Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier: h8l/WggTPGxf4yb3xrfp0vy1OD6U5u5yYesG4vvCpK4=
Subject key identifier: 93:0E:D6:94:45:85:BC:E7:6B:08:15:99:4F:91:DA:FB:16:EE:0C:A4
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial: 019D98186108F2FE31977BBB0B8EB9F3A197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number: 0B2A
Signing time: Thu 16 Apr 2026 21:00:27 +0000
Manifest this update: Thu 16 Apr 2026 21:00:27 +0000
Manifest next update: Fri 17 Apr 2026 21:00:27 +0000
Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: d4s9xRHguXhzE0anmUX+Qn7iAE7Birhryfdc5PvV2gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:61:08:f2:fe:31:97:7b:bb:0b:8e:b9:f3:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Validity
Not Before: Apr 16 21:00:27 2026 GMT
Not After : Apr 17 21:00:27 2026 GMT
Subject: CN=930ed6944585bce76b0815994f91dafb16ee0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:d5:a0:b3:81:9b:43:33:af:d7:56:b9:69:
e7:26:95:29:f9:74:8e:fa:05:5e:84:3e:3a:51:d2:
1e:e7:f8:1b:35:bc:cb:74:9e:5a:0f:bc:82:91:61:
da:ce:35:e6:54:9b:36:d0:84:fb:d0:81:9c:ff:3d:
23:0d:d6:78:93:a3:12:eb:75:e9:1d:f5:c9:ea:88:
b8:77:26:1e:21:b0:5f:cb:15:14:50:37:b0:04:d8:
8f:b0:5e:97:a7:89:2c:93:5a:e5:b5:fe:3c:62:ab:
e7:d3:05:75:24:db:93:e1:02:23:9f:3e:4c:39:0e:
a5:3c:a8:20:c5:10:ac:b3:98:94:71:9a:84:7d:08:
03:eb:c6:c0:01:1d:c9:c2:ec:6e:0e:ce:cc:95:02:
44:4e:39:8e:08:eb:08:a4:d7:f3:9a:c3:84:af:8d:
a8:71:19:49:1d:19:2b:d8:b7:0a:ae:b6:2f:f9:8a:
e1:da:98:06:a8:0f:76:5c:5c:10:3d:cb:f0:cd:9a:
82:b9:ac:dc:4c:d1:ea:ff:0e:a4:66:2e:9c:ab:79:
5c:1a:25:ba:2d:26:eb:78:7b:1b:67:62:bd:11:fe:
a7:19:7b:12:3b:dd:f6:84:95:ea:04:32:5d:ea:69:
60:eb:f8:02:01:bb:e3:a3:a1:83:c0:18:1a:13:ab:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:D6:94:45:85:BC:E7:6B:08:15:99:4F:91:DA:FB:16:EE:0C:A4
X509v3 Authority Key Identifier:
keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8e:da:66:1a:16:30:99:56:0c:9e:ba:dc:f3:44:be:b5:07:
5c:f3:f1:1c:93:90:06:30:76:c4:74:88:32:5c:7b:67:3a:14:
88:e2:51:40:fb:a6:e6:39:67:e7:b2:2e:10:b4:c3:7a:b1:69:
5b:31:70:d1:ee:18:bf:9d:a4:cb:cd:b4:65:af:b6:56:8d:91:
2c:63:52:78:00:09:08:91:7e:a8:34:62:9c:1c:6b:e5:e1:99:
83:34:6d:e7:6a:c8:18:9e:1b:14:59:78:2a:cf:e6:01:8d:67:
31:96:d8:dd:d3:a2:71:e9:b4:2a:18:e1:ed:83:8f:c8:42:d0:
3b:d3:92:46:c3:d5:e5:48:6c:dc:fa:7f:af:1c:fc:a8:6a:8d:
3b:b8:cc:32:eb:11:b0:5a:42:c1:fc:d9:b6:be:03:79:05:4d:
8b:9c:5c:74:99:fb:30:46:04:3a:ce:78:a5:50:62:12:94:9a:
29:7b:c7:dd:48:c0:e8:4b:72:28:1b:7f:49:49:99:3a:ab:6a:
25:30:1a:c4:14:fa:3a:b7:14:91:ae:f6:2e:d3:48:97:75:df:
20:0c:e0:64:93:54:55:fd:0a:cf:b7:49:ec:7e:b6:5c:a9:b3:
0f:99:90:26:66:c6:0a:5a:6e:6c:ac:23:c5:f3:60:f6:6a:9e:
8d:f3:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:42 2026 by rpki-client