Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: DmJjXnv052VNB10vmOlTtIsJrGKiobQZXEslYYszLaI=
Subject key identifier: F5:70:1D:52:7A:47:46:9E:D7:5D:54:FD:10:DF:8B:04:5E:0E:DB:DC
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019D382E2D52E39E8E91C38F78B683331E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 1727
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: 4ggS2ONBMXsUTTGG8dmc8AUu8Lg.roa (hash: q2SWd9oKEi+bPBkWTJWv3RcDMHC3g4eWB/JrEjpX2iE=)
2: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: h0OAyQwEIY7tjLv0trJSY7dhr6/fb+YJv/DHo9vmJjg=)
3: YieV5IhtBfHhR0OlHv2vUYM5r_4.roa (hash: 8fgRrOxEwtIdvMj2bohx3wRypSi8a7Y8Q0IaEcHrHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2d:52:e3:9e:8e:91:c3:8f:78:b6:83:33:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=f5701d527a47469ed75d54fd10df8b045e0edbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:80:c7:e2:12:4f:f9:8b:d2:12:11:5a:e8:
38:5f:c4:10:24:e1:ef:dd:50:5f:ad:82:08:dc:fe:
b3:36:f8:22:92:f6:09:9c:cd:98:ca:b0:9f:d3:a4:
4a:59:47:cb:b4:75:3f:73:fb:f4:d8:75:64:05:08:
7e:ae:c6:fc:df:62:56:0d:98:a8:50:d2:3f:b7:e0:
c9:99:68:bd:9a:76:b9:b4:31:51:1f:9f:7a:f5:fe:
bd:f6:77:51:21:a7:af:40:be:81:b2:03:c9:a6:90:
7e:ed:79:cb:f9:3d:2e:22:e6:56:d1:99:af:0d:90:
f1:11:f1:80:00:66:98:80:a4:9c:f0:6c:a5:81:8a:
5b:1c:3b:3c:75:95:26:ff:4c:dd:ea:d1:9b:b4:ea:
47:f1:bc:dd:f4:f7:b1:35:e4:10:37:fc:b8:4f:4f:
8d:3d:57:c9:8a:cd:67:0a:0b:ff:95:3b:81:3e:65:
48:08:7b:da:29:86:24:14:7d:6b:12:11:2c:0d:bb:
c1:6a:bc:78:bd:c2:c2:12:12:64:f0:ce:ad:e9:74:
e4:da:53:fb:96:84:c9:5f:84:15:2c:41:cf:45:ca:
cc:21:2e:67:50:cf:95:07:f0:80:97:e5:d2:09:b6:
e7:7d:d6:d3:1d:40:05:77:6a:62:4e:a2:84:45:3a:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:70:1D:52:7A:47:46:9E:D7:5D:54:FD:10:DF:8B:04:5E:0E:DB:DC
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:61:e6:9e:f4:f5:d8:68:b8:55:45:88:5a:14:a4:86:1e:
39:70:d2:e9:ac:03:af:ad:f5:94:1f:36:dd:d1:01:b6:e5:7a:
dd:5b:69:43:c2:ee:8a:13:2b:fd:62:65:17:79:27:bd:6e:88:
b8:f2:10:44:72:ae:58:94:af:ba:5d:ce:a3:a8:f2:c6:4e:cd:
1d:41:fc:34:bf:93:d0:5c:9e:fe:d3:0e:00:1a:4d:f4:06:87:
63:e2:22:44:73:2e:5a:e1:9f:b4:e5:ca:27:df:41:ed:f8:e4:
37:a4:41:16:37:b0:ec:79:d8:71:81:c7:5c:5b:9f:30:bd:7a:
11:eb:b0:0c:72:90:6d:b4:12:80:45:43:f0:66:66:c5:e5:5f:
e2:09:04:b2:3c:19:99:5d:48:df:fa:1a:a8:1a:02:90:a9:01:
e4:82:b1:b0:52:12:c6:61:5d:a1:52:ba:30:be:a7:42:ab:1f:
a1:a9:87:6c:76:75:6a:76:af:d2:0e:1d:76:32:1d:bb:bb:18:
1c:38:59:17:e8:dd:bd:69:46:61:c5:26:32:12:84:89:13:9f:
ae:7b:70:af:b1:23:20:32:0c:b0:28:68:fd:09:0d:e6:c6:db:
8c:2c:47:d6:63:05:41:8b:af:50:12:ad:8e:df:ee:e8:00:71:
07:ad:0d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Li1S456OkcOPeLaDMx6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjYwMzI5MDYwMDQzWhcNMjYwMzMwMDYwMDQzWjAzMTEwLwYDVQQD
EyhmNTcwMWQ1MjdhNDc0NjllZDc1ZDU0ZmQxMGRmOGIwNDVlMGVkYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW6Ax+IST/mL0hIRWug4X8QQJOHv
3VBfrYII3P6zNvgikvYJnM2YyrCf06RKWUfLtHU/c/v02HVkBQh+rsb832JWDZio
UNI/t+DJmWi9mna5tDFRH5969f699ndRIaevQL6BsgPJppB+7XnL+T0uIuZW0Zmv
DZDxEfGAAGaYgKSc8GylgYpbHDs8dZUm/0zd6tGbtOpH8bzd9PexNeQQN/y4T0+N
PVfJis1nCgv/lTuBPmVICHvaKYYkFH1rEhEsDbvBarx4vcLCEhJk8M6t6XTk2lP7
loTJX4QVLEHPRcrMIS5nUM+VB/CAl+XSCbbnfdbTHUAFd2piTqKERTrBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVwHVJ6R0ae111U/RDfiwReDtvcMB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPth5p70
9dhouFVFiFoUpIYeOXDS6awDr631lB823dEBtuV63VtpQ8LuihMr/WJlF3knvW6I
uPIQRHKuWJSvul3Oo6jyxk7NHUH8NL+T0Fye/tMOABpN9AaHY+IiRHMuWuGftOXK
J99B7fjkN6RBFjew7HnYcYHHXFufML16EeuwDHKQbbQSgEVD8GZmxeVf4gkEsjwZ
mV1I3/oaqBoCkKkB5IKxsFISxmFdoVK6ML6nQqsfoamHbHZ1anav0g4ddjIdu7sY
HDhZF+jdvWlGYcUmMhKEiROfrntwr7EjIDIMsCho/QkN5sbbjCxH1mMFQYuvUBKt
jt/u6ABxB60NCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:53 2026 by rpki-client