Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File: F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier: 6yNoGnGzHYV7MLxCWZT86ZAICYEnTtr7CV1zOPxAKio=
Subject key identifier: 96:1D:0E:C9:06:C0:6C:BA:91:5D:4B:FA:7C:C9:33:75:0B:9C:37:6D
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial: 019D37C024E7847C92E043BF40EC4A8B0687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number: 0D0F
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: j88SRksssUriiuyMIkKnD5ewfNmGT6If1x00zChKQEA=)
2: GiUXlZf0zBfuYBBAMHy9_aajdyg.roa (hash: L1PeZQ+K2VXr/kDHBD4XOdsQ7Gs1xXT9UeTey1KljtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:24:e7:84:7c:92:e0:43:bf:40:ec:4a:8b:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=961d0ec906c06cba915d4bfa7cc933750b9c376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:81:59:5e:6c:4f:48:50:cb:bb:50:81:7f:
fc:c2:40:c7:2d:02:c1:d5:99:e2:99:e0:01:0a:83:
15:e7:d9:13:c9:bf:02:c8:84:ea:e5:a1:04:eb:ad:
d8:a3:e8:8a:79:23:02:52:96:43:08:10:4e:9a:72:
42:1f:da:08:0e:93:bc:49:f7:0b:11:67:74:25:dc:
f8:e4:f0:ea:f0:bf:3d:b5:4d:1c:a1:fb:ec:5b:93:
f7:4c:4a:12:25:da:10:f6:ea:3f:35:35:5a:ab:2d:
f1:11:53:08:5a:3b:e0:52:37:1f:66:af:00:6f:48:
a2:c7:a3:6b:7f:c7:07:fb:76:e8:bb:8f:6f:5b:8e:
e0:7a:ef:bb:56:39:98:48:de:da:52:27:6f:94:61:
36:f3:80:ac:4c:c2:12:09:a0:93:cf:98:bc:96:f2:
50:ee:a9:69:26:e9:e8:82:c4:1b:72:3e:c9:73:8f:
70:b4:92:b0:18:01:11:34:fb:bd:0a:df:b9:4e:96:
f4:47:8b:8f:d1:3c:98:18:cc:d6:27:12:c8:82:d4:
fa:b8:66:8f:b8:00:f7:0a:80:ae:f9:35:c1:7c:57:
b8:8f:78:f7:cb:0c:db:5f:2d:e2:56:55:b2:2e:ec:
c7:14:e1:9a:15:08:8f:30:97:b6:08:47:9d:8a:2b:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:0E:C9:06:C0:6C:BA:91:5D:4B:FA:7C:C9:33:75:0B:9C:37:6D
X509v3 Authority Key Identifier:
keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7a:b5:c4:ce:5e:88:a1:02:ac:74:2b:6e:82:04:23:0d:76:
77:0c:9a:3e:c0:73:22:d0:15:d3:b5:82:73:c6:b1:34:c0:68:
6b:ec:1e:d5:c4:9d:12:d1:97:1c:aa:f8:15:98:b5:10:8b:a8:
60:0f:25:66:bf:af:ea:57:0b:35:3f:d6:b9:fe:80:01:d4:b0:
01:7a:cd:f3:c1:26:07:7b:c2:ae:23:6c:74:8d:4f:d8:9a:70:
1a:a5:ee:36:97:0d:e7:e1:8e:86:74:d2:00:38:3b:62:b0:14:
bc:61:0c:54:bd:f5:67:ec:e3:d2:d0:94:c5:ad:15:0b:bf:fe:
c8:ce:ab:03:f8:10:63:fb:4c:5b:63:9a:00:00:96:f8:50:7c:
96:ac:b2:7f:7e:46:40:49:40:a2:f4:39:de:c4:e8:83:4b:d7:
e7:ca:16:3b:e8:ce:56:31:9f:6d:ea:b8:dc:15:7f:77:99:29:
e1:f5:b5:8e:6e:65:e9:bd:9a:d5:41:91:49:34:3c:dc:83:5d:
b9:f0:23:b6:a1:3d:13:2d:20:dd:a5:cf:22:ec:5c:ad:54:8e:
a4:b7:8c:a3:86:6a:a0:3a:ae:19:e0:6d:7a:9f:2c:83:ea:cc:
bd:ba:fd:0a:91:ab:02:ff:8d:6a:e8:25:30:37:0b:1f:db:ee:
94:f6:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client