Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: K931A+rznhxaHd2agdRhULbCSM4DUqU79bxzuh8fxdE=
Subject key identifier: 61:40:CF:AC:BF:17:5D:90:28:64:12:0B:BE:ED:DA:7B:93:50:4F:CD
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019D39416033AEE9112310851FEE5AB71D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: gN5wT/qYf8lKs5BocDQUE8gIyxlKHLrTfb7cnejKSnQ=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: SyWBqT58dPR944ENyBXecfRLiu0.roa (hash: nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:60:33:ae:e9:11:23:10:85:1f:ee:5a:b7:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=6140cfacbf175d902864120bbeedda7b93504fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:3d:54:cd:5e:df:9d:fa:49:6a:e4:cc:51:
12:f3:be:d5:a3:87:5c:cc:1b:f8:13:a0:fb:34:92:
ec:c3:b4:8d:08:dc:1e:be:0f:f1:0a:31:1b:df:72:
65:f0:ce:f4:01:f0:7e:63:73:f7:26:8e:ae:9d:e8:
4c:1b:29:77:3d:e7:5b:28:cd:1b:d9:b0:72:4c:d5:
71:6f:42:aa:ab:6e:79:90:9e:f6:af:66:cb:6a:d1:
13:c0:2e:25:13:95:62:97:85:d0:9c:e7:21:dd:92:
3d:eb:cd:8c:73:b4:cf:43:e9:b7:ba:b0:cd:b1:11:
f0:e0:37:18:34:b9:e5:82:3a:38:bd:27:2e:7f:99:
0a:03:3d:ae:d9:76:47:98:07:5f:43:9c:11:e4:66:
25:d9:c5:bf:e5:db:b8:e6:38:c3:88:96:e9:1c:e6:
ef:a2:b8:e8:9e:3b:c1:76:5d:2d:0a:84:22:d5:cb:
20:7b:65:8f:7e:49:4e:60:88:68:07:b6:85:5b:fe:
e2:1e:50:f8:00:28:a3:33:ed:8e:ba:ee:d4:70:4c:
ba:0d:ad:f5:9c:0e:ed:17:e8:d2:d3:0b:02:6c:53:
59:ae:72:24:6d:9a:2e:70:3b:d7:18:47:d6:c9:61:
2e:c5:f9:1c:9b:08:39:1b:d8:b1:85:47:f5:dc:b6:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:CF:AC:BF:17:5D:90:28:64:12:0B:BE:ED:DA:7B:93:50:4F:CD
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d1:79:76:81:27:74:84:ac:5a:cf:ca:90:1a:52:fc:a8:ca:
87:9f:f3:df:ae:da:86:59:31:90:f7:08:e3:44:dc:8a:e6:ef:
06:9a:9c:cd:a2:01:61:84:26:59:9d:0d:6a:87:d6:52:df:cf:
9a:3e:cc:2d:41:65:c8:68:5c:6d:40:12:6a:e5:37:90:81:17:
af:a5:a8:d4:8c:a8:ac:c1:d1:40:4e:e5:59:4c:67:71:12:fd:
d9:05:04:6a:20:8d:dd:5e:e7:47:26:8a:fa:f5:1b:7a:a8:31:
4c:56:51:67:4c:e0:dd:2e:8f:95:f3:92:cb:ef:3e:6f:d9:21:
07:7c:af:9d:c7:15:c8:3a:75:01:69:29:40:f8:ee:09:79:a8:
f9:45:92:e4:46:c2:28:c3:6e:0e:e4:f1:30:ad:c9:aa:9f:6f:
da:2f:d4:3b:49:e5:26:de:e7:1b:77:cd:d8:8b:97:2c:f9:e2:
78:a8:f2:ec:cb:05:4c:13:10:c2:ff:6b:58:2c:9b:d6:b5:ed:
35:07:fa:c4:3a:a6:94:61:66:ef:7e:1f:09:74:dc:94:43:e2:
77:20:36:d3:2d:86:c8:a0:3d:59:79:aa:20:70:b2:57:4c:fc:
7b:ff:63:3a:06:60:34:41:53:32:e2:1c:2a:09:25:74:ef:b3:
ec:39:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:06 2026 by rpki-client