Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: aJygUYA7DVvh06d3AVQR0KxsSnlG9UJrfpfvrsk9VA4=
Subject key identifier: F6:AE:28:C0:DF:05:FB:B7:CF:F9:56:B0:07:15:70:A4:62:C0:9C:1C
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 019CAA587F98CB4C853B1ABAB8F7EAD444D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0FE7
Signing time: Sun 01 Mar 2026 17:00:52 +0000
Manifest this update: Sun 01 Mar 2026 17:00:52 +0000
Manifest next update: Mon 02 Mar 2026 17:00:52 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: H3flBZQ/eL818XMpDwA5Dv6EeFhw0rMXuS84JpG6tlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7f:98:cb:4c:85:3b:1a:ba:b8:f7:ea:d4:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Mar 1 17:00:52 2026 GMT
Not After : Mar 2 17:00:52 2026 GMT
Subject: CN=f6ae28c0df05fbb7cff956b0071570a462c09c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:42:44:c3:82:b5:85:31:48:97:2f:a9:6e:
85:b7:7e:3a:34:5d:0d:77:b5:60:3f:30:25:3d:1a:
a7:9d:04:72:1c:e3:8c:3c:30:dc:1a:c7:ef:d5:c6:
79:60:f6:29:bc:30:a8:e0:37:4e:39:da:03:d9:2f:
4a:95:be:8e:c2:ad:2e:05:16:db:6e:a1:d1:d1:d2:
5d:64:a3:36:65:be:20:30:08:73:58:87:a7:ff:6f:
33:13:82:78:95:19:0f:d9:f4:bc:75:7d:5b:ed:f5:
0f:56:ea:6a:a9:3d:3a:0b:8a:6d:37:e8:a2:af:6f:
91:07:86:7a:70:d5:77:1d:84:7e:7b:86:d4:50:3a:
f0:0c:57:1d:f1:1a:94:fc:29:7c:7f:b7:0a:1d:b3:
33:db:9d:59:7b:f2:96:71:a9:49:0b:f5:07:2f:ec:
49:e2:eb:bc:8f:cf:a1:5f:51:00:31:b4:b2:1b:97:
e4:9a:7f:90:02:6b:b0:db:83:22:f9:cc:ef:cd:8d:
2a:49:58:e3:f2:7e:5c:96:ab:2c:62:c2:be:ca:94:
fe:f8:c8:4a:84:d6:db:8b:12:77:f7:8e:9b:ce:ab:
62:a9:b1:fd:c7:56:cb:96:78:8a:d2:be:26:8a:3e:
cc:b7:5e:a6:f4:f2:be:b9:76:6a:6f:28:7f:d6:19:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:28:C0:DF:05:FB:B7:CF:F9:56:B0:07:15:70:A4:62:C0:9C:1C
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:27:91:de:f5:a3:1d:7b:3c:94:57:fa:b0:f6:6d:87:58:a1:
e7:d3:9e:4b:06:c9:e0:d6:21:e6:2a:95:f5:5d:e4:67:a5:be:
fc:56:d7:95:fa:f7:b4:c9:32:12:ec:e9:fe:75:2b:d9:0b:e7:
7e:3d:2d:ec:da:98:8c:f4:51:e0:53:5f:5c:30:30:eb:5b:db:
9d:0f:5a:a2:7a:b5:07:4d:ba:f6:a5:5f:ec:20:6b:de:c6:c0:
af:0b:80:1f:a3:5b:0c:eb:1f:0b:93:47:3a:e1:99:28:76:a5:
1d:16:a1:13:9a:87:a9:41:ec:ea:2c:6d:3d:c7:1d:3d:e3:41:
8c:57:d6:e9:f5:d4:ea:3f:74:e2:46:dd:1f:7b:dd:07:8f:3e:
69:4a:fd:c4:92:f3:84:56:8f:27:5b:93:9a:60:a9:6f:1d:7b:
4b:da:8d:7d:81:f2:31:bc:af:30:41:58:31:73:2e:61:82:08:
3e:3e:4f:40:92:6e:9c:67:a3:f5:d0:ce:1c:7c:89:07:94:dc:
9a:36:bb:0c:d6:f4:6a:c4:ad:42:58:dd:34:82:9f:cc:91:db:
52:71:e9:da:91:77:7f:1a:3e:29:ef:27:1b:5d:6f:5e:9b:53:
0c:64:dc:9e:d1:23:3b:6d:6a:ab:e0:ac:fb:8f:22:61:e9:34:
b6:8f:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:05 2026 by rpki-client