
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: xxWLtsaoJ+b6/MWheq/2byWT9e53/VwKpN+o3p8rpbM=
Subject key identifier: 63:A8:79:14:56:52:F1:3E:E0:32:DE:E5:33:43:BF:48:D3:8D:33:63
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 019CAB6B65563EDD22B935AE4F303822F960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 07C5
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: jyhJANtIjYH1MXmF5xDCgo7lIZfnDY7TyZJXMKZeg/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:65:56:3e:dd:22:b9:35:ae:4f:30:38:22:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=63a879145652f13ee032dee53343bf48d38d3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:1e:18:57:b7:b2:c3:9a:d4:c6:53:da:a0:
d1:58:9b:e0:18:96:49:bd:3b:5c:80:b0:c9:1e:bf:
1b:a9:d8:9d:da:1e:b4:c3:44:40:dc:09:4f:f9:c4:
05:e1:cc:26:6b:75:b7:64:d9:9a:76:51:52:6c:16:
22:3b:3f:f1:83:19:75:1e:01:ef:00:cd:61:87:83:
29:eb:86:f0:55:6f:2e:fd:e5:27:39:ec:5f:49:77:
f4:c8:d4:9f:ce:49:ef:0b:6a:a3:be:84:fd:31:ca:
36:b0:b3:f3:04:73:86:d5:9d:09:1b:17:e6:b9:c4:
62:12:66:ca:d0:12:7b:97:fa:af:f8:bf:08:d3:c0:
21:74:cc:0a:9f:63:6e:7e:99:59:84:7c:3d:4c:48:
86:5f:c7:cb:e6:dd:3b:3c:1e:21:58:09:58:e3:2b:
02:bb:e2:fb:65:26:ac:96:a8:a6:41:74:76:a4:64:
a2:ae:fd:aa:ae:d1:04:ed:6c:7f:8d:2e:19:2d:c6:
73:33:32:ed:04:e4:79:79:45:4d:c2:b2:c3:77:99:
45:11:dc:e0:a4:85:bf:3b:e0:b0:ed:b7:f8:40:1c:
3b:96:87:f4:98:d6:9f:94:65:00:39:ac:86:cd:8b:
a5:91:88:a3:cf:bb:b0:d3:2d:8b:b8:bc:96:4d:37:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:79:14:56:52:F1:3E:E0:32:DE:E5:33:43:BF:48:D3:8D:33:63
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:d8:3e:e9:dd:dc:46:2e:82:c7:b8:fc:d2:ad:9b:30:01:
a3:9a:7b:03:91:8f:90:2d:7a:b4:7d:de:d4:fb:a1:16:26:b5:
09:da:25:2f:2f:75:e2:53:31:7d:12:18:38:6c:92:dc:98:db:
e3:cc:76:c3:c0:0d:40:cc:86:b1:77:b5:5e:af:4f:c4:2c:99:
0d:ed:a9:ac:03:8d:4e:fb:86:a5:76:f9:31:71:7d:06:f1:ed:
0d:3e:dd:19:a3:6b:cc:87:cb:38:02:8d:0a:34:a1:a7:c1:dd:
63:4e:a7:68:65:f4:8a:2e:31:a8:8f:cd:2b:11:1c:15:ee:07:
fc:38:2e:2f:2d:c3:5c:8c:79:15:17:6a:19:0e:6c:f9:c5:86:
cb:29:fe:76:ea:b4:e1:16:aa:ff:f9:99:f6:cc:9d:d2:bd:dc:
eb:f6:16:2d:22:17:09:2a:cf:a9:01:1d:65:f8:3e:44:7a:06:
55:63:3b:3b:ab:a5:50:e9:dd:da:b3:b9:07:e4:a5:d9:7b:26:
a7:59:74:85:87:a0:8e:b2:25:02:c3:93:8f:cb:3e:fc:d1:45:
5c:06:4e:63:e4:78:89:de:f9:e9:15:7d:b5:1c:95:92:e1:8f:
d7:59:8e:3e:4b:3a:2e:44:0b:9f:c9:bb:3f:fd:aa:af:c7:a2:
d8:94:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:10 2026 by rpki-client