
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: oqzFgk7zTEOTxwCZWAg0OEsM1qzm0yb5XxI53PWPDpA=
Subject key identifier: C6:58:DD:56:CD:77:5E:07:5E:D3:DA:34:C9:53:CF:A7:81:81:F3:9E
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 019CAA593738C4F04833D6201253EE9907D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0AAB
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: LkZLE39FDof4XCmV80LpAW5DAlkRH3iJEc/XPAZmIyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:37:38:c4:f0:48:33:d6:20:12:53:ee:99:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=c658dd56cd775e075ed3da34c953cfa78181f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:2b:b9:d8:3a:17:cd:35:c0:aa:47:5c:af:
75:f5:d8:11:55:9e:34:8b:ca:3b:84:1a:f0:37:ad:
c2:90:16:9b:b0:7a:4a:2d:43:83:5d:22:3f:db:64:
65:8f:02:cf:6e:f1:f8:5a:b1:07:ed:47:6a:78:ef:
8e:61:d3:9e:9e:e0:7f:80:07:0f:46:fa:6e:39:d4:
f9:78:1b:dd:0e:55:ec:3e:d6:63:18:3e:fe:1f:9a:
24:bd:6d:41:28:b2:41:4d:0f:40:ad:b7:57:bb:ef:
35:67:d4:db:69:84:a2:10:97:30:0e:85:5f:0c:ee:
b2:0a:0e:db:1e:2c:f0:ac:64:4c:f7:f0:e3:42:de:
cc:1e:13:7e:31:12:05:e6:52:10:09:16:ec:e6:2d:
5f:e3:2e:9a:20:1c:11:f2:e8:7b:8b:4e:76:0e:97:
60:20:39:87:b1:f9:3c:68:e4:20:5a:e5:01:03:5a:
73:74:8e:1f:8b:5e:ea:53:80:8e:0f:98:e9:75:20:
e8:e2:52:36:8d:f4:c7:56:c3:97:40:d0:f9:f0:ea:
e2:49:f6:9f:c6:28:f8:ca:b2:66:44:84:65:d6:82:
14:c7:35:86:c8:5b:7e:20:39:6c:c9:81:4f:90:53:
af:da:e3:3d:99:0a:cc:ab:e7:5c:4c:84:04:7f:93:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:DD:56:CD:77:5E:07:5E:D3:DA:34:C9:53:CF:A7:81:81:F3:9E
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:18:5d:60:28:c2:23:f1:2a:44:0d:55:ef:4c:4f:23:0a:
4a:42:90:da:65:bb:32:a7:54:7e:5b:0c:83:f6:b7:4e:02:fa:
f0:1c:c1:d2:bc:21:38:eb:69:9d:26:ae:89:36:a2:ff:08:02:
15:1b:25:a5:ef:2a:74:79:b1:52:0d:ae:2d:e9:c7:d1:d7:9c:
eb:32:35:15:b7:8f:f6:64:87:0e:08:89:b2:bf:5b:15:0d:8d:
08:c7:0d:75:03:a4:7d:95:e8:37:40:62:49:11:d9:c2:c1:6e:
28:12:24:52:c4:c7:bf:39:07:4f:9a:ad:10:f4:cd:24:d0:9e:
d0:84:50:03:44:90:49:f1:3e:5b:33:8c:7b:d1:df:24:45:d5:
60:4c:46:79:94:b5:2c:9f:cf:ec:62:03:5d:70:3c:b9:eb:46:
ce:97:41:b6:49:d2:72:4f:34:13:df:69:02:83:ee:cd:40:de:
0e:59:74:51:c1:c0:74:e3:66:a9:3d:7a:61:00:c1:b6:04:13:
06:0a:b5:42:7b:fa:6c:23:51:40:22:d0:4d:9c:3e:a6:2d:15:
94:0b:82:aa:88:85:59:13:c5:43:cf:9e:cc:15:2d:32:d4:98:
cf:1d:0d:a9:5a:e3:e7:4a:26:d7:ff:e9:9d:77:b8:4e:a2:02:
7f:f1:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:02 2026 by rpki-client