Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier: ig2D0WJkRDmA9MYNOh/iLe1UvOfz47P3a5ohHTF8Op0=
Subject key identifier: C2:B6:80:B6:DC:FF:9D:44:89:62:32:D7:54:13:50:F5:7F:E2:87:CB
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial: 019D371BBF858494279939DCB35F848E529C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number: 017C
Signing time: Sun 29 Mar 2026 01:00:58 +0000
Manifest this update: Sun 29 Mar 2026 01:00:58 +0000
Manifest next update: Mon 30 Mar 2026 01:00:58 +0000
Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: Po+cZB4GRdQALosR8T7muXniKYya6Z7FVXV26FeIpA4=)
2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:bf:85:84:94:27:99:39:dc:b3:5f:84:8e:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Validity
Not Before: Mar 29 01:00:58 2026 GMT
Not After : Mar 30 01:00:58 2026 GMT
Subject: CN=c2b680b6dcff9d44896232d7541350f57fe287cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:47:d1:c2:6d:fd:33:d7:f0:84:1a:46:ce:
c8:f5:38:11:da:c1:30:a0:c8:83:fe:8c:68:8d:24:
4c:35:78:a9:48:3c:3e:56:b2:a4:d7:11:51:ad:25:
91:4a:bc:6c:ea:79:4d:a1:5f:4e:f2:77:b0:13:31:
7f:91:ea:33:19:e5:f5:42:0b:5b:6f:4b:94:0f:3b:
1a:3e:93:df:6a:ba:d8:55:a2:06:69:ee:66:e6:fd:
38:31:f3:10:54:13:64:f6:fa:c4:09:fe:d8:c2:30:
a1:72:87:04:49:80:0b:84:27:9c:66:c1:32:a4:90:
00:c5:c1:ed:05:1f:b8:b1:96:9a:38:09:44:c6:cf:
d9:d3:9e:78:25:94:5c:58:37:1c:36:11:11:13:e7:
cf:27:8a:93:3b:9c:28:73:00:52:a7:d7:9b:10:3b:
d3:c4:2c:db:6c:98:35:1e:93:8e:6b:39:26:57:d4:
0d:ef:f2:de:51:52:b4:db:79:b5:f5:ea:66:b0:c9:
64:0e:9f:0c:9e:a1:cc:91:d9:4a:7f:c6:d7:38:eb:
ab:eb:c3:d2:3d:d6:b1:5e:8f:be:e0:54:35:c7:b3:
de:20:a5:58:9c:bc:e7:7f:e6:3f:3d:45:85:8c:f8:
0a:b9:53:cc:e1:d0:3a:4a:f8:e6:4f:8a:b9:3d:26:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:80:B6:DC:FF:9D:44:89:62:32:D7:54:13:50:F5:7F:E2:87:CB
X509v3 Authority Key Identifier:
keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:24:a1:7b:85:24:4b:ca:67:38:fb:62:42:8e:e0:6e:17:
27:a2:60:b2:a1:fa:b5:86:1e:d1:ba:50:52:13:29:e5:5f:3b:
52:ff:a4:fc:87:8b:9f:12:28:2c:4f:21:67:86:ed:f3:fd:72:
93:28:c9:b6:7e:1e:62:d6:ba:e7:2d:d6:51:e4:fd:88:f2:31:
91:f4:d9:6f:ee:83:cd:fb:38:5f:be:f1:8c:0a:38:ba:3d:86:
2d:2c:5d:17:cc:cd:5e:94:86:19:36:e7:fa:b6:77:4a:aa:10:
1c:5d:fb:74:91:a2:a8:3e:ab:7a:ce:1f:9c:a2:0d:71:33:6e:
23:92:94:ee:ee:a1:ea:56:3a:10:44:45:75:19:14:91:47:9a:
9b:df:24:f4:b6:ad:04:b3:e0:67:a3:1c:a6:11:91:6d:2a:e0:
b8:aa:97:ee:98:68:1f:75:9c:49:36:2c:7e:b6:06:78:45:b7:
2b:a3:85:3a:64:f8:1d:a9:a7:44:8f:93:ca:8b:86:e6:51:b3:
88:03:cc:73:f0:74:47:ec:9d:e5:87:76:8d:cd:3b:8f:61:6e:
e0:53:cb:f2:e3:85:20:de:2e:22:3f:74:45:44:40:e5:d0:a7:
e0:7d:9e:13:72:61:a0:4a:7b:c8:22:2c:36:a2:59:30:b7:28:
80:07:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:10 2026 by rpki-client