Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: Kslgp2fR1CDYWhfuUl4AZ6l2CfWSVoIrkMjLxKirM7E=
Subject key identifier: 24:34:70:DF:B0:49:FB:AE:AA:8B:D7:09:87:19:0F:73:85:D1:FB:33
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 019CAB6AEDA6B68329B6C96278F309BBEF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0FD3
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: Q8tN/AyGu8RODVN7DKjzj1oR9BGSWenhZ6hn39hvTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ed:a6:b6:83:29:b6:c9:62:78:f3:09:bb:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=243470dfb049fbaeaa8bd70987190f7385d1fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:05:d6:d5:17:b2:ce:69:2a:0f:5e:c1:14:51:
f8:73:e4:0d:aa:c5:36:57:e7:7f:93:20:3d:b8:64:
31:20:f2:3c:10:b0:80:ce:88:20:bd:e6:4f:2c:dd:
40:19:fa:2d:a4:31:aa:b7:80:de:c5:fc:65:e6:74:
2d:a2:cf:28:83:9d:9b:89:45:e6:c9:a0:3b:90:ac:
59:25:9b:ee:ac:13:78:aa:a5:eb:e9:39:f0:8a:d6:
fc:f7:7c:37:9d:8e:ed:66:7b:2b:a9:26:00:4e:70:
ea:67:91:08:25:d7:45:93:86:3a:92:ec:64:7b:94:
53:6d:62:64:65:88:0c:78:06:97:0b:ab:7c:08:c7:
cf:94:4a:50:f7:8b:9a:04:3b:5b:37:06:0e:06:3c:
3f:62:25:33:d6:a4:ce:28:80:e7:d5:cf:ca:62:b2:
f0:8d:f4:14:7e:dd:e4:cf:83:5d:0f:1b:1f:a7:62:
14:04:f3:01:ac:2a:0e:54:c9:fa:b0:26:bb:eb:e9:
70:46:b8:f1:d6:57:10:7a:5b:fa:94:35:4a:d4:b6:
b2:64:4c:ef:80:6c:54:62:dc:79:58:63:da:bd:65:
98:a8:99:df:7f:c9:87:b7:3e:e7:a6:5a:6a:29:df:
05:a3:0e:21:00:80:67:5c:3d:3b:6f:4e:7f:4e:15:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:70:DF:B0:49:FB:AE:AA:8B:D7:09:87:19:0F:73:85:D1:FB:33
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:43:16:a5:29:35:f8:80:b3:9b:90:e6:8d:9d:57:7c:4a:67:
9f:fd:1a:8e:18:ba:61:83:72:78:f5:f2:2e:91:94:aa:55:f0:
50:1a:18:2e:60:de:d7:4d:f2:4f:43:b5:78:91:ef:7d:c3:ff:
d9:86:50:e6:6a:fb:ef:3a:3d:cc:74:8d:c1:08:2e:01:56:b4:
8a:09:11:6e:d9:21:c3:d2:eb:42:00:2f:0b:0e:59:32:c1:ed:
32:c0:8f:0b:f4:3c:2a:9a:0c:df:f1:53:c9:5f:cc:09:b0:cb:
3e:b2:00:ea:b7:4d:74:9d:d3:75:79:bb:07:cd:0c:c2:24:87:
67:f3:29:5b:df:9a:71:9e:a8:16:83:3d:da:b5:5f:7b:d1:e1:
07:53:43:dc:d5:66:e1:e1:a0:70:6d:5e:2a:3c:99:36:24:8d:
f3:99:4b:c5:b2:c9:77:9b:3e:8d:f6:3e:6b:d5:e0:b5:0a:80:
9e:a7:f8:fa:05:e0:d7:c0:70:b0:55:9c:c3:be:91:d7:e9:b5:
76:38:36:86:e8:65:14:f2:61:87:61:56:e5:6a:bf:62:9e:f6:
c3:b6:3d:32:ea:3d:33:76:07:64:14:34:37:76:86:60:8a:19:
c6:51:e1:49:f2:be:59:83:9c:6c:12:27:ce:e9:03:60:16:2a:
fc:37:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:28 2026 by rpki-client