Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier: 6Nyqv/ex3UUc8xcAUWm8z+IqeC8RzSbxt7DlhnYBHC8=
Subject key identifier: B7:23:4B:DB:97:2F:31:9C:B0:7B:5A:7B:83:E5:44:23:B9:B3:5A:46
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 019D3789AA8EFBF6186DDE352C6070195EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: UsCTd8kPZTQ8LmuA60ZcG9secfmjJRJ3EOtpiGKkHKE=)
2: O39MJv57TWbmh-043GG_Y3SPcR0.roa (hash: 8nJD+DxVo3QJVLDsiX2c2YfhjphmaMQZAM0s+wFgUgA=)
3: OJRfagybnKNPJgB2VgQCHXK6_wA.roa (hash: +CkaUNxuBjvbD77nG/V3XHJG2xGpZ2YKXMRrO/6Sytc=)
4: ihmrebXRZJfViRX4wxqlQD4yY5w.roa (hash: zbtiR4hVHidDupnjoUs6IoiKzo0tQZSkjWxtKWEtK+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:aa:8e:fb:f6:18:6d:de:35:2c:60:70:19:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=b7234bdb972f319cb07b5a7b83e54423b9b35a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:c1:3b:53:3f:89:f9:0c:62:95:5e:68:3d:
b3:5d:af:19:94:1d:9d:7f:e5:56:29:04:70:dd:59:
c4:6b:95:a2:c2:ed:58:60:ec:16:85:76:23:86:0a:
52:f8:95:8c:3e:3c:f7:a3:2f:7b:55:84:c5:3d:66:
87:c0:e9:c1:d6:5b:8e:c3:75:b4:da:fe:30:b6:c4:
f8:6f:96:79:07:61:73:05:05:e6:9c:de:11:f2:9c:
25:b9:9f:42:ed:f2:5f:f7:6e:42:ca:f0:3d:2a:98:
7e:97:50:5b:f8:84:63:fa:bf:4e:78:22:f7:ad:d7:
52:6a:d6:b6:cf:0a:5b:70:c4:e8:04:bb:57:d1:96:
dd:42:6f:80:bd:14:61:a0:2f:b8:03:97:d6:43:44:
6c:95:e7:d2:2e:c1:64:8e:0f:b8:ad:39:7c:c1:c4:
ec:d1:de:c5:a0:db:34:31:55:ad:ba:4a:d0:6c:1a:
7f:fe:c4:20:7a:5f:04:06:fb:c3:45:21:d0:ad:fc:
1d:78:56:01:87:40:4e:54:1f:e2:30:5c:69:49:e8:
dd:27:7a:9f:af:69:ad:92:53:71:c3:02:76:dd:c0:
d6:02:73:b5:c5:22:3e:33:06:3c:75:4e:db:6e:c4:
20:89:ef:62:d0:ea:87:0e:0c:d6:39:45:00:a8:b6:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:4B:DB:97:2F:31:9C:B0:7B:5A:7B:83:E5:44:23:B9:B3:5A:46
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:f0:5c:39:5f:1b:60:07:23:ab:32:a4:52:97:71:8f:77:
7a:3b:60:c5:47:71:78:73:7e:ed:e9:bd:33:97:26:90:f3:5c:
3a:2b:ad:85:28:bc:17:e8:70:1e:57:b3:f2:a4:e3:16:fb:0f:
b1:2a:9a:0d:3e:d5:96:9b:a8:c3:00:26:fb:36:37:99:0d:32:
a4:e5:e7:78:fe:cf:5b:0c:04:38:ab:ba:e9:d8:68:23:7b:ee:
c7:94:ab:1c:62:cf:b9:fc:9f:58:39:e9:3f:5a:c2:13:db:60:
5b:6a:95:84:6c:4a:90:ef:55:4e:3f:e3:6e:95:2e:78:3c:4a:
1b:d5:fd:b2:04:2f:c1:bc:b9:1f:51:86:55:09:54:ff:d4:c6:
55:e2:64:73:b4:36:30:14:d9:60:a2:49:02:01:05:5a:42:25:
eb:4f:8e:a4:65:90:05:5b:14:1b:96:dc:93:69:c4:e9:05:98:
be:db:67:a4:c0:b1:a1:4f:5e:2d:1c:03:fd:89:35:a5:0b:a2:
d0:41:c2:ea:72:9d:8d:06:c0:cc:16:09:66:ed:1e:c0:3b:84:
e3:23:0c:80:ed:35:e1:b5:9f:97:5d:1c:39:7f:88:ec:b6:96:
af:de:72:c8:0b:91:1a:ff:e4:9a:11:28:a2:d5:5b:a8:00:d3:
13:bb:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:07 2026 by rpki-client