Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier: mNEx0uYpRUpGhQ4eBzlTyU2jOl98bn9HYWB0LkH1qcc=
Subject key identifier: 55:63:60:4C:EA:28:30:22:78:98:E3:D0:70:D6:68:57:9B:49:2D:4F
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial: 019CAA8FDC9D8049096362A4D84417B62FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number: 0AAF
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: PdO/05NE2dkt3j//H7yiQBjwEnJAezd4wAZGjxOKYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:dc:9d:80:49:09:63:62:a4:d8:44:17:b6:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=5563604cea2830227898e3d070d668579b492d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:ae:e2:42:97:a7:0a:5b:ab:40:69:3f:fc:
59:cb:e6:3d:c4:03:ef:ea:a9:00:3d:77:36:a0:71:
96:d1:fe:58:06:8b:05:5a:bd:66:13:35:50:50:a8:
e3:b7:98:6d:71:92:94:96:b3:46:85:d3:2d:8b:ab:
91:b8:53:8e:9d:56:f2:f4:f8:32:e2:bb:46:4e:3d:
47:1c:6d:b5:49:a4:4a:14:a2:3f:80:84:01:46:b2:
23:95:2a:7f:9a:8c:6c:55:df:68:5e:9b:dd:94:22:
e9:56:36:d5:f9:b6:7d:2d:60:40:91:4a:fb:2b:88:
6b:dd:b7:a6:77:eb:c8:79:53:0a:6e:ac:58:f9:91:
c4:47:9d:99:8a:e7:52:99:28:50:09:e4:07:e9:40:
a2:b4:4f:43:ad:af:bf:cb:b3:b3:24:2b:dd:c8:64:
dc:80:0a:74:ea:af:bf:f8:1d:ac:8b:1e:c2:ee:42:
a7:68:8a:a1:56:dc:70:d5:db:2e:90:59:08:5b:f8:
f0:ac:64:a6:57:b9:52:7d:5e:bf:69:49:ea:c6:f9:
28:b2:6c:db:be:89:46:4f:11:01:f1:12:26:53:15:
58:71:f3:c1:d2:4f:fc:d5:f8:15:6c:c5:53:13:5e:
74:58:b9:11:ac:36:e4:53:54:05:11:81:31:db:4a:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:60:4C:EA:28:30:22:78:98:E3:D0:70:D6:68:57:9B:49:2D:4F
X509v3 Authority Key Identifier:
keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:f7:15:0e:5a:8e:c2:4a:b7:07:54:f5:e4:e3:b4:56:7b:
4f:74:d8:00:d6:5c:25:63:f6:20:d5:8d:dc:b0:cd:46:15:14:
30:ef:50:91:33:da:05:14:0c:92:d1:59:fd:ce:3d:ec:ad:46:
ba:cc:7f:cf:1e:fa:f8:56:79:c9:5b:3d:45:b9:08:23:1c:34:
63:09:c1:86:b5:14:4d:af:d0:7b:0f:90:7e:ea:a1:64:2b:e4:
c3:76:af:5a:bc:f1:f9:22:95:d4:ef:4a:c5:3f:0c:dc:6e:86:
db:a6:9c:ac:aa:eb:f7:00:ef:65:d9:5b:fe:94:f1:aa:06:b4:
77:c8:20:8d:61:00:3e:53:87:04:0c:0e:a7:09:b6:f7:84:6a:
0c:21:14:43:ae:c6:55:01:62:84:0a:0c:ab:b5:bf:b2:3e:8d:
ea:ee:4b:00:fe:9b:f6:83:41:2f:1a:e1:ee:6a:4c:bd:22:16:
76:2f:86:69:5e:c0:fa:18:56:ce:5f:b2:17:14:be:d2:91:74:
2e:54:dd:ee:81:33:b4:60:9d:e5:9a:06:35:0d:b2:ec:01:39:
f9:d3:dc:1e:e1:ee:51:47:ec:25:ee:69:94:c2:97:bd:93:15:
cd:18:47:97:89:a7:bc:cd:7a:c1:c1:61:94:d7:a0:a0:b3:1e:
b3:21:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:07 2026 by rpki-client