Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: oYxhpOTgpSeGotQNxCkQHxmrJCn0EWqSBFPHQqT9As8=
Subject key identifier: 41:07:8F:D2:C2:F3:C5:40:9A:7A:02:27:AF:2E:15:FB:72:C8:24:D0
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 019D98F47C1A04BEADFC18D817ED0EBE4A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 117D
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: wGoZJe4KTmLOegXeVUMaagAPgA6Is+08uXObnIbLp/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7c:1a:04:be:ad:fc:18:d8:17:ed:0e:be:4a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=41078fd2c2f3c5409a7a0227af2e15fb72c824d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:32:4b:db:0f:3f:0f:96:c2:e1:b6:78:4f:
48:17:1b:3a:9b:32:cb:c3:40:9d:2d:63:61:56:0c:
50:8f:65:2f:8d:ff:b0:d1:be:80:92:f8:d0:17:e8:
18:53:33:8f:20:51:59:75:6c:2e:3c:e7:ad:d2:b3:
5d:cc:8b:93:5d:cb:1a:2b:ca:f4:1b:eb:1f:8f:6b:
9e:a0:af:5c:e1:88:bb:42:ba:f4:17:a4:3c:b9:2d:
f6:ad:62:f9:a3:00:34:40:69:28:eb:81:0c:0f:3c:
0b:c7:c9:2e:19:72:64:fe:78:c4:ba:59:f5:55:2e:
f5:92:20:b6:79:34:0a:7a:75:8b:fd:b6:27:cf:be:
b1:b6:5a:7e:7d:2f:a0:37:55:aa:d2:cf:ae:40:d8:
85:5c:5d:c4:a1:b3:48:41:98:3b:93:b3:0d:ab:3c:
61:d6:a5:4e:e0:03:cf:61:c7:6e:21:b8:5d:81:91:
92:7b:ab:e9:68:9d:36:4a:3b:6f:bb:bf:f2:24:70:
b8:34:fc:5e:9b:05:9e:47:a4:2a:69:b2:c9:ad:a0:
b3:7a:12:da:b6:a5:cc:7d:bf:84:56:2c:28:51:b0:
47:ea:ed:2e:85:44:be:e2:fe:78:e9:94:5c:14:57:
6c:c1:fe:4c:17:45:6b:94:8f:6a:14:39:d9:08:3f:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:8F:D2:C2:F3:C5:40:9A:7A:02:27:AF:2E:15:FB:72:C8:24:D0
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:0d:63:f5:00:a4:e8:df:82:f8:e9:2d:49:15:fd:c4:1f:
d6:d8:f0:e8:63:62:5a:78:e7:cc:99:79:df:6a:63:f9:41:e1:
a1:fd:6b:76:b1:59:59:b6:a0:fd:e9:ed:79:e8:e1:ec:92:bb:
a4:f6:e7:3e:63:fb:e7:c1:3f:31:3c:b0:bf:b7:57:8d:2b:41:
92:e7:46:01:a9:9a:21:b2:80:04:30:da:0d:e7:cd:f6:ff:35:
bb:32:ca:75:69:11:37:2d:03:db:77:d6:da:be:9f:47:95:8f:
5c:0c:40:e4:fe:6a:3c:ea:e4:f8:6f:92:ee:dc:31:94:21:2e:
e6:0e:67:1f:ff:a5:ae:e7:3a:50:6e:81:47:a5:f8:c7:de:19:
d3:eb:c9:9d:92:58:b6:a4:1e:9c:41:2a:db:58:78:16:b2:f5:
fb:fd:95:de:cf:b6:ff:db:0f:2b:68:4b:8e:0c:4e:29:e3:a5:
77:36:81:46:42:59:10:25:64:80:14:e9:c5:ca:1b:80:27:83:
e4:68:45:ea:b1:ab:30:bb:ec:78:f7:05:c4:ea:11:79:07:88:
4f:23:97:76:ba:48:e8:d6:22:1c:35:85:60:0f:d8:35:cf:29:
93:5d:51:75:ff:ea:78:55:4e:7c:28:a3:a1:c1:61:1f:1f:1e:
db:82:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:23 2026 by rpki-client