Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: T8tiddRO0tJrLeeJj6hjCVt7PA2fhFJodAHgLoG0zaw=
Subject key identifier: 37:D0:5C:7F:29:E5:7A:7C:51:F6:5D:C3:3C:5E:53:8C:8F:8B:29:0F
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019CAF11493D91CE8B01700ACE4BF63A2ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0DC9
Signing time: Mon 02 Mar 2026 15:01:11 +0000
Manifest this update: Mon 02 Mar 2026 15:01:11 +0000
Manifest next update: Tue 03 Mar 2026 15:01:11 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: QNkJzfVnt7z21XWITMdctrdXZqd7cJ2Ke3ie0hqF9d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:49:3d:91:ce:8b:01:70:0a:ce:4b:f6:3a:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Mar 2 15:01:11 2026 GMT
Not After : Mar 3 15:01:11 2026 GMT
Subject: CN=37d05c7f29e57a7c51f65dc33c5e538c8f8b290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:cc:79:be:16:f9:c7:59:04:5f:09:07:1e:
37:d5:e4:9c:58:3d:73:9c:cb:04:af:d9:0b:a5:d8:
15:7a:da:c8:31:ac:d3:43:61:96:67:48:22:62:58:
80:d4:06:74:ff:c0:b8:26:83:79:69:42:e0:44:6b:
26:84:c9:7a:c8:23:90:03:10:38:35:5a:6f:1b:5e:
d7:f5:a9:8d:44:b1:bf:e7:20:86:24:10:55:8e:b8:
49:5c:d5:fa:3d:45:34:e9:01:d6:97:39:b7:d2:95:
ed:6c:d1:75:f7:2a:d8:95:ce:f2:75:a7:23:54:14:
17:87:cc:d3:9c:e2:cb:21:11:03:dc:7e:f6:23:23:
52:65:24:44:99:95:0a:b0:e2:05:0d:81:5e:c3:40:
a6:9f:d3:2b:59:f7:40:83:7d:cc:0a:e3:10:7b:11:
ed:5d:d3:fd:9b:09:a5:ca:50:71:a7:03:8a:c0:a5:
83:4b:90:12:8b:6d:3e:e4:dc:82:d5:94:99:ea:42:
1d:22:66:6a:84:38:4f:ab:db:ef:c3:26:44:95:80:
19:21:c8:bc:35:b8:a8:80:c6:a8:10:34:fc:9a:bc:
5c:0c:0f:5b:1d:57:5c:2a:59:25:0c:1d:b7:72:9c:
79:d6:9c:f2:94:f9:ed:44:a0:fe:a6:c3:1b:3d:1d:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:5C:7F:29:E5:7A:7C:51:F6:5D:C3:3C:5E:53:8C:8F:8B:29:0F
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:46:23:38:bb:67:83:1b:c3:41:32:73:f3:33:5e:60:8f:
26:44:69:52:e9:06:b9:2b:a5:bd:89:f4:b9:37:ad:13:e0:5d:
ca:a7:cd:e5:58:7f:fc:95:ad:02:c4:9b:da:06:08:99:56:7e:
b9:a1:00:d6:da:34:af:a9:cd:bf:94:72:c8:d6:7d:b2:e4:8b:
bf:e4:21:54:58:ac:a8:6e:2f:55:95:19:d6:c8:ab:9c:86:8f:
f5:44:c1:27:e5:94:67:96:fd:3b:87:7e:f8:42:a8:a4:25:c9:
fe:b6:a3:52:dc:45:5f:87:e5:a6:69:18:53:9c:63:92:9e:73:
76:58:b9:6f:49:ff:72:d8:55:b6:66:a6:a4:f9:c0:74:bc:bf:
66:c9:32:75:a6:80:a7:23:86:0b:68:8e:6b:a0:8a:fe:73:ee:
44:8d:ac:74:06:3f:d8:bb:9e:bb:e9:7a:52:94:e3:2c:cd:ea:
01:1f:44:2c:4b:7d:88:9f:1e:07:76:63:73:cd:54:37:1b:e8:
89:a0:2f:71:ff:65:4f:bc:ca:1e:cd:cf:f2:00:4b:5c:58:b7:
8f:c3:1e:63:9b:51:7a:63:6d:fd:50:45:bb:01:41:77:af:8f:
bc:5b:e2:e8:dd:ca:ec:dd:91:32:9d:f5:74:51:7c:da:75:d5:
1a:6c:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:45 2026 by rpki-client