Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: 2uU7Mr/pAWiObSKxyrscUFYmHyXS/MxcbrRX9uqT3nQ=
Subject key identifier: A8:FE:D4:77:6D:DE:46:01:E4:5C:A3:E3:85:DF:66:B1:93:82:89:CA
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019F84C3D46F9E4578770E32A6D317340AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 1298
Signing time: Tue 21 Jul 2026 13:00:54 +0000
Manifest this update: Tue 21 Jul 2026 13:00:54 +0000
Manifest next update: Wed 22 Jul 2026 13:00:54 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: RjnkY2A4TJisN1yPd7d3paWNP49RUeao76M+QZbLOkY=)
2: exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa (hash: cpev4QlZRscUMeINHxmW95Jv6ZdGgZyRlFV1/FIBpVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:d4:6f:9e:45:78:77:0e:32:a6:d3:17:34:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jul 21 13:00:54 2026 GMT
Not After : Jul 22 13:00:54 2026 GMT
Subject: CN=a8fed4776dde4601e45ca3e385df66b1938289ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:b0:29:86:29:af:9d:1e:d5:bb:8a:39:79:
99:44:74:14:e9:5d:e9:e2:5a:04:07:e3:ba:01:50:
50:d4:57:85:d9:d1:ad:3c:59:d7:bd:21:00:08:38:
8a:11:eb:99:8f:98:a0:8b:f1:ca:69:a3:b3:44:1d:
6e:a2:3e:61:d4:c3:a6:a7:d8:5b:38:31:40:07:d6:
8c:93:64:6a:b4:de:65:51:ff:21:05:7a:b0:89:d5:
01:96:43:ff:22:a9:51:0a:97:e5:05:cc:18:e1:03:
6c:9c:30:94:b4:4b:4e:10:10:4c:73:9f:c1:58:58:
08:1e:52:3f:fd:27:0b:e5:d3:f4:f2:8d:bc:5d:23:
a5:7e:e9:50:e5:aa:e3:22:28:9a:e4:2a:65:73:c3:
71:53:bf:a5:cd:c6:e3:db:1c:7b:67:d6:3a:b3:82:
01:2d:b0:07:b1:43:05:ff:f5:0d:d6:0d:f8:30:79:
0b:16:78:7c:d5:4c:e7:75:3a:17:5c:34:c9:c1:94:
96:2d:da:63:aa:2d:c2:e8:91:9b:27:ca:55:d7:e8:
67:81:e6:5c:c8:86:fc:f1:a3:f2:fe:82:55:44:2e:
0c:97:37:f2:cd:d7:60:e1:ef:10:82:6c:5f:f3:b2:
96:7b:e5:c0:fb:49:75:c8:b6:66:14:07:87:b0:66:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:D4:77:6D:DE:46:01:E4:5C:A3:E3:85:DF:66:B1:93:82:89:CA
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:ed:3c:a1:55:28:e3:1c:d1:bd:a9:53:36:57:30:28:a3:
01:a4:e9:37:1b:a8:4a:d3:58:f6:96:32:5e:fd:9b:d4:6d:d3:
e2:ec:52:3b:a2:ae:49:bb:ca:e5:c7:41:86:3c:f5:a5:2d:4a:
37:17:2d:f4:34:c3:11:19:4f:a5:a8:bf:7b:5d:25:78:ba:39:
d1:c9:93:cc:8f:40:26:91:7a:6b:3d:73:7b:1f:b7:29:4d:e5:
9f:af:52:e1:42:c1:8b:77:86:5b:b7:b8:18:16:0a:92:cb:dd:
6a:41:c4:6a:43:ab:bc:33:a0:db:a8:53:fa:76:90:c6:6e:00:
3a:c6:c9:41:25:de:4a:e5:56:63:29:f6:16:5c:29:a4:1e:c1:
64:2b:18:ef:33:4e:8c:e2:90:73:8e:0b:89:b7:e6:a7:46:10:
c0:23:ce:dd:af:be:3d:e4:7f:64:91:da:ed:72:bc:50:b3:86:
35:f2:dd:ea:e4:91:71:4c:b0:93:02:90:03:71:7d:e3:49:62:
32:a9:b7:4c:86:4d:e9:82:b6:3a:ea:32:6c:09:94:e4:5a:62:
f4:53:75:db:5d:ad:ca:50:88:cd:c3:2f:51:2d:0d:80:07:1b:
65:d5:6a:81:71:6f:2c:c1:0f:ec:84:f2:ba:d5:71:c1:91:68:
0e:48:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:17 2026 by rpki-client