Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: 84q/eGPbLRzzoxHczDVWfLsVCuMWW8tpiqGy7wQWmHc=
Subject key identifier: 86:0B:EA:D6:92:BF:2C:E9:3D:78:F3:D2:D1:0A:D5:A5:D5:0A:5C:11
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019D37C0D1B9724514835253B9566E7A4178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 1166
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: L0seC7LaAkgvfq8rLnyH/l0u3fgpx6rKHzepsE757lk=)
2: VYt88J2micc3RjkOiAbgbsahES8.roa (hash: Zo8tOxRpop/qL57ADwlkJqC3DjP20BCdR/VwhP6MEb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d1:b9:72:45:14:83:52:53:b9:56:6e:7a:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=860bead692bf2ce93d78f3d2d10ad5a5d50a5c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:31:03:34:32:7d:92:bf:0a:19:f5:de:15:
f4:5d:10:3d:42:0d:13:ae:73:da:66:60:53:4e:f0:
14:5b:8f:31:41:7e:c1:67:54:43:a9:5e:bc:ed:9d:
78:4f:02:63:29:5d:7f:98:b0:66:7f:61:78:55:fa:
4e:80:0d:93:74:8d:a3:6e:32:75:ac:3a:ca:49:7e:
f1:99:ad:57:8c:31:7e:91:9e:ac:4f:56:b6:51:a0:
a8:fc:20:f5:1b:4c:10:e5:f1:1e:a9:b4:0a:6d:26:
dc:c7:67:b2:2a:e7:96:97:7d:14:e4:c7:99:f1:2b:
c1:71:5a:33:52:36:c0:e5:cc:86:2e:28:9c:c7:f2:
f9:1b:b6:25:63:85:a4:db:08:27:24:dc:fd:c9:44:
4f:3d:1d:5b:da:3f:57:8f:51:14:65:cd:01:66:95:
88:53:6a:d7:93:cc:d4:23:f5:5b:ff:c7:44:96:d5:
fb:56:11:59:72:30:1f:a3:f9:b7:de:29:09:42:72:
d6:6c:1d:1e:10:68:6b:3e:de:99:86:d1:41:ce:3d:
d8:a7:e4:f9:47:bb:7a:a9:7c:ce:8c:81:d7:aa:c5:
1c:ce:8c:94:7f:05:d8:c1:34:43:49:58:aa:16:39:
64:7f:38:d5:15:2b:bd:c2:5c:e7:e8:54:dc:a8:62:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0B:EA:D6:92:BF:2C:E9:3D:78:F3:D2:D1:0A:D5:A5:D5:0A:5C:11
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:d7:6e:b1:9b:47:c1:78:3e:6d:bf:92:4c:8c:4d:bf:29:
b6:1f:16:c5:ae:c0:2a:00:65:7d:8c:70:6f:c7:6a:45:89:bc:
0f:34:15:0b:d1:c7:0d:3e:28:bf:7e:63:b0:28:31:54:34:4b:
78:ed:ab:d1:66:80:69:1a:13:46:2e:7b:ad:45:2a:b7:a5:55:
bb:55:86:25:b4:21:49:62:14:41:51:14:23:66:fa:f6:48:29:
4a:b1:40:a4:dd:dc:a1:24:b4:91:6a:fc:26:d9:da:48:b1:1a:
8f:fa:d2:90:84:e7:d1:e8:a9:ae:29:62:8c:d8:aa:ea:f3:a2:
8d:0e:ca:39:9d:04:16:a6:39:e6:ec:d6:ed:07:08:03:55:17:
07:bb:4e:2e:95:34:e0:58:98:b3:7e:5c:b8:63:6a:4f:15:34:
83:eb:3a:36:f9:2a:d7:fb:ce:29:c7:e4:f7:7d:98:1b:eb:9b:
d4:19:c6:b9:24:db:7f:82:19:71:02:6e:09:93:63:10:a0:f4:
f8:52:9c:d6:9e:58:47:f9:bb:72:de:63:39:3e:b5:5b:a6:59:
bf:2f:c4:f5:31:73:89:60:a8:a5:ac:29:fb:a8:3d:1a:45:76:
96:b2:db:5e:38:7b:49:9a:f6:a5:ba:f0:42:b3:c1:30:fb:ab:
25:b7:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client