Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: claijoRsCiqrL7BP3LQYzgcj3/nsa/NNOonwZWHd/UY=
Subject key identifier: D8:50:D3:8D:F7:63:FA:68:0E:A6:55:3C:D3:7C:A9:0B:23:8C:FA:9B
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 019DA30A3A28C82D2008F0B2B1F0877B2949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0C59
Signing time: Sun 19 Apr 2026 00:00:49 +0000
Manifest this update: Sun 19 Apr 2026 00:00:49 +0000
Manifest next update: Mon 20 Apr 2026 00:00:49 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: sTLBrBcwfAPLyRe41mitt7mJuwHt4aRzX2GraeGTXlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:3a:28:c8:2d:20:08:f0:b2:b1:f0:87:7b:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Apr 19 00:00:49 2026 GMT
Not After : Apr 20 00:00:49 2026 GMT
Subject: CN=d850d38df763fa680ea6553cd37ca90b238cfa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:e4:fe:c0:1d:c9:3b:9f:60:ba:fe:12:bd:
84:e3:b6:16:da:13:f9:83:6d:47:62:2f:9a:92:49:
30:1e:6b:77:45:2d:73:cd:49:bd:0b:bd:83:49:d0:
59:b3:d2:a8:fc:3a:99:2a:2f:6c:06:53:65:61:b4:
17:7e:69:0d:9a:56:50:06:ff:f5:31:47:4c:c3:ac:
cb:15:c7:be:aa:9d:d6:37:6e:61:d7:0b:aa:78:64:
f7:f5:66:9e:12:cc:9c:a0:eb:22:2c:83:13:20:e8:
e6:b2:f1:f2:1b:cb:20:3c:2a:0f:4f:02:a2:ec:0b:
de:2b:7e:28:e3:0d:c5:96:28:32:4b:2f:b2:a6:3d:
06:53:7e:6d:d5:cc:f1:c4:c9:2d:b4:9e:e5:78:fd:
e9:19:9d:04:0e:7f:33:18:da:81:64:0a:0d:10:12:
b5:ea:8d:ec:2f:00:74:a1:b1:9e:6c:04:d9:cc:10:
f0:4d:a6:6b:f3:2b:6f:f4:33:b1:3f:f3:2d:be:b6:
19:23:7b:1f:4f:bf:01:ba:a9:b5:57:bf:ff:03:67:
bd:db:44:3b:e1:ca:53:b3:81:c1:59:2e:2c:85:cd:
8b:e8:65:35:9d:b3:64:4d:6d:33:7f:68:0b:95:78:
5c:c5:3d:a1:39:82:78:be:32:76:b2:a2:dc:b7:de:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:50:D3:8D:F7:63:FA:68:0E:A6:55:3C:D3:7C:A9:0B:23:8C:FA:9B
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:45:b8:a9:46:95:e6:65:88:2d:8c:37:56:75:b9:63:46:e8:
23:d1:ee:ae:5a:02:2e:6f:1f:32:ef:40:91:a8:5a:5b:5c:3b:
08:fe:a4:84:f5:e5:8e:73:71:1d:e3:18:43:10:99:ed:e9:97:
c8:52:e0:b1:a8:c3:f4:0a:3d:ae:77:1c:85:3c:10:ba:52:55:
87:75:94:98:1b:4f:4b:14:fc:45:33:f2:58:cc:b6:76:a7:7a:
83:6b:47:ee:01:d7:8f:76:90:3e:6e:b8:0d:93:ec:c9:5d:b8:
f5:d7:60:77:8e:3c:44:d6:f2:c1:21:4b:fe:ea:78:8a:47:00:
0d:4d:1b:fd:4b:df:a3:60:c0:92:ca:19:34:19:e7:29:29:4f:
8f:ca:fa:0a:79:a4:9e:91:48:67:f7:48:af:07:ef:4f:ab:e6:
8d:b3:83:3b:7f:1b:35:9a:7c:f4:fc:72:cf:10:9d:71:a4:24:
9e:89:01:fc:58:ac:eb:32:9b:45:a4:64:eb:04:76:d2:fb:0b:
91:7d:2f:99:70:c1:24:5d:0f:6a:ff:fa:8c:6d:66:9f:8c:60:
6c:f0:52:98:e3:cc:96:a0:67:99:93:c5:c5:64:63:86:81:a0:
a7:d5:9d:84:97:e7:f3:64:9b:b8:e3:d5:ba:98:23:ee:7c:b9:
d9:d6:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:40 2026 by rpki-client