Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: XmdtAqKdOKb0OP3rFZjozS0wnlITskE6q5p5vhPY5zc=
Subject key identifier: A3:53:57:E7:C5:68:A1:7F:75:B2:8B:87:94:7E:0F:3D:D9:1F:47:E0
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019EB7A09B257E4A0BBFF6444DE411BDEBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 01FD
Signing time: Thu 11 Jun 2026 17:00:16 +0000
Manifest this update: Thu 11 Jun 2026 17:00:16 +0000
Manifest next update: Fri 12 Jun 2026 17:00:16 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: GKBSKMB7BIDaemsHjy9klgjilc6DGgLjNx2XLX8bqD0=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:9b:25:7e:4a:0b:bf:f6:44:4d:e4:11:bd:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Jun 11 17:00:16 2026 GMT
Not After : Jun 12 17:00:16 2026 GMT
Subject: CN=a35357e7c568a17f75b28b87947e0f3dd91f47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c0:94:ab:f4:4c:87:80:90:43:f3:e8:3e:b5:
a0:d1:f5:6a:90:8f:92:68:be:6a:21:ae:ff:47:44:
16:f8:99:f6:13:43:31:84:74:5a:47:14:3a:d7:c9:
04:b5:7d:b8:a3:29:75:b3:e3:5c:4e:87:15:4a:58:
94:6c:6c:6c:bd:18:5c:69:d8:32:2b:c2:32:69:34:
0c:66:95:5f:8a:dc:4c:27:c9:86:98:52:32:63:1d:
1c:ba:6f:c0:5f:64:61:c0:8f:c1:2e:f7:6c:56:81:
55:88:d5:68:32:26:3d:8b:9d:0b:73:d0:ef:fa:c9:
94:6c:e7:ce:ce:27:c3:47:09:7e:c7:a1:5c:8a:31:
56:fa:ca:04:7a:2f:b3:ea:b4:f7:c2:46:a5:6d:db:
f9:11:10:3a:8a:05:93:a9:77:d1:68:ca:59:b6:fc:
90:aa:20:2a:d7:d2:8a:ac:0e:66:0d:b4:b7:54:fa:
9f:45:79:ea:86:21:df:8b:78:46:14:ff:63:70:87:
6e:46:dc:0a:37:7b:30:f2:51:18:bf:22:7b:50:ba:
46:b2:46:90:4f:bc:4b:66:02:9a:26:f1:af:36:f9:
93:2a:22:69:cf:91:b6:9f:2d:ff:4c:3d:4e:4e:0f:
92:7b:30:a2:7e:f1:2f:71:44:6b:a8:41:16:b7:ea:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:57:E7:C5:68:A1:7F:75:B2:8B:87:94:7E:0F:3D:D9:1F:47:E0
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3c:ce:6f:8a:b3:a3:77:25:36:de:f1:60:58:97:81:04:13:
45:2a:57:a4:0d:01:6e:ba:2a:ad:ff:20:98:5f:d4:92:9d:aa:
14:9a:bb:5e:e0:34:13:db:2b:97:03:b8:80:69:80:37:03:1b:
b8:fe:0c:8d:88:81:93:20:a9:4b:64:01:74:77:ad:ee:fc:15:
2b:f7:38:74:3b:6b:4f:71:e9:5d:ef:da:b3:7c:f3:e2:3a:67:
a2:c0:6a:c3:94:8c:aa:0b:3f:e1:8d:a9:4a:d6:51:b6:e0:66:
f0:48:78:e4:36:83:54:12:24:3f:bc:65:22:da:ce:a0:3f:95:
85:a5:48:78:cc:7c:ad:f2:40:f7:f0:be:ca:8b:bc:51:74:97:
dd:5e:3e:ec:21:cc:d1:0a:ff:19:c9:b4:d7:c0:99:24:50:6d:
47:08:59:df:91:0a:45:4b:65:86:42:25:34:27:d9:e5:f8:77:
d1:c4:bb:c1:11:d0:b6:eb:2c:fe:89:87:db:f3:23:82:89:b1:
08:95:63:ae:c0:40:b7:78:ea:2e:57:74:52:e4:fb:91:ea:ee:
2f:d3:66:52:f8:f9:72:61:17:88:5d:bd:be:f9:d8:7f:29:74:
de:1e:99:e7:5c:25:3a:00:bd:af:91:4c:d9:9b:e8:ab:ef:3d:
fa:fb:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:31:30 2026 by rpki-client