f8:e5:
58:77:40:38:06:5d:7b:a0:a7:3f:3d:3d:45:41:46:
19:6b:74:07:1c:c1:ea:19:f4:41:75:c8:4a:0d:61:
7c:4a:fa:33:90:40:d4:66:c7:90:7b:66:95:26:3b:
e9:8e:c0:df:7d:1d:87:e8:26:60:be:72:f3:9c:80:
db:f0:96:2d:e6:78:36:14:84:e2:81:37:1c:6d:cb:
b1:8b:5f:e5:3d:a7:d3:ab:61:84:6f:2f:7c:33:83:
04:e4:e6:f2:98:8d:3d:b6:18:9b:39:8e:4b:58:1a:
c2:0b:80:38:d4:a9:bc:05:7e:05:04:16:30:40:47:
c1:9f:89:f7:d8:ba:09:f1:93:0b:b8:fe:7b:ca:b9:
ea:5d:57:07:29:b3:cf:e5:e3:ee:6e:bf:d0:3c:74:
f8:56:f1:a6:37:30:16:1c:8e:cc:34:ab:5e:26:bf:
df:37:9a:d9:be:ee:8e:48:7a:47:2d:cb:27:fe:e7:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:6C:9A:6B:02:68:98:0D:CF:63:33:FC:C5:BC:8B:E1:5B:95:0C
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0c:2d:34:6d:dc:1c:c8:c5:12:23:8d:7e:84:cc:ef:9c:55:
a5:35:77:93:5a:6b:37:6e:72:4d:14:80:db:56:45:20:dc:cd:
96:a4:1c:d1:77:a2:3c:ad:1e:7c:e2:d6:52:11:4b:5e:ce:1e:
a5:ad:43:62:f1:21:0f:f5:d2:f3:f3:8d:6d:8b:66:f4:f1:e9:
ea:b6:a5:29:9c:19:7d:bd:19:6d:ba:b5:21:d5:45:21:0b:5c:
47:ec:14:e9:ea:69:e9:3d:4c:ed:08:80:11:a7:fb:45:b0:49:
ec:97:3d:d6:2a:9a:fb:b4:10:08:f3:94:e6:94:64:9d:59:bd:
f7:aa:2b:17:e6:5b:ad:3c:17:9e:6e:e4:dc:bf:6d:55:1e:89:
d8:3f:71:96:b5:bb:99:52:c2:f8:81:cd:de:a3:9c:57:2f:49:
12:c1:c1:47:52:12:69:52:a2:26:1c:f2:62:a8:60:7e:a0:07:
84:7e:19:80:62:cb:b3:34:57:58:a7:c2:72:09:5a:1a:79:13:
88:6d:d0:93:52:9c:0b:32:50:a4:20:af:d4:e9:1e:db:98:54:
a2:0a:9d:cd:2c:b0:7a:57:d3:36:63:53:8b:10:7d:05:6c:13:
51:32:7f:73:6b:3e:4a:87:85:c5:03:ca:f2:21:96:14:50:10:
02:2f:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:44:18 2026 by rpki-client