Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: 4zT7MtJUhWWwrZk1Ioe8vOKa/Ppah2F6em6cvLaJe8k=
Subject key identifier: 12:3F:71:91:EC:C5:88:DC:64:AE:A3:8A:0D:20:9E:6E:6A:00:41:41
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 019CAA588F5A617C3B34BD886E7B48D50092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0CBB
Signing time: Sun 01 Mar 2026 17:00:56 +0000
Manifest this update: Sun 01 Mar 2026 17:00:56 +0000
Manifest next update: Mon 02 Mar 2026 17:00:56 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: xnnR3HStuQwG3nXoxFYLl8JYJTDZW3lvNPjR3gUK8hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8f:5a:61:7c:3b:34:bd:88:6e:7b:48:d5:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Mar 1 17:00:56 2026 GMT
Not After : Mar 2 17:00:56 2026 GMT
Subject: CN=123f7191ecc588dc64aea38a0d209e6e6a004141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:0b:d9:b4:be:7c:fe:f3:ec:5b:20:60:22:
cd:42:b6:f9:0a:33:34:54:2a:2e:f6:6f:ba:6b:a5:
9a:78:d2:83:af:1f:8b:49:82:66:57:d6:8f:fb:f5:
e8:86:40:3e:07:59:07:cf:3f:ac:70:36:a9:a8:a4:
33:c0:a6:4f:71:5f:37:3a:c2:ca:bc:a2:16:68:2f:
b4:70:8e:6e:da:e1:8f:06:bf:fa:6f:c5:55:8f:da:
f5:1f:f6:8d:a4:36:59:18:6a:25:d0:b6:ed:59:58:
03:e1:ef:8d:a8:94:c2:bd:fd:a6:de:37:4f:64:da:
88:16:09:a4:fd:f6:40:4d:9e:4a:5b:b2:6e:89:c9:
8b:e6:73:95:ea:03:5f:fa:b7:74:ae:9f:e6:52:c4:
5b:24:c6:75:bc:dd:01:af:16:4e:a0:7c:d8:93:be:
ed:eb:fd:df:54:73:0b:e2:54:13:09:92:d0:80:23:
7c:d6:94:bb:3a:1e:11:cc:15:1f:72:dd:54:a1:e4:
c3:74:9b:3d:2e:f4:45:22:4b:5d:c1:e1:cd:a7:ce:
1c:3d:77:4d:56:f1:5e:f2:32:f9:d1:b9:92:e6:a2:
19:30:1d:82:06:ad:32:94:13:38:7a:b6:d6:9a:ad:
36:02:5c:0d:b6:51:a3:81:c2:ab:e1:8e:7e:e5:72:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:71:91:EC:C5:88:DC:64:AE:A3:8A:0D:20:9E:6E:6A:00:41:41
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:31:a0:0a:f4:67:7a:36:8c:80:9d:57:17:19:22:dd:64:
b3:67:93:3f:14:79:e9:f9:15:f2:33:2e:39:8b:a2:f8:0a:9c:
89:b7:a3:6d:12:35:08:7b:e1:e3:a3:2f:4b:9b:94:c5:a3:3e:
39:72:c3:92:ec:f2:e4:3f:57:a7:2e:ec:81:32:8b:9c:6b:f4:
b8:c5:9c:c7:04:46:72:ec:bd:14:a1:0d:fa:72:10:40:ac:bf:
48:58:d9:44:c8:72:b0:7e:43:10:3f:32:ed:be:80:59:64:1e:
dd:5d:0a:55:78:cd:c0:60:e5:b2:7f:a6:0c:80:2d:ed:29:30:
c4:16:d5:4a:58:0b:32:21:7f:33:5f:8f:ba:cb:e1:18:77:b8:
ea:b5:fa:9e:8e:f5:91:a6:db:71:a6:a6:01:eb:c9:c5:d1:2e:
97:14:67:d8:52:be:b5:07:4d:0a:40:31:78:95:fc:71:05:35:
9a:83:41:f6:f6:f0:92:8c:93:36:41:43:35:76:0f:97:2c:98:
97:7b:98:74:01:fa:c6:fe:c5:fd:77:9a:d1:a1:d9:85:14:1d:
7f:59:64:44:c3:dd:7b:34:b7:d2:00:eb:85:44:38:24:58:f9:
99:fd:9d:47:ac:26:8f:49:6c:d0:88:0e:8c:68:ca:dc:55:4e:
31:de:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client