Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: 2tM4JGJ7U+1K2NuCQniAUoNX37HX7M7JdvMyYspCH1c=
Subject key identifier: F5:3D:DA:EC:E3:8E:18:FA:C5:19:D8:30:73:2D:E4:75:8A:01:1A:8F
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 01A08AF9F7A52D7A2F138377393AFBB4103D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 02EF
Signing time: Thu 10 Sep 2026 11:00:32 +0000
Manifest this update: Thu 10 Sep 2026 11:00:32 +0000
Manifest next update: Fri 11 Sep 2026 11:00:32 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: ZGpTMVZh9iImRso9/j+0yckkYrVUcm27YP32hl7nquc=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:f7:a5:2d:7a:2f:13:83:77:39:3a:fb:b4:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Sep 10 11:00:32 2026 GMT
Not After : Sep 11 11:00:32 2026 GMT
Subject: CN=f53ddaece38e18fac519d830732de4758a011a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:6e:34:ef:cc:d5:52:6b:4a:32:66:8c:83:
68:c0:75:1e:83:79:ad:bd:3b:b9:d4:d0:dd:dd:54:
aa:72:ba:58:7a:4a:6a:1b:a3:11:ea:87:b5:d5:6c:
d4:f8:6b:7a:d4:a1:1e:b6:ee:58:f7:c9:8d:c1:20:
ee:ca:b9:ec:85:36:83:37:8a:39:a3:da:be:ed:c6:
a8:8d:9e:f2:95:92:ff:8d:cb:ba:28:f1:20:0a:b9:
c4:85:7f:30:47:6f:c1:b4:a2:9a:2a:d3:d3:79:46:
d2:d7:bb:a9:22:c3:52:a1:7c:fb:f0:06:ed:f4:7b:
b0:c6:d6:65:16:a3:2e:ac:bf:c5:23:8e:24:34:91:
d9:23:ab:54:9e:83:d4:a2:2e:41:70:84:5f:d0:1a:
05:2c:11:c4:7c:82:82:0d:4b:57:0a:bd:fc:e1:8d:
f7:ec:8f:ae:1c:7b:de:7c:7d:f6:43:55:5e:e2:cf:
03:d5:cc:bb:0b:e3:96:27:46:25:76:63:58:80:3b:
74:ad:93:e7:e0:d3:85:53:ee:ce:a2:04:0b:89:16:
1d:37:00:c9:b1:25:a8:71:a2:9d:6e:91:a1:d2:ed:
38:f7:57:73:68:b0:e4:6d:17:a1:fc:a8:ed:53:68:
a6:66:4c:e4:22:4c:d2:d5:34:90:1c:e3:65:2e:ac:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:DA:EC:E3:8E:18:FA:C5:19:D8:30:73:2D:E4:75:8A:01:1A:8F
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bb:05:16:3e:3c:b5:9a:f3:a6:01:3e:93:01:99:68:02:5d:
83:48:93:31:f9:66:14:72:46:05:58:36:90:fa:04:80:b9:75:
c4:b0:05:82:5b:a8:e4:90:ae:7d:63:43:3c:26:c6:21:f7:96:
7e:85:08:ea:0a:85:38:e8:8d:cf:39:cc:3f:83:e2:cb:51:9e:
40:68:7a:0b:14:87:24:1e:62:77:a5:e7:ce:ce:ef:f3:f7:d5:
07:bb:03:59:e9:cf:d6:ef:fa:8f:82:42:be:22:41:97:d9:06:
75:eb:08:de:74:37:92:06:38:ae:48:47:ea:16:9e:be:a6:73:
9e:37:a7:aa:d2:de:24:3b:fc:9f:fd:f5:ee:7a:8f:8c:c3:b7:
94:03:7a:cd:5d:85:ab:6f:a9:83:23:8d:2a:7b:76:56:a8:21:
44:e6:63:87:37:44:d6:a2:65:6f:2f:e0:c1:b0:2b:3b:63:8b:
41:28:9c:66:b3:57:11:de:82:cc:48:f9:0d:ff:ce:6a:b0:7d:
a7:62:27:fd:58:30:f8:cb:66:d2:c5:2e:3d:6f:f4:cb:12:8d:
53:7c:f5:57:1f:7c:97:7f:41:49:65:84:d8:2d:09:7b:28:3f:
92:74:4c:c2:7d:93:38:6c:f6:79:1c:8e:8e:f0:15:1e:32:63:
b1:3b:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:31:26 2026 by rpki-client