Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: waEYNdS67ngIqvkzJwJkjFbDWnzuNBaYNpK7Ro+X8vo=
Subject key identifier: 67:9E:91:41:E0:48:58:F9:40:07:8F:CE:C5:21:70:2A:90:D1:CA:96
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 019CABD94B1CB9917465D0135B29F00AB5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0BD9
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: 2rR34u0OAnvIQlLvaOf7fB74smogm8mV6u8eH1cJa8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4b:1c:b9:91:74:65:d0:13:5b:29:f0:0a:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=679e9141e04858f940078fcec521702a90d1ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:64:ba:dc:55:bc:78:1e:ef:a1:1a:a8:cb:
c9:6f:b6:0e:57:ad:a6:a5:2f:79:e4:52:a0:0c:a1:
5a:89:62:59:58:e8:d0:9c:00:48:d3:52:6f:ef:7a:
09:da:83:2a:f5:ad:e7:5d:06:16:1b:d9:a9:3b:ce:
72:da:cc:b7:80:7b:06:d0:fd:cc:ea:14:d4:bf:df:
c9:45:10:00:24:1e:26:da:8e:d5:6b:40:4c:ac:31:
cf:c8:c7:57:17:8c:69:15:77:95:ac:00:32:73:9c:
ad:03:7c:f6:89:6e:ba:ba:e3:dc:a8:0d:3c:2c:b3:
16:44:d2:2e:22:0b:b3:99:7c:b7:c7:5f:ca:12:ff:
4f:78:51:f4:7b:41:0d:f9:15:14:c8:1a:7b:53:0c:
7e:24:97:aa:f2:90:cb:d6:76:8a:e8:93:99:da:3e:
43:ed:b5:6b:5f:72:99:e8:78:e7:92:b4:64:3c:fb:
2c:10:7b:d0:01:ef:4b:3d:96:d4:dc:c7:b7:21:0c:
fd:be:62:55:4c:42:ed:26:06:4c:e3:5f:2b:4e:10:
5e:95:55:ad:96:1a:31:5d:a1:5c:bc:22:48:a1:c5:
60:79:50:66:a6:a4:d5:66:36:ed:87:62:23:4f:11:
c8:e8:98:4d:01:bf:2b:0b:54:8a:02:d5:0e:42:1c:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:91:41:E0:48:58:F9:40:07:8F:CE:C5:21:70:2A:90:D1:CA:96
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8f:0b:39:ab:45:63:ba:ad:c3:59:de:ff:8c:ae:b5:8a:c2:
16:f7:c0:b9:c6:fa:f0:a3:2c:fa:3e:60:ae:c2:db:72:24:5b:
83:e7:82:c2:5d:a0:de:88:e9:6d:ff:6b:81:c3:24:ad:75:ea:
85:25:20:ae:f4:b0:d6:9b:0e:b7:85:d7:3e:a3:be:c0:ab:3d:
7b:cc:32:fc:66:f3:1a:85:3a:06:b7:a1:b6:a3:18:12:a0:66:
71:14:2e:65:5d:26:95:aa:0a:1e:a5:a9:88:25:d1:af:06:dc:
d6:9a:3c:5f:8e:c3:6e:ca:aa:f6:d2:5a:d1:a4:60:47:dc:b6:
d3:ef:b6:ee:82:48:7a:85:9a:72:32:d9:89:4d:81:63:1a:96:
9e:fe:db:7f:c8:65:9f:dc:0e:ba:fa:a6:79:b0:90:70:7f:ec:
70:60:f4:d0:92:ae:1d:d3:c8:79:9a:12:29:4f:9f:1e:ab:7e:
44:40:f1:03:75:09:45:fa:d1:a7:5e:5d:4c:fb:db:86:7c:5a:
ac:51:70:80:ec:7a:77:b3:c4:97:78:a3:ff:cf:93:6e:92:09:
12:93:a6:7f:94:d7:b0:65:d7:15:03:d5:34:d6:04:65:33:c9:
b8:ec:8a:f8:4e:74:16:ff:b6:64:dd:50:6f:1d:5b:e6:91:79:
dd:67:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:29 2026 by rpki-client