Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: FGiGZAmTrezn2acDu24cCWpWHOFRGFUO57r9t9gRNVA=
Subject key identifier: 16:C6:19:79:F7:03:71:88:7E:D0:EA:D4:CD:2A:84:B6:3F:5B:C2:85
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019CAC46F1E6162D30193B73156D51F026FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: ejJKAAEobGoab0y8+bBxeYytXRYr7Bz+HmFTR7NPiP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f1:e6:16:2d:30:19:3b:73:15:6d:51:f0:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=16c61979f70371887ed0ead4cd2a84b63f5bc285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:6f:99:44:92:45:2c:1f:d2:03:4e:e4:6a:
f7:b1:68:ca:2e:18:67:58:bf:11:1d:55:2a:64:89:
a7:70:b0:41:0a:b1:81:96:d7:93:3a:e0:79:10:96:
5e:d3:fe:67:d4:90:5b:99:4b:8f:db:79:c6:eb:81:
3c:a2:22:b4:7e:8a:82:41:86:e9:31:74:52:18:0c:
8d:40:9d:e9:1b:0a:ed:7d:7d:4c:e7:b6:23:df:4c:
ee:2a:19:09:c7:59:1f:03:5c:88:19:c1:ea:4d:b5:
16:16:01:63:7e:ea:10:3d:f5:df:e4:21:09:ad:bf:
78:a7:c5:94:e1:d6:65:ea:0d:13:1c:ca:f7:75:a9:
e4:f4:dd:d6:5e:1f:f5:e5:72:2a:09:f3:2a:2e:a6:
a7:16:37:64:ef:3f:2b:fb:03:c3:b9:f7:1e:46:1b:
c0:51:45:d8:0d:6f:10:bb:8a:e2:51:53:2b:6d:b7:
77:d3:64:85:d5:ef:f1:02:27:9b:50:66:71:72:93:
a9:0b:e7:b6:36:19:a5:58:1e:47:da:dd:59:34:e7:
ec:86:1f:6b:09:40:80:63:30:4e:24:35:30:c5:de:
b9:a4:4c:c1:b2:cb:c6:10:1c:1b:ec:43:48:7a:a0:
fa:14:74:fa:b8:2c:72:db:16:93:18:0d:be:2c:10:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:19:79:F7:03:71:88:7E:D0:EA:D4:CD:2A:84:B6:3F:5B:C2:85
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:3c:a0:8f:f2:ca:dd:3f:f7:3d:4d:2d:04:88:17:b4:34:
0b:23:e5:b2:ae:05:34:60:09:95:2f:0b:83:e3:71:b3:7c:c6:
42:37:e3:c4:d9:ec:1c:a8:19:20:4b:c9:b6:5f:37:d4:92:fe:
f2:59:c8:00:4c:86:e2:c4:9e:21:7b:5f:b0:4a:7c:d1:fb:cc:
e6:1c:dd:c7:d4:0b:6a:ba:28:da:02:66:3c:43:fe:3f:02:47:
59:92:ca:2d:8f:ef:f2:c3:46:0a:0b:0f:70:3c:18:20:97:ea:
e5:e7:bf:c3:54:8e:59:01:26:d6:9b:3b:6b:dd:0c:b1:31:af:
07:d6:f9:96:47:82:d4:1f:97:85:8e:b9:49:a5:d2:69:e3:c8:
14:eb:2a:bc:9e:29:52:a6:9f:9b:54:30:f0:4c:55:60:f7:10:
22:5c:4a:54:a7:b4:bc:44:42:5e:d7:67:75:91:a8:6f:7c:ef:
49:80:ce:7d:91:35:e5:77:72:ab:63:20:1d:d9:84:d7:b3:0c:
c7:5e:47:c7:a8:c6:7e:47:93:93:db:f2:c7:4f:60:4f:2b:26:
f7:79:75:b6:b7:6f:dc:21:f4:ee:09:7a:f9:36:da:55:9d:d8:
06:5e:87:c3:46:71:40:d1:5c:90:ad:58:72:9d:f9:40:1c:aa:
e6:7a:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:43 2026 by rpki-client