Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier: ziZRuUBXjiTQq7z9+0kch+7FN6Q+A4IhVy41F6XrwDg=
Subject key identifier: B7:2C:9F:92:46:ED:EB:96:14:FB:14:0C:86:09:DE:9B:82:80:0F:1F
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 019D39AF2BBB7AFE7DA075FB5A728B83E841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number: 021A
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: QdGp8G/kpt6kWBD8hat32q6WRykQWmSibdlFBmhyoj4=)
2: pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa (hash: 25kq67NwiLZpvtq/lLKi0cW1juljgXPpgbg4/hkoeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2b:bb:7a:fe:7d:a0:75:fb:5a:72:8b:83:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=b72c9f9246edeb9614fb140c8609de9b82800f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:a3:69:7e:73:72:ca:20:04:93:a5:04:18:
8d:fb:29:26:b8:87:23:1f:a4:db:de:6f:2d:bd:ed:
1d:4b:86:3d:86:b8:5e:8c:bc:15:6e:e6:64:2d:18:
5c:51:66:22:15:df:2c:57:12:6f:16:c1:df:8e:a0:
da:83:1c:92:e1:7b:c7:60:56:f5:18:4b:66:1e:e7:
ae:72:1f:a1:f5:ae:bc:df:1a:43:fc:b2:e0:bd:d0:
de:63:fd:53:c2:89:06:b5:59:0c:7b:af:c0:d1:a8:
29:2e:75:a5:e3:e7:cf:27:ad:0a:3f:7d:a6:46:1f:
f1:44:c1:34:bf:f3:f3:cd:35:55:dd:2c:57:ac:e7:
87:56:e8:aa:e2:de:e0:cc:0f:4f:e5:e2:5d:bc:bb:
b1:1c:29:80:b1:fb:ae:8c:c2:32:7f:fd:64:1d:9a:
4b:24:0a:66:e0:fd:5b:af:e2:3f:d4:cd:f6:53:ba:
9e:f7:c8:e5:28:80:72:e2:95:26:8e:92:20:7f:3b:
89:f1:16:99:6e:e5:63:3c:22:38:12:7f:89:cc:4d:
59:2a:73:15:70:62:e2:5f:87:c7:7a:9f:b4:7c:a1:
54:c1:58:35:d7:07:26:53:a3:96:72:ae:a1:a2:d3:
6d:67:a4:af:68:92:1d:a8:0d:37:94:e5:13:91:83:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:9F:92:46:ED:EB:96:14:FB:14:0C:86:09:DE:9B:82:80:0F:1F
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f9:1f:ea:97:a9:74:de:cf:22:55:b3:f5:7e:58:d7:84:65:
60:19:9d:b5:d2:56:57:be:3f:f3:64:be:54:b7:f7:f1:72:9c:
d6:e4:38:52:f0:b8:41:b2:82:c9:85:3f:7c:62:cf:b8:39:9f:
4a:3f:d4:79:53:78:eb:74:92:98:67:99:e1:d7:90:e6:97:39:
37:fb:b1:41:98:bd:ca:b8:2a:3a:77:69:39:5e:ad:3a:e3:29:
86:6b:52:65:17:75:ce:2d:ca:10:5b:eb:9b:85:8b:d7:ce:df:
a2:a9:3e:35:53:5e:4c:46:ab:fa:b5:ed:7a:58:61:70:53:50:
89:ac:f0:b8:c3:1c:12:b8:6d:58:58:6e:64:83:07:4c:3f:51:
9d:52:42:66:97:21:a3:3a:65:a8:45:e9:90:5d:81:af:bd:d6:
67:b3:3a:15:a9:37:cd:53:b6:01:4b:1b:6d:bd:4b:3d:3d:6d:
75:66:59:63:20:bd:b0:3d:34:b5:e2:9b:02:4f:53:9e:26:c8:
bc:78:c7:17:ef:22:5e:98:25:15:57:b1:6b:a2:ea:15:08:e3:
01:ae:0a:a8:65:e6:3a:d2:c9:58:98:8b:9d:9f:ab:b4:c3:f0:
c1:c1:dd:42:83:52:2f:1b:9f:b0:15:9c:4f:d5:32:28:0e:1c:
e2:4a:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:34 2026 by rpki-client