Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: 0vjb9V/Z+Kwss4zfe9kgbU/deuUEY+b1YieFDeWc55U=
Subject key identifier: 3F:72:03:41:13:41:91:3E:59:EB:A6:92:CC:C7:73:27:5A:D0:F0:72
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 019CAD5A3E30E969733E7CCC7E3296C3E124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: VygDMZsdhAQKxTpgE/p0wupMCi9tV0Z3OSSOH+vkIFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3e:30:e9:69:73:3e:7c:cc:7e:32:96:c3:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=3f7203411341913e59eba692ccc773275ad0f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:1f:cc:c3:ed:8b:3b:08:7a:e3:35:3e:ee:
1d:6a:6e:d5:f5:e0:d2:ec:17:34:87:ee:01:56:c0:
69:93:ea:2e:30:cb:53:f5:a5:43:f5:52:2b:b6:17:
20:97:e5:8f:a6:e5:37:68:bc:e0:4b:3b:a2:15:20:
fb:fa:a9:23:f9:38:a0:38:d3:6a:78:b7:b1:88:e7:
e2:87:75:e9:01:f7:28:7f:b5:30:04:03:23:db:c0:
78:92:38:d5:ed:34:71:3d:b0:84:12:29:1c:7f:bb:
9d:e5:fc:50:33:e3:f9:7d:05:f0:d5:65:30:7f:d0:
e5:73:08:36:88:c9:b0:9a:b4:f7:9d:71:70:89:dd:
6c:20:80:6b:e8:5a:96:cf:fc:f2:af:37:fb:28:70:
54:48:f1:34:03:14:5c:6b:f5:e2:a0:52:84:7c:13:
ac:5d:57:07:22:f8:c2:e3:51:a9:41:6d:83:e4:7c:
8b:52:65:31:63:2d:7e:6f:6b:5f:59:58:d2:85:51:
85:b4:ef:c5:95:e8:ac:16:ab:3f:2b:1e:9b:97:c1:
96:5f:5e:b3:be:c1:b5:99:bd:22:19:58:2f:d5:cf:
51:80:77:9f:37:62:40:04:52:84:b0:26:61:20:53:
1f:b2:19:b8:d0:fd:3d:5c:c8:9d:a0:4e:d4:a5:fd:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:03:41:13:41:91:3E:59:EB:A6:92:CC:C7:73:27:5A:D0:F0:72
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a9:98:aa:ba:f9:f7:e5:6c:3f:96:0d:6a:2f:64:6f:42:89:
ca:7c:0c:00:f6:b9:62:c9:f0:29:6e:01:54:26:89:5f:c4:b2:
76:33:8c:d4:71:4b:a3:d6:55:b3:08:12:67:c6:b4:7d:9a:9e:
89:fc:ce:36:c3:85:06:5d:89:b1:cd:54:5e:ca:02:bc:aa:b4:
c8:6d:7b:58:a6:ae:67:ca:ff:b1:1b:da:7d:3a:41:2a:a0:df:
c0:53:ef:42:93:cc:cb:6d:74:35:00:33:f7:39:39:97:56:4b:
ee:1b:43:d8:92:c9:ed:c0:23:c4:1d:7b:3c:56:81:37:11:52:
a7:c7:55:f4:98:08:da:bd:b1:a4:ff:e0:83:08:75:51:9f:be:
49:cc:64:c3:3c:a6:8c:5d:03:da:74:75:11:84:81:5a:4f:0e:
e4:89:d5:ac:c8:50:9a:62:ff:d2:05:6a:ba:b6:b9:fb:47:fa:
81:97:b9:b8:ab:bf:5f:5c:a0:e3:83:1e:b1:06:4e:1d:79:f9:
c3:b5:fa:97:ef:08:e5:bb:f8:6e:91:7b:9d:7e:ac:d7:ab:29:
e3:5d:67:ba:6c:aa:a2:ef:25:b4:4a:b7:7d:92:31:25:27:96:
3a:86:b1:75:8e:73:c3:3c:9c:39:0e:f4:01:a4:87:43:a0:6f:
a5:ec:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:59 2026 by rpki-client