Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: ajxV0yaCnhmn5UKInIbzcRxalueQIiFSxwQeOf407kc=
Subject key identifier: 8C:FD:E2:F5:F2:F3:EA:93:7B:39:BE:2E:E1:2C:69:EE:1B:53:7D:B8
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 019CAC0FADB3382FD6DE282E53DD3E2961FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 17A3
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: EerUN7Fk3eu0pw8Dg/TiCx2T27saEcbs603uWc0wxrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ad:b3:38:2f:d6:de:28:2e:53:dd:3e:29:61:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=8cfde2f5f2f3ea937b39be2ee12c69ee1b537db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:82:9a:3d:ca:39:ca:da:73:0a:0c:a9:41:
fb:8f:d4:f7:c9:54:8a:b3:be:d4:bd:c7:7c:d2:32:
74:06:eb:e2:0e:53:9e:60:a9:44:ae:f4:8f:f9:8c:
b6:db:51:e3:19:0b:97:38:68:47:2e:5d:e2:bf:7e:
5f:c9:f0:3a:5e:29:f8:6c:ba:f2:8e:d7:64:48:58:
c3:5a:7b:39:eb:92:35:c7:c9:7f:0a:a5:3b:ac:3b:
93:d7:04:12:7c:1a:21:c1:96:74:e5:2f:0c:f8:0d:
ca:a8:a2:a1:8a:6e:86:dd:9c:4a:c4:29:5e:96:a1:
a9:de:90:e2:8e:11:1c:58:f8:6a:6f:fa:50:7c:55:
ea:39:72:84:eb:52:dd:07:ce:aa:1f:3a:da:ce:c7:
91:d0:63:11:9b:03:98:f5:fb:e2:fd:32:11:05:0b:
4a:95:c4:7c:41:67:40:8c:e5:b8:ba:f3:a1:f0:f3:
c2:77:9f:f6:fc:6d:5c:9c:a2:b0:44:65:3b:c8:70:
ff:06:de:f8:e1:fe:e9:6c:a3:ec:eb:ea:34:1f:0b:
10:74:0f:09:41:37:48:90:75:47:e6:77:65:07:ae:
5d:f8:8d:79:da:29:2d:75:8d:b0:79:5d:6a:86:42:
3d:50:67:ce:85:64:ea:ac:d3:36:06:df:88:2d:76:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:E2:F5:F2:F3:EA:93:7B:39:BE:2E:E1:2C:69:EE:1B:53:7D:B8
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:e1:fe:ba:39:e1:bb:5d:2b:50:f2:dd:af:d7:92:22:17:
8b:74:83:fe:b0:eb:76:b4:64:ad:f0:73:12:29:48:39:8d:46:
be:e2:7f:24:dd:67:2e:28:50:8a:f8:69:2f:67:cf:0f:e2:d0:
74:89:3a:e1:33:24:40:b9:6f:88:af:fb:65:1c:0a:79:d3:1b:
60:1c:b6:25:4f:b0:b1:9a:f5:73:81:4e:d4:4d:08:f4:50:e5:
fd:e9:df:47:ab:01:53:bf:31:93:19:13:4b:4e:56:d3:af:bb:
d4:50:93:d6:46:de:a1:b1:f9:b9:d4:85:cd:a9:84:05:8c:4d:
5b:45:7d:df:63:2a:f2:cc:d5:0b:c4:8b:3a:04:e4:ab:f3:6b:
03:94:83:2e:a2:74:c8:ec:fa:38:1e:a2:56:d0:da:c1:24:e1:
d4:3e:8c:2c:77:d5:b2:bd:8d:4d:d8:70:45:b2:3d:b7:3c:19:
73:66:d5:94:67:11:ed:c8:93:8c:93:f9:dd:66:ae:ec:c6:29:
7f:00:9c:f1:bf:34:ac:15:d2:14:da:0c:b9:07:6f:5a:56:5c:
d8:b3:4c:4f:05:15:d9:bd:19:16:62:5a:cd:61:2f:fd:b9:dd:
dd:92:a8:18:56:a0:5a:8b:50:be:60:89:21:63:ee:12:f0:29:
fc:f9:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:47 2026 by rpki-client