Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: b0OgqGb1YNn0mrGhCK5ASnG8ou1dyFpqe7oouSnfMVo=
Subject key identifier: 11:FA:E9:8A:1E:5E:7D:97:09:1D:6A:21:B2:72:2C:69:E5:4E:0A:65
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019CE636BD23840EB6BBFEA6C372EB7D4824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 010C
Signing time: Fri 13 Mar 2026 08:01:12 +0000
Manifest this update: Fri 13 Mar 2026 08:01:12 +0000
Manifest next update: Sat 14 Mar 2026 08:01:12 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: osCg0sdRlfV4ufyJhndkJ/EFdOSuOjK7d0yb2uwgiCE=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:bd:23:84:0e:b6:bb:fe:a6:c3:72:eb:7d:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Mar 13 08:01:12 2026 GMT
Not After : Mar 14 08:01:12 2026 GMT
Subject: CN=11fae98a1e5e7d97091d6a21b2722c69e54e0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:dc:01:0b:ee:70:40:b2:73:7c:da:74:c5:
e7:0a:5c:37:22:5e:58:8e:92:93:72:47:46:b2:85:
ca:01:26:bf:b1:67:02:2c:b0:6f:a2:39:95:05:91:
45:ae:dd:f9:96:bb:50:96:0d:ef:43:ad:ed:f6:9d:
8b:b1:ff:ec:0c:44:14:0f:06:66:dd:25:e5:b3:ea:
7e:31:ae:3a:b0:9f:3e:1b:7a:42:18:74:98:0b:be:
b9:ca:b4:3b:10:29:1a:72:85:9a:1d:6e:f9:3a:ed:
9a:20:37:13:96:cf:61:a4:fd:b1:70:77:02:21:fc:
ed:05:f5:04:6d:0c:25:ac:81:af:70:78:d6:94:2b:
80:bb:4b:7c:b5:26:e8:fc:da:22:b6:2a:21:01:70:
b0:be:86:1f:48:25:ed:ba:61:60:5f:be:34:68:76:
26:9f:4c:d9:42:be:0f:f3:11:94:d8:e1:25:98:50:
d3:ad:f6:6b:5f:6f:02:07:d4:3f:38:2e:a2:c2:26:
83:ef:5b:2d:7e:f7:c9:5a:74:2f:4c:0c:28:0e:ac:
30:27:c1:6b:9a:a7:54:d5:b9:26:32:7e:82:ec:c7:
79:dc:7a:7f:32:4a:fc:63:62:80:67:49:08:43:6b:
08:d0:63:98:b6:69:f4:1f:ed:49:ef:fa:30:14:85:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:E9:8A:1E:5E:7D:97:09:1D:6A:21:B2:72:2C:69:E5:4E:0A:65
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e6:9a:97:47:b2:7d:cc:f1:55:91:84:ca:9d:12:c0:86:74:
0e:42:82:fc:64:6b:57:8c:57:60:7b:9b:6d:3d:83:7c:ed:00:
43:20:af:b6:22:6b:30:7b:55:67:56:16:c8:9e:8a:03:ae:32:
7c:4b:3b:57:97:7d:e2:05:f0:d4:2e:96:44:d6:d9:0f:30:cd:
68:0e:f4:de:9a:43:40:2b:e9:d0:c1:e2:36:67:f8:55:1e:06:
5b:4f:c5:66:72:21:11:67:22:fe:63:e8:b0:e8:77:29:ad:10:
95:7c:43:8b:57:ea:dc:39:18:94:d2:80:a0:78:53:bd:e1:64:
93:da:62:db:c7:7a:34:96:e7:10:c1:9a:c5:9b:bd:03:e8:c4:
a8:29:fa:a3:db:5d:0b:fd:f1:0f:ea:3d:01:3b:ca:ee:52:d7:
d3:2a:9e:66:6e:5d:0d:8e:8c:d6:56:3b:7d:42:8e:9b:cd:36:
c5:0f:e6:65:16:2e:02:dd:db:fb:59:b9:ba:c6:f0:7b:f1:8f:
1b:3c:38:79:7d:a0:26:1c:19:ea:9f:65:a5:d1:1d:f9:2e:d3:
0d:12:77:31:b9:ae:1b:15:ca:d2:c5:30:e7:48:ef:3e:11:26:
26:00:99:28:b9:34:41:41:be:37:d6:e5:5b:5b:5e:b1:91:ad:
25:4e:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:05 2026 by rpki-client