Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: JJxz3hZhlfmrP6uw2DjGCjrROFoZ8tovcDUtlb7P9e0=
Subject key identifier: A9:9E:E8:65:5A:C2:F9:66:22:7F:A0:12:8B:8A:81:B9:47:77:6D:47
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 019D38658B93304F6C1368117399212AB016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0FDE
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: jQRuFSWAGiUqvrmEaBMZU7MFeNppSHte7BxvnRr4+PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8b:93:30:4f:6c:13:68:11:73:99:21:2a:b0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=a99ee8655ac2f966227fa0128b8a81b947776d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:e0:b2:2a:49:9a:aa:ff:af:e7:53:d0:dd:
be:6a:d4:29:a8:7a:35:35:0f:b4:67:89:b6:60:cd:
46:e6:f1:d1:a0:a0:14:28:61:21:62:c8:1c:25:d5:
ee:84:2a:87:c1:25:fd:7b:d7:d4:b5:eb:a3:2b:d5:
18:79:03:47:97:29:6c:b8:a9:3d:57:8e:41:02:cd:
52:00:33:b4:d9:77:60:98:69:34:bd:36:f4:4b:5a:
e6:f6:5d:50:8a:3c:54:df:42:e5:b4:5a:f5:dd:38:
52:5f:3c:43:8d:de:52:65:6c:66:2b:ee:5d:8a:fb:
62:6b:41:43:e1:53:4e:16:9c:6b:62:36:98:f8:3a:
7d:5e:79:8a:60:0e:09:dd:4d:8d:24:57:bb:f9:54:
e6:42:86:2b:30:4a:47:33:f8:8f:0c:09:66:e7:ea:
5c:05:36:01:6a:d8:9d:d2:e6:31:3a:98:a8:12:64:
14:58:50:85:c6:44:56:87:d3:2e:95:c9:29:dc:2c:
35:79:a9:dd:bf:f5:17:2f:d7:ff:03:71:7a:38:2a:
99:49:44:ea:4c:d6:17:c5:13:e9:c5:a7:1e:e1:e2:
2e:c0:11:38:9c:67:8a:88:9c:ad:31:c9:fe:71:77:
66:a6:97:a9:a0:f7:8f:6b:50:3f:bf:70:b0:72:18:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:E8:65:5A:C2:F9:66:22:7F:A0:12:8B:8A:81:B9:47:77:6D:47
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f8:eb:c1:d8:fb:8f:1e:25:aa:32:82:f5:df:c6:c8:98:22:
ea:c9:4f:9f:c0:7d:e5:ed:26:f0:5f:14:cd:e6:42:ed:40:06:
08:5f:87:96:0b:c9:1f:fa:89:1c:bb:ed:7b:e9:ee:86:13:9c:
52:a2:17:de:a1:36:24:b2:87:18:4c:0b:34:a8:8c:18:95:1e:
24:53:87:30:d8:5c:9b:c6:af:28:2c:1e:1b:d5:17:07:47:37:
02:3b:3f:22:c4:1e:8b:b5:b8:d5:23:04:32:2a:67:de:02:61:
ce:e4:ac:ad:4e:ae:f2:05:4a:93:15:e0:04:3c:c2:a0:4f:97:
6b:2e:fa:45:95:c8:fa:fb:7f:b3:a7:ed:db:13:86:ba:fb:15:
a6:05:51:56:0b:7a:f8:f1:dd:57:54:4d:85:e7:6a:52:47:dc:
b0:2f:2f:fc:54:07:c3:8e:ff:77:69:5f:3e:33:1f:7e:8b:17:
08:1a:e5:99:2e:fc:b4:77:cb:7f:29:17:fc:85:a2:4a:b4:01:
e6:9e:90:f9:e1:da:22:83:34:4b:81:9b:b1:90:23:22:0f:12:
39:f3:63:0e:92:a8:bd:ee:30:5e:b0:9e:07:0c:eb:0b:11:c3:
7e:99:1a:4f:45:fa:55:26:7e:f9:d8:5f:81:d0:8d:6f:11:dd:
0d:ef:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:40 2026 by rpki-client