Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: I0/w2x5pknSxlFkiihf87toqePnOCbUei5hNQw9fsHY=
Subject key identifier: 71:9F:BC:33:38:49:0E:64:DF:27:34:46:9E:8B:94:60:81:E4:5C:FA
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019D37F6E8DB1F27D2B77D7283EAFC6CD0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 10ED
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: rhQCsohMmxz0uiV1cQad2FQGb029aOXny8hkkLksn+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:db:1f:27:d2:b7:7d:72:83:ea:fc:6c:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=719fbc3338490e64df2734469e8b946081e45cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:65:5b:28:e2:2e:7f:4a:30:81:83:24:64:
3b:52:a5:3d:a0:fc:c3:60:cd:97:5d:60:d5:88:95:
02:f5:5d:d7:b3:5d:39:a4:0f:93:3e:73:26:ca:76:
e3:ba:18:ca:ec:12:f0:f6:a4:e1:77:dc:af:5a:d8:
39:60:b6:9f:eb:e5:ad:9f:f8:b7:2f:35:53:7e:97:
9f:7b:6f:d6:8e:99:37:d6:1e:3c:cf:2c:9c:5d:9c:
b3:d8:86:b0:41:40:e9:46:59:6d:6d:47:5b:29:6f:
ee:03:50:71:02:fe:83:05:a7:9f:12:1c:67:60:be:
9c:4c:c2:cd:d8:96:eb:7c:99:91:76:67:80:c1:31:
8c:05:26:a2:fe:af:29:58:18:33:a2:d8:9c:c6:05:
01:12:3b:97:8e:7f:a9:fd:56:59:14:38:d1:26:36:
0f:93:ed:3d:1a:35:1d:8c:63:4f:e3:32:36:29:d0:
6a:14:59:2f:d4:24:6f:46:09:e4:06:ec:0d:71:ec:
62:01:11:f5:47:8e:da:0d:f0:43:c3:7d:c6:8d:18:
77:5c:ec:6f:8f:65:34:6c:34:0c:33:d2:47:b4:db:
40:c7:63:c4:56:90:90:ed:de:fd:e9:02:ad:d4:fe:
8a:e3:f0:d4:30:90:6a:55:38:51:3d:d0:52:eb:21:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:BC:33:38:49:0E:64:DF:27:34:46:9E:8B:94:60:81:E4:5C:FA
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a8:11:aa:2c:8e:1b:ce:fb:37:05:2d:63:75:76:e6:d0:14:
b5:b8:de:f1:ed:a3:36:2a:ae:5a:d3:f7:89:e3:0c:2d:15:ed:
79:b6:05:3b:f8:b9:70:b9:8b:e8:03:fb:a1:89:0b:7b:b7:70:
9e:d7:e7:7a:0a:8c:2e:95:c1:47:df:8f:96:93:c8:9f:e4:b3:
3e:e9:9d:b9:78:79:9d:87:1e:b8:0c:e2:41:50:28:fd:d5:1f:
e7:f0:21:de:ad:71:8d:f1:d9:d3:81:06:28:cb:69:48:78:b2:
ad:cd:31:81:21:c8:2b:be:6c:56:2a:1d:10:e5:00:73:db:7a:
44:a0:8e:4f:9b:6a:62:6d:db:36:46:89:00:c2:79:92:a0:ab:
46:4a:f7:d8:28:ba:db:c9:44:e6:c3:a7:76:8a:57:cb:f6:97:
b6:a6:ec:7f:8a:b9:a3:33:c9:86:0d:ac:09:92:10:89:3c:db:
93:33:fc:95:96:29:9f:59:ec:94:38:7b:99:58:99:05:33:14:
53:72:5a:8a:cc:04:65:57:82:f6:7c:d1:b4:75:ba:2d:51:10:
ea:c6:eb:95:c6:39:14:13:bf:37:5d:92:38:7a:01:27:0e:82:
d5:9c:7c:ef:76:8d:87:f8:03:9f:e1:95:d2:07:aa:fe:01:57:
a6:8a:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:02 2026 by rpki-client