Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: oT/K6xpIMksgb3ogdk+59phSOxbeIlIrqkjZRx/Kwns=
Subject key identifier: 46:E6:32:CF:7C:33:0B:22:31:26:95:4E:23:0B:0C:38:04:7C:0C:34
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 019D37C105F47E59CF9F6749187277A0DC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 0B47
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: c99p7JeWN3hrkCCKom3lmjfftFhiNYDkRoFqNtQm3FY=)
2: PUmRbcQEHO-1E9MjUNB1G27jvC4.roa (hash: 1b5K13lRJVgXMES2Ogtx5dT9HxojliDTCamL4LINRu4=)
3: ieoHlH36HWDIPWckSlvGHJy24ZU.roa (hash: j9WOIqYDUZqSN+7FGuaKTEgZ+HNu/dxrw2EWxoIKCOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:05:f4:7e:59:cf:9f:67:49:18:72:77:a0:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=46e632cf7c330b223126954e230b0c38047c0c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:66:28:7b:69:df:f4:95:ac:8e:7c:0a:77:
2e:67:27:6b:21:7b:da:8a:8a:b6:84:d0:8e:9d:67:
da:db:58:1d:fa:39:5e:56:4a:c3:ae:77:b9:ce:0f:
db:01:6a:f5:3a:74:c5:63:80:ff:50:40:06:91:64:
38:0a:65:bc:05:ad:df:b2:69:d1:e7:3e:63:9e:32:
35:22:33:7a:57:7f:ec:9d:a3:a7:b0:89:4d:b2:ae:
bc:ed:a6:ef:28:4d:df:f2:5c:9e:a6:02:b6:06:45:
fd:f9:f0:72:77:b8:2d:7d:72:91:78:f0:4f:80:a5:
dd:c2:c5:57:aa:04:aa:ac:f4:37:0f:9c:69:99:49:
be:6e:11:92:c5:f1:d0:1e:f6:3c:05:81:59:6f:35:
d4:c0:04:49:2a:3a:5e:69:e6:6b:da:58:a1:5f:a4:
2d:ba:92:8d:88:86:d6:8c:d3:fd:22:9b:67:04:1b:
34:dd:c7:10:e2:4d:8b:7e:ba:61:83:57:08:85:d1:
ae:f7:07:77:f1:71:ba:08:2f:20:41:43:7c:12:d2:
80:dd:b8:9e:66:4f:32:00:89:a8:e6:76:cf:56:33:
2e:3a:16:af:e1:1b:b5:1b:0d:d5:cd:9f:bf:5c:25:
0f:05:3f:b6:9a:9b:d2:bb:f1:eb:3e:64:fa:1a:b5:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:32:CF:7C:33:0B:22:31:26:95:4E:23:0B:0C:38:04:7C:0C:34
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:b1:ca:50:f6:2e:39:98:93:82:f7:02:e5:ae:25:44:16:b4:
e2:fd:bd:50:37:1a:43:cb:75:79:32:49:28:6e:0b:51:4e:f1:
b1:d3:48:ad:e3:76:22:d1:2f:c8:a5:ce:82:53:f6:a9:35:4f:
b7:79:a2:95:a5:43:8a:30:f4:de:70:06:a9:b9:4b:d3:38:c7:
f6:47:0e:63:51:44:e5:a6:b5:ed:d8:96:ab:48:77:b4:f3:41:
4f:91:ee:db:97:a6:d6:b5:bf:07:e1:0d:33:84:75:4e:fc:ba:
32:fd:5b:7a:e3:13:5b:13:53:b5:3b:24:84:4a:01:dd:34:82:
78:01:eb:1d:ef:78:fd:dc:1c:95:ac:40:bd:8f:57:14:48:01:
6c:74:d1:b0:e7:ec:b9:25:6c:b0:a4:7b:bc:b6:1b:0f:bd:8d:
5b:eb:99:01:7d:43:77:eb:a0:9a:5a:a8:7f:91:32:57:d0:ad:
db:8e:fd:1e:00:6e:da:d3:35:73:f3:c8:89:2d:af:54:42:e7:
b5:56:8f:0c:4f:74:78:63:b5:81:73:92:e4:3a:7c:74:37:4e:
0f:74:62:f9:e9:a9:40:14:30:86:e7:68:bc:f5:fe:b4:00:1f:
37:40:ac:60:dc:1b:69:74:be:e8:d3:d7:f0:77:77:9e:dc:36:
09:7c:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:08 2026 by rpki-client