Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: WVXnawGATql81s1xrHJcPXFIVOBY3OjI9XrLnlcKhtw=
Subject key identifier: 7F:48:9D:18:19:AC:10:D7:BB:ED:E0:54:34:78:2B:DB:C3:EC:A3:BF
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 019D9AE2D01DF2E0C3767E98E003EC44B300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0812
Signing time: Fri 17 Apr 2026 10:00:48 +0000
Manifest this update: Fri 17 Apr 2026 10:00:48 +0000
Manifest next update: Sat 18 Apr 2026 10:00:48 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: 3DMTZAZadA+KT5OlL9KvZB+NENFhY/mOu3cdl7HOlW0=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d0:1d:f2:e0:c3:76:7e:98:e0:03:ec:44:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Apr 17 10:00:48 2026 GMT
Not After : Apr 18 10:00:48 2026 GMT
Subject: CN=7f489d1819ac10d7bbede05434782bdbc3eca3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:6f:d4:87:89:42:7b:7e:eb:a0:09:7c:17:
a7:a5:e9:b3:c0:02:e6:0c:3d:46:ff:e5:14:8f:92:
65:d0:45:5a:60:04:b3:f3:e1:6c:0c:da:d0:8e:00:
9f:b1:b1:04:08:0f:12:fe:9c:06:2d:08:39:f7:10:
f1:8d:a7:c4:3f:25:ef:2e:39:6a:c6:11:d7:29:3e:
fd:3b:79:19:18:28:30:52:89:96:8d:3c:1a:25:d7:
27:16:38:37:b6:44:86:4c:f9:14:e7:36:68:5f:3b:
29:e6:36:22:46:d3:ab:3d:31:68:68:8f:51:1c:1f:
06:fb:d8:e8:2c:9a:bd:db:c0:90:09:1f:52:84:38:
a8:78:95:bc:af:f4:70:f5:42:4b:22:35:58:47:7b:
96:b2:ef:68:9a:d2:db:f1:c6:ed:91:45:76:f9:c0:
fe:e0:74:cb:b0:8f:eb:be:f8:c8:cf:6e:5d:19:9e:
22:8f:bd:95:4e:a8:8a:bc:2d:33:5a:8d:dc:4a:ae:
72:02:c7:82:e0:43:5b:a1:db:c2:36:09:2a:93:f3:
87:d1:66:79:3a:4d:aa:58:09:18:44:46:38:a2:53:
36:6a:78:c9:a1:25:8f:74:91:d6:dc:b7:cb:45:2e:
77:4c:00:f8:ba:13:6f:3b:8f:be:51:08:e0:20:a5:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:9D:18:19:AC:10:D7:BB:ED:E0:54:34:78:2B:DB:C3:EC:A3:BF
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:7b:9d:dc:d3:9b:ac:f1:ed:87:fd:6a:c2:75:8d:78:06:
2a:1b:86:39:29:7d:e0:22:25:d3:cf:f8:54:25:ef:65:4b:ad:
4a:8a:6e:90:35:23:46:f3:05:46:f6:a0:41:d2:d7:8b:47:28:
84:82:40:14:81:64:c2:80:00:75:0b:09:4f:28:41:41:af:9e:
33:93:f9:17:af:8d:f7:0b:84:9e:30:bb:2c:2f:7d:a1:11:d9:
6a:1d:dd:a4:2f:11:89:6f:90:69:8f:18:ce:5e:61:2b:39:49:
72:19:37:9b:ee:d2:23:34:44:52:60:12:bb:2e:2a:98:16:15:
a0:22:cd:47:72:dc:d2:84:00:62:af:03:37:d5:e0:8d:47:98:
da:ca:11:58:9a:17:8d:a3:3b:81:15:c1:2a:6a:7d:8a:51:fe:
1e:1c:2a:33:42:f6:38:ee:18:95:e1:a2:98:00:54:39:20:db:
c4:18:1b:23:64:85:e2:33:dc:d1:f2:7d:25:71:14:f2:82:ae:
4f:d2:78:d6:a9:6f:bf:c9:14:f3:54:98:97:c8:aa:d6:3e:84:
9f:d7:4f:20:41:9a:35:43:a1:a9:21:dd:74:0c:52:02:03:41:
74:63:f5:90:84:74:27:04:8c:88:9b:bc:30:7c:d7:44:41:a1:
a5:c4:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:46 2026 by rpki-client