Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: yn73x87ekVN7MZa1vV1Al+AYsBg295J8ouRWCz5Ocnk=
Subject key identifier: 27:74:2E:36:E9:3F:99:98:6A:5E:45:9C:12:B6:CD:0C:C5:FD:5B:C6
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019DD1D1FDE36808E51B12E7DAFCC0A9A84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 07F5
Signing time: Tue 28 Apr 2026 02:01:33 +0000
Manifest this update: Tue 28 Apr 2026 02:01:33 +0000
Manifest next update: Wed 29 Apr 2026 02:01:33 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: c/LiLcfctC1GZTWWRAiqbedLfgG7o7H6ggz84OD9M1s=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d1:fd:e3:68:08:e5:1b:12:e7:da:fc:c0:a9:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Apr 28 02:01:33 2026 GMT
Not After : Apr 29 02:01:33 2026 GMT
Subject: CN=27742e36e93f99986a5e459c12b6cd0cc5fd5bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:58:38:49:58:b7:8b:3d:64:ae:6f:cb:72:
70:4e:1c:87:51:3e:e6:d8:fa:48:76:0d:fb:6b:a7:
9f:3c:a8:d6:2a:f6:b3:e1:e2:f0:53:6c:8f:4b:99:
82:43:f6:ef:62:4f:e9:dd:bc:06:ab:36:14:d0:e5:
6f:ad:b4:66:e7:60:b3:11:6d:f0:41:ff:90:bb:d3:
d4:1f:00:3a:04:cc:a8:72:56:88:0a:0c:b5:20:a4:
8b:a1:93:89:1e:43:94:fc:bf:f1:8f:a3:5e:6a:b8:
e8:54:44:fe:23:a4:b9:06:85:6b:aa:ca:f8:8f:9f:
e6:f9:8f:e7:64:4f:6a:8a:1b:ee:04:ff:2d:49:76:
6b:1b:4a:04:db:78:5d:21:2b:cd:bf:f2:bb:ac:c3:
ba:23:a8:c9:1b:31:31:83:c0:22:a7:7b:93:00:05:
31:21:83:0a:18:6b:9b:df:ff:be:f0:c7:e5:99:00:
2f:72:be:bb:6d:96:e5:d0:75:08:0c:32:32:75:75:
c5:d7:b3:7a:7d:0c:58:39:8a:92:ce:fb:23:2b:6c:
1f:90:75:a4:f8:0d:b1:15:4b:06:84:63:e7:91:39:
8c:01:0e:c8:eb:55:f1:ee:b8:82:a0:40:e3:66:8d:
3d:83:8c:32:33:bd:a9:33:4a:b9:f7:03:b0:15:2c:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:2E:36:E9:3F:99:98:6A:5E:45:9C:12:B6:CD:0C:C5:FD:5B:C6
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:b9:29:10:77:36:34:95:92:e9:3c:02:f8:c7:b3:21:f5:
1f:fe:f3:79:29:36:83:bb:53:94:0b:6b:a0:68:bf:53:cd:3d:
28:c1:e6:b8:98:a3:bf:d0:31:68:3a:d0:96:32:75:53:b1:06:
60:a5:5d:10:da:ba:15:bf:eb:83:80:b1:8d:96:c7:d2:23:aa:
1e:06:d0:a8:53:d7:4c:bc:59:92:e9:23:a7:65:bd:1e:32:3d:
6e:46:27:b2:da:98:bd:b8:42:b3:bc:cc:1d:1f:e8:49:fd:87:
60:04:4b:3d:ae:36:27:e1:2f:ae:6f:dd:6f:95:0e:8b:3d:53:
46:c7:0c:5e:34:d9:3f:81:81:9c:31:c0:e9:5f:c5:71:e9:c7:
e0:a1:d2:bb:7e:c0:6a:f6:4d:f2:19:09:50:c8:21:ad:82:d1:
a7:a0:65:f7:60:ab:90:c1:3c:71:23:87:ba:4e:7f:98:3e:ea:
25:34:6b:b4:4c:0f:8a:19:34:08:d9:d9:b8:5c:67:58:56:4f:
89:b3:71:b5:2c:88:9d:ad:27:60:d1:09:af:38:ca:0d:ab:69:
2f:23:b9:7a:de:13:16:d5:fd:7a:bf:9e:eb:b3:2f:f0:2a:f0:
98:86:80:44:9f:a8:bd:c5:14:09:c7:14:ae:ec:0c:9c:c1:89:
a8:1f:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:23 2026 by rpki-client