Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier: vG9ExMmGqeaDZbKIVollBnAxz8b1OoeG03262KjqBGc=
Subject key identifier: 5B:BF:3C:AC:61:1D:A2:7D:4B:1B:21:0D:DA:97:54:5F:F3:5E:21:FF
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial: 019D39778D4E276FF8F5E8B03D829D9887C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number: 0F8A
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: Irr3VHgPEkeyYHknO0I2ainBh8/ZNsP3nMfbz2xJuBA=)
2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8d:4e:27:6f:f8:f5:e8:b0:3d:82:9d:98:87:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=5bbf3cac611da27d4b1b210dda97545ff35e21ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:49:2f:c9:ee:72:fc:8c:64:37:02:4d:e4:
13:91:78:a8:2d:3a:05:9c:4b:97:26:04:86:81:59:
d9:ca:26:1c:a0:66:dc:92:5f:19:26:d4:bc:67:9e:
4a:73:44:f8:07:8b:95:33:ef:68:bc:77:bd:b7:88:
ac:9e:c9:15:22:be:5e:a9:b1:6e:47:51:74:12:a1:
40:53:ca:2c:9d:35:1f:b6:2e:16:f3:70:f4:33:a3:
d0:42:b3:3e:65:e9:55:63:8d:0f:67:ec:07:2a:fc:
2c:b2:07:f9:df:a0:b4:86:3c:e8:62:29:b4:b0:2e:
29:b8:ef:14:57:23:6f:12:06:d5:d2:42:40:8f:b5:
2d:d9:18:0d:11:65:eb:cb:d4:a1:31:06:1d:31:aa:
9d:0d:7b:45:a8:1a:d8:70:85:15:6a:46:01:54:f7:
17:f3:d9:fc:83:60:56:d4:64:13:12:a3:ae:9c:0f:
1d:2c:25:b2:4e:27:68:9f:c9:12:02:60:eb:5b:67:
ae:47:fd:7f:73:5b:e3:93:70:76:a4:9d:99:dc:33:
3b:70:47:ab:d6:94:a5:f8:be:a9:b1:17:18:2a:a8:
0a:4e:2c:cf:2e:a3:30:42:75:9b:75:55:ee:64:50:
bd:dd:e0:48:f2:f0:2c:33:a2:30:63:f9:f6:91:c2:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:3C:AC:61:1D:A2:7D:4B:1B:21:0D:DA:97:54:5F:F3:5E:21:FF
X509v3 Authority Key Identifier:
keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2f:39:88:20:21:f0:4b:52:32:f5:07:92:fd:67:30:b4:4b:
23:c3:ff:89:e9:ee:88:d6:7b:be:9d:ed:30:bb:09:a4:9b:85:
37:aa:e1:2d:92:8e:c8:f6:15:b6:56:d8:5d:a4:f8:dc:3c:02:
75:fa:d5:b7:9a:47:4f:c0:d9:98:43:ae:e5:16:6c:c0:07:e2:
8d:ee:ea:1f:96:e4:25:8d:38:de:44:22:79:d8:47:69:ab:28:
8b:71:a3:3e:74:e8:0d:e9:89:7d:18:84:f2:b4:76:22:39:12:
19:34:8d:6d:99:c4:ec:38:06:87:5f:cd:66:a8:12:66:95:7c:
fd:c8:8f:95:7d:3a:44:1e:01:36:99:e5:c3:b5:4c:11:f7:a5:
e4:ab:f6:90:81:59:e6:c3:c6:b5:90:c1:19:39:16:3b:7f:9b:
d4:b3:00:36:ee:de:70:16:0a:0f:fc:76:79:ad:3c:44:7b:a5:
08:df:9a:98:0c:76:db:6a:de:dc:31:0e:7e:85:b1:ff:92:f3:
a9:53:80:e5:cf:4a:50:5f:1a:c6:77:c9:2a:3b:af:10:1f:80:
0a:ad:77:de:51:b5:04:1a:3f:7f:83:cc:a3:0d:c2:26:60:a2:
5e:cc:9b:ba:a5:de:a8:da:83:c9:2b:91:4b:11:af:3d:c0:e2:
2b:0e:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:12 2026 by rpki-client