Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: R6CibQ9DX9ntz3MmuTXHYBnNobHPVYRtom1jgPtPbl0=
Subject key identifier: 3D:7E:F9:64:8E:FA:6F:28:FF:F9:36:24:36:42:0B:45:E2:CD:20:01
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019CAAC63DD74F625E7E0572D5D1B2911842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0FC6
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: V7LGHGQa3A0kR2Z5bZDsPB97nMZRHuMQ8DMI8RC2mus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3d:d7:4f:62:5e:7e:05:72:d5:d1:b2:91:18:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=3d7ef9648efa6f28fff9362436420b45e2cd2001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:a4:33:ec:81:16:d2:44:ea:23:76:78:d2:
89:85:a9:51:d9:ac:45:36:09:2d:06:e9:91:94:a7:
5f:c1:93:2e:c9:f5:91:ba:ce:89:c8:c6:26:67:76:
3a:de:6a:cd:d8:35:f1:92:8d:7b:45:58:df:93:ee:
bd:3c:5a:64:7d:ce:95:99:43:f2:ff:5f:52:02:99:
1c:c1:52:7b:9e:ac:39:61:df:86:0f:e1:14:d0:7f:
a4:ec:24:2d:fb:2d:71:e7:7c:b3:c9:7c:43:93:ea:
d8:24:4e:43:02:88:93:12:74:78:82:84:38:7e:dd:
17:2d:e0:75:0c:b9:00:b1:b3:0f:33:2f:89:31:3d:
1e:1f:fd:98:98:bb:26:33:dd:39:5c:97:61:d0:92:
66:c8:4a:f9:91:44:7f:5a:cf:8d:ea:8c:03:91:1b:
00:51:5a:d5:5c:ad:0e:1f:67:0b:df:5c:a6:43:63:
3b:48:bd:38:d5:47:bc:c0:4c:69:d2:6b:29:2f:12:
5e:c0:42:ae:d5:6c:01:98:9b:46:31:e1:25:ba:72:
c9:b7:fb:5f:53:91:1f:6e:4d:cf:a0:fd:91:28:11:
6b:85:cc:51:0d:55:21:3d:52:78:0b:5b:0c:c6:86:
c9:5b:a2:84:e7:3a:be:05:44:ea:05:b9:83:4e:77:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:F9:64:8E:FA:6F:28:FF:F9:36:24:36:42:0B:45:E2:CD:20:01
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:51:8b:ef:a4:3c:0f:49:ae:97:f0:eb:46:aa:dc:d9:d2:
12:f5:50:a6:92:11:f8:a5:c9:43:ab:01:3a:ad:e4:cd:bd:26:
0f:23:15:d5:9c:9c:ca:c5:8c:ab:7f:b8:d3:97:6c:e3:c8:e8:
89:96:04:55:e2:dc:7e:8d:32:f8:12:a6:95:94:03:2c:9b:e6:
23:40:7f:00:d4:88:66:18:99:66:ad:05:f2:53:cd:6b:25:62:
1b:b0:92:3b:e5:df:44:dd:0e:8f:92:7d:f1:e7:4c:02:d9:17:
70:ba:19:d2:8a:b3:c6:d5:d2:4c:b2:a4:f2:de:33:86:bb:05:
c7:aa:33:a3:76:ec:c4:48:a5:7f:df:c8:dd:55:e0:fd:28:69:
5b:4c:1c:3a:62:a0:99:64:26:d3:71:39:47:df:8a:14:40:9b:
66:04:5c:36:45:94:e7:8a:b9:16:e3:eb:07:74:14:3f:48:b6:
1b:6a:37:8d:b3:50:59:da:75:6c:b7:0c:36:79:b9:a2:3b:22:
3e:98:2f:e6:98:a8:1b:3d:b4:85:ce:64:87:fa:9e:7e:ba:ea:
29:4d:71:eb:66:58:22:9f:2b:cb:97:77:4b:a6:ca:a9:a1:8d:
3b:03:2a:0e:f1:ac:9f:14:0e:3d:9c:d2:97:82:f0:32:7e:a9:
06:cd:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:34 2026 by rpki-client