Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: sWWOPGMyvsdP79hODOSl7IdcC24GxTSvOLsUPmyEHuI=
Subject key identifier: A8:3A:98:D0:3C:B6:B1:75:62:11:CB:DC:7C:1C:CB:00:82:9E:31:7D
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019D9BBF2E561B296FFE81384D51BAAA8B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 0B91
Signing time: Fri 17 Apr 2026 14:01:30 +0000
Manifest this update: Fri 17 Apr 2026 14:01:30 +0000
Manifest next update: Sat 18 Apr 2026 14:01:30 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: NiOiW0aQGyLp0bIoMjintQZsndi2OVkpbXDF2DpEg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:2e:56:1b:29:6f:fe:81:38:4d:51:ba:aa:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Apr 17 14:01:30 2026 GMT
Not After : Apr 18 14:01:30 2026 GMT
Subject: CN=a83a98d03cb6b1756211cbdc7c1ccb00829e317d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:b9:c1:43:4f:38:cc:d1:d3:15:7e:44:fb:
05:cb:9e:31:8f:1d:78:5f:d9:c4:ec:24:18:93:16:
93:e6:e9:a4:51:04:b0:1c:d9:da:23:ee:be:33:3f:
b9:e8:31:f5:0b:ac:f7:11:69:30:01:59:95:aa:0a:
d9:61:e0:c3:67:03:94:6e:66:92:a8:03:b4:81:80:
08:30:ec:0b:1d:f7:3a:d6:3f:74:a7:be:70:ba:aa:
10:23:67:0c:db:0c:eb:31:38:69:e9:0d:05:32:95:
95:f0:cc:08:8f:11:15:3f:69:30:97:db:0f:c6:c7:
4a:fd:48:42:02:ca:85:2b:f2:69:dc:eb:5f:dc:e5:
ff:b0:f2:ea:d9:31:a4:83:fa:9f:d5:33:52:17:18:
7d:6a:51:7c:a9:82:3d:8f:f8:35:c1:1d:e6:5a:41:
f6:eb:f3:87:49:60:de:6d:b7:83:fa:85:51:f7:5e:
d9:5e:0b:46:92:95:4c:bb:c7:1b:e9:61:3e:4a:3c:
bf:33:82:62:b4:ae:e5:7f:33:a2:e3:26:ad:2b:ec:
8e:3e:60:32:ed:a7:06:a8:8c:2f:fa:fc:de:c5:15:
63:9f:69:66:59:78:75:72:6c:c3:64:84:95:11:04:
fb:03:f8:76:d7:97:a8:39:06:50:e1:f3:26:1d:cd:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3A:98:D0:3C:B6:B1:75:62:11:CB:DC:7C:1C:CB:00:82:9E:31:7D
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d9:de:4d:9c:18:15:27:43:78:89:1b:74:d6:ac:68:83:d7:
8d:6d:02:d8:80:c3:2f:1b:82:74:81:bc:42:af:79:57:72:06:
6a:5c:c8:1a:13:b3:49:a5:d2:b4:c8:6c:e8:06:13:02:f5:31:
3e:48:dc:b5:cd:30:26:fe:12:f1:9c:42:df:f4:07:fd:56:90:
27:79:12:4b:cd:61:a7:35:41:38:d6:d8:35:bb:85:2c:f4:8c:
bb:04:28:6b:cd:9a:39:2c:e0:74:1e:10:84:93:f6:a6:d7:3e:
7a:9a:62:36:84:1f:c0:b6:8f:43:62:40:f9:9a:42:2d:5e:bf:
67:bb:11:8b:0a:22:d4:2a:eb:4a:e0:0c:98:55:d5:d7:df:48:
01:4d:bf:1f:f3:b2:9b:d8:b8:65:7b:b8:dc:44:a0:98:c5:6d:
5b:cf:c2:fa:75:b4:f0:4f:59:3c:42:8b:fe:85:fd:a0:0e:bf:
16:f1:e5:8a:27:6b:57:6b:39:1a:41:83:12:f7:c5:de:a0:5d:
ec:c4:26:e8:b1:26:73:60:6d:76:e1:53:9e:d2:7f:a6:38:13:
2e:f1:a9:0b:65:0f:3d:6d:6d:11:d5:61:e5:80:a2:b0:37:f7:
78:e7:8c:74:4a:03:d2:1f:d4:8b:e6:ef:78:a9:c7:22:fb:e8:
7a:4d:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:04 2026 by rpki-client