
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: m6HISNmoweQJGe3e3l8FXXa5894WZMpANBuRYZ4haSs=
Subject key identifier: E0:67:9C:33:F4:11:F8:CF:69:83:F7:7B:C9:BC:26:11:21:2E:CE:65
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019D38D3427912226A0A54EFFA9C65AB6844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa (hash: CSosAC0RkIivRtuzYTWYojYmIhFl5s25SMxfOZ9APWQ=)
2: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: oVZOI69CT0l/DbSk/oJQHiOJTx0VPYrsSpAg4qDCaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:79:12:22:6a:0a:54:ef:fa:9c:65:ab:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=e0679c33f411f8cf6983f77bc9bc2611212ece65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:b3:34:e3:41:26:e8:36:d4:83:a0:f5:49:
68:63:95:36:42:9d:65:f2:83:1f:89:9f:4e:8f:d8:
4e:2c:7d:a6:1e:21:a9:d8:21:d9:5a:ab:6a:16:21:
cf:c1:51:5e:57:99:29:55:7f:18:20:1e:fe:21:6d:
7d:b1:39:b0:aa:19:9c:5b:54:17:32:42:82:83:33:
af:80:7a:a1:8e:22:63:a7:17:dd:7c:43:c1:92:c5:
fc:e6:72:30:43:8e:3f:39:ac:94:5d:7a:c3:43:ff:
d6:6b:12:fc:e4:0d:15:a3:20:0a:1e:4a:70:3f:f0:
bb:b7:87:05:70:10:87:1f:e0:9b:43:13:42:9a:c2:
68:1a:bc:08:f4:f9:f1:cd:25:5e:a9:a6:03:d2:fa:
c0:27:34:1a:57:aa:a1:ce:95:dd:a0:48:6e:50:8d:
31:a7:09:b4:12:f9:4b:ec:5f:35:16:ca:8b:da:59:
e9:ff:fe:84:18:11:46:f5:08:ff:45:17:8f:46:db:
e9:1f:19:1e:17:16:bc:c2:ee:04:a1:04:2a:a9:6e:
77:95:c1:c5:fd:22:68:a2:61:bf:c8:21:97:31:f0:
31:fd:5e:a2:da:68:99:f8:3b:8e:95:9c:6a:49:cd:
5e:8f:ce:ce:9d:48:31:37:aa:21:9d:31:03:f2:02:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:9C:33:F4:11:F8:CF:69:83:F7:7B:C9:BC:26:11:21:2E:CE:65
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:51:46:16:a4:d7:f3:23:1f:ca:ea:d1:02:70:1b:8b:c7:99:
8c:0c:c7:90:76:71:5c:74:83:06:08:85:42:ed:64:a8:eb:12:
d1:dd:35:a1:4d:ae:70:c0:fc:5d:4b:e3:91:f6:4c:af:8a:18:
13:da:ac:7c:0c:e5:00:b1:2c:45:6f:fb:67:d3:1e:e2:22:20:
88:71:bd:be:3b:af:aa:77:9e:36:63:99:a6:3b:7d:f6:c7:5c:
67:ae:f2:e2:d4:d3:39:db:66:c5:de:37:2d:a3:2a:f0:1c:1e:
b3:c6:74:86:8f:b2:c3:7c:dc:e9:d2:5f:6d:f0:db:05:c6:9d:
34:3f:b3:7b:50:c1:27:d3:9c:ca:f0:eb:49:b1:ad:e2:1f:fd:
cd:b4:74:50:4d:32:27:eb:e6:aa:45:14:70:ec:b1:52:ff:23:
ed:cd:f4:96:79:21:86:cb:eb:84:f1:81:bd:cb:95:bb:fa:6a:
de:6a:9d:9f:f7:93:38:1c:af:11:62:df:b3:fb:bc:31:a7:ee:
7b:ea:00:fa:bc:0b:bf:2c:97:68:26:7e:82:61:28:7d:34:d5:
f8:bc:6a:70:9d:2b:b5:2d:07:cb:88:a4:e5:78:7a:97:90:5a:
61:9a:ec:00:f9:0c:31:1a:0a:d7:72:64:80:aa:c5:39:cc:f6:
d2:97:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client