Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: B1F4X99WRVgEeVmrq4UrLNScTOpSNdIV3IQkdsyBxV0=
Subject key identifier: F1:B6:5B:4E:8E:2D:D5:85:E3:CD:81:24:88:67:22:85:97:75:56:FD
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 019CAB6B865472F2D9425189050104E03104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0CFD
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: TRWrMPS84v8H/38v+0MhKsU2Kd5hxLVCtuAeHOXL91g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:86:54:72:f2:d9:42:51:89:05:01:04:e0:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=f1b65b4e8e2dd585e3cd812488672285977556fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:e5:8c:01:ed:91:72:17:d5:15:2f:bc:4b:
79:7f:60:7f:7b:5c:15:ba:70:61:6f:04:08:2f:e8:
69:eb:2d:42:e1:f1:16:68:6b:80:4c:8c:9b:c3:62:
23:5b:15:ed:f8:bc:aa:e7:69:06:5f:0b:7a:26:a4:
ed:f5:93:a5:50:9c:f6:73:e2:9d:85:80:ba:ac:06:
87:49:67:70:c6:d3:92:9e:01:e0:1a:62:4e:05:b5:
be:01:15:e8:16:b6:40:af:4b:87:5c:90:16:7a:e1:
73:0f:a9:6c:09:2e:80:0a:30:ba:d8:50:cd:b2:cf:
ea:53:2b:ed:ff:96:84:d8:b7:8b:5e:aa:28:a3:c9:
28:d0:3e:1f:59:fb:75:7e:52:62:1f:b8:87:75:4c:
0d:97:9d:a3:d1:37:a2:1c:38:9e:44:29:bb:18:85:
f0:16:ad:89:f6:25:cd:45:a7:01:7a:93:66:e1:af:
5d:9f:50:6e:05:76:af:05:e6:09:70:8e:92:00:13:
cc:8e:3b:4c:e9:90:95:65:ae:d8:f6:0b:d7:86:0d:
a2:33:f1:91:75:fc:ea:d5:3d:ca:90:9e:3b:c3:82:
cd:7d:72:b7:2f:fa:fe:d3:98:19:c1:81:c8:4a:63:
29:e7:4f:05:4c:b1:f2:41:f8:19:ed:32:4c:91:b5:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:5B:4E:8E:2D:D5:85:E3:CD:81:24:88:67:22:85:97:75:56:FD
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:be:4d:ef:e3:9a:3b:2d:cb:84:6f:a8:01:5e:c6:73:35:d4:
0a:10:f1:90:c6:e7:d4:c1:dd:c5:f8:c0:7e:9c:41:a8:84:f7:
57:5c:b5:71:f0:5a:6e:80:87:1d:8d:c8:7d:f5:2a:15:b5:e1:
9d:1f:be:bd:0e:39:c1:5c:f3:89:f6:32:25:c2:1c:d8:7a:3d:
d5:eb:09:07:49:be:72:01:71:85:18:9b:c1:2b:57:e6:e7:d6:
81:a9:45:32:11:19:3d:ae:2f:19:dd:ea:63:2a:17:4a:4d:73:
f5:87:eb:b2:8e:9b:e4:10:5e:9e:ed:bb:fc:43:58:f1:27:92:
34:49:a8:b6:77:be:c3:47:df:b9:5d:80:65:8c:70:2c:3e:3b:
1e:df:b2:99:d3:3d:6b:93:91:ac:a6:fc:f5:11:df:31:de:65:
28:f4:9c:a7:e9:9d:ba:92:05:b9:7d:95:50:24:6b:2b:8c:23:
a4:60:a3:f4:d6:1d:56:1d:9d:cb:74:11:8b:97:a2:27:7d:b9:
c2:62:1a:8c:b9:7a:1f:0b:6b:c0:36:e5:ed:19:93:df:68:57:
b0:c3:56:ec:3a:d6:04:e1:71:93:43:de:93:ec:ee:1c:b5:e1:
4a:5e:ad:71:f9:1e:5a:77:65:1c:cb:93:57:dd:9a:31:da:c3:
57:92:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:31 2026 by rpki-client