Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: XRWVBFcO9KS6idNvTpYuBMajdAICKsM+6K90o43BA/E=
Subject key identifier: 44:48:00:E6:25:40:B0:57:B1:E8:C0:81:F7:D8:F2:A0:25:4E:C2:65
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 019CAB6B93676D4F0E0DA1A09F2E18AB23D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 1102
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: RwpF3Fh4G0UwQ8ZkmULTl9nZTh6HPafXrMBo16r7GKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:93:67:6d:4f:0e:0d:a1:a0:9f:2e:18:ab:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=444800e62540b057b1e8c081f7d8f2a0254ec265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:a9:1d:d4:60:34:76:4b:1c:86:03:02:06:
e1:67:d3:f5:67:9e:d4:4d:d2:fc:5b:e7:71:a8:d1:
ae:0e:06:d0:77:3a:0b:aa:77:a1:c0:06:e3:da:86:
a3:06:47:ac:2b:9f:3a:e2:9d:e6:8c:cd:14:19:43:
db:c2:d2:ee:9c:87:b6:67:84:f6:d9:79:d8:f6:e9:
12:b8:6c:88:e1:07:7b:d8:f3:34:6b:39:ba:be:32:
80:30:70:f0:68:29:a5:13:68:90:c7:6b:54:18:f0:
8e:ec:5e:56:c8:fc:e5:4a:7a:e8:cc:e6:2a:04:40:
ed:22:90:f6:16:f2:be:43:ec:5e:2e:e1:f9:87:60:
6e:55:00:53:2a:7c:82:c8:62:f0:ed:79:7e:ed:aa:
fa:be:ff:74:65:1a:8c:5d:7b:c9:fe:92:a9:15:32:
c9:b6:5b:9b:c0:b2:7f:7e:15:91:be:c0:56:f1:cf:
00:64:8e:63:5c:99:9c:34:0c:25:c7:96:e0:1a:f3:
69:40:f9:92:87:76:2a:a6:4e:5b:e5:1e:f1:4c:69:
c2:39:cf:87:f4:af:21:b1:64:ba:85:31:7d:61:c8:
ee:5d:6b:f2:8e:25:73:b6:97:e0:c9:82:7a:43:84:
2c:b8:cf:03:63:be:d6:0d:9d:a3:e7:59:cc:90:e3:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:00:E6:25:40:B0:57:B1:E8:C0:81:F7:D8:F2:A0:25:4E:C2:65
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:4a:50:58:82:c3:04:7f:7c:22:63:1f:12:3d:a3:27:e7:
16:d0:f9:94:4a:b6:80:43:6e:41:33:30:66:0c:41:df:e2:29:
cb:a7:73:40:4b:60:76:c2:67:ec:00:7c:92:69:d1:3a:03:6d:
fb:f6:97:64:f8:9e:1a:60:6e:6c:c8:14:8d:3c:f1:99:99:55:
6a:f7:ee:81:79:d7:67:89:ab:66:d9:74:2f:a4:fb:44:37:1e:
de:ae:ef:2c:2b:b7:98:fa:80:33:ef:6d:59:13:a3:59:06:d3:
56:2f:43:41:9d:ba:e1:b2:44:f8:a6:89:b2:86:92:d7:d1:ef:
3d:27:f6:d5:57:e8:c3:6d:ff:78:c2:dd:a6:24:95:42:a8:06:
48:2a:f6:47:a9:4e:33:d9:60:f0:ad:21:84:f2:35:cb:57:bd:
e1:13:cc:3a:35:31:ba:c2:c3:c0:5a:c5:c9:8a:64:18:56:fc:
55:a3:7a:cc:26:a1:6c:33:c1:3a:6c:41:b3:cc:46:47:14:4f:
a2:ca:c0:ca:0f:4d:0f:21:c8:10:c2:5a:27:bd:2f:cb:3c:9e:
5e:b1:9b:f7:71:ed:0d:3a:9c:da:73:b6:95:63:12:ab:61:1c:
f3:f5:2a:b0:61:6e:d9:0c:3f:b0:c9:f0:94:7f:cd:01:ef:d5:
83:4d:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:04 2026 by rpki-client