Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: pcqLOFBqr8Fed705fNcpe/zqz5izVnM/lHrrexECgmI=
Subject key identifier: D6:AC:0E:0C:17:42:44:D6:77:6E:82:E2:AC:71:17:D9:AA:3B:1C:FF
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019D394185398E8171DC879B47918FFC5C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 1293
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: 91bk+1IQOJsKPmzZ0S9z833CFb9vtKyQagP2fyqflMA=)
4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:85:39:8e:81:71:dc:87:9b:47:91:8f:fc:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=d6ac0e0c174244d6776e82e2ac7117d9aa3b1cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:41:5b:41:a5:20:21:71:4c:2e:f9:e8:ff:
46:05:39:e2:91:89:9d:26:9c:39:3c:fa:3e:6d:38:
cc:77:b2:78:56:67:cb:85:9d:ba:b9:42:78:ef:b2:
0c:80:07:75:71:16:03:67:9a:78:4d:bf:2f:90:bd:
a4:93:95:35:75:0e:c2:be:7e:95:92:5b:bf:a9:b5:
90:fd:cf:33:d4:bd:a3:48:2d:3e:f3:58:f5:62:de:
b1:02:f0:6a:1c:ec:0b:ae:13:2e:c3:6b:3a:89:ee:
44:ee:48:01:84:16:13:7e:9f:97:70:4a:c4:b3:de:
6f:2d:09:3f:cb:dc:e1:ed:59:6d:bf:f0:36:1c:f2:
76:45:45:d8:9e:34:be:f3:a7:7b:1d:38:58:39:9f:
0e:2b:52:a6:9a:7f:5b:86:75:8c:d2:3c:06:f6:03:
81:e1:a1:a4:55:0d:37:82:86:e8:22:11:08:af:c5:
1d:a3:37:da:10:6d:a9:d0:25:74:fd:29:8c:5d:16:
2c:d3:b0:16:2a:a9:f7:c2:e5:39:a1:e1:ad:f7:37:
ee:57:20:9a:fc:49:e1:0e:58:11:0f:14:50:d5:69:
72:62:d0:0d:98:53:8a:4c:a5:1d:13:41:fb:67:52:
92:5f:91:7b:5a:9f:0b:a4:3a:a2:1a:0b:df:a1:79:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:0E:0C:17:42:44:D6:77:6E:82:E2:AC:71:17:D9:AA:3B:1C:FF
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b5:38:58:61:7b:9f:ba:2d:8e:28:c3:e0:da:5c:5d:70:c2:
64:f3:29:51:aa:32:4f:27:21:f5:06:84:84:85:c1:01:82:39:
a1:49:ee:d9:98:11:9f:64:4c:fd:1b:55:b9:23:2c:29:ce:82:
ab:c1:d0:29:3c:c4:75:2b:2e:18:55:72:ef:f4:9f:b6:78:32:
6f:c5:04:dd:47:9d:1a:c7:ea:c5:db:36:7b:24:19:01:cf:72:
b6:58:32:96:6f:1b:6f:02:63:c2:76:9a:a3:1b:5d:8a:46:8d:
f7:71:a7:f3:02:e0:2c:6a:40:0e:7a:64:8e:ce:41:b5:dd:84:
ac:2b:e2:72:40:92:2e:79:8b:fd:f1:2f:35:a5:f2:a3:67:2e:
63:bf:b7:72:c1:4a:db:8d:f4:54:87:dc:a2:99:32:14:9e:ce:
2b:7d:a2:93:80:11:0e:8c:c6:07:19:f1:86:b8:aa:2b:ae:4e:
3f:c5:41:28:71:dd:2e:db:1e:4e:e0:67:e3:88:67:d2:3d:b7:
6b:af:58:fc:70:d2:3a:23:8a:02:52:47:64:fd:42:84:73:65:
fa:39:a2:82:a7:0c:4b:11:d0:7c:f2:e2:67:79:c6:6c:73:f8:
36:87:f0:7d:b8:99:02:21:94:1c:16:a4:e6:dc:47:5b:df:51:
98:94:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:59 2026 by rpki-client