
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File: F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier: Q2h+AKAILNaEz/CtxLHTLVn5+LPRzxUTFFjtSngHbW0=
Subject key identifier: 13:A4:F8:A9:B9:8C:A1:83:46:B3:9F:3C:15:F2:73:21:E2:43:24:9A
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial: 019D390A13981E01AADBCA5D838927AF3627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number: 030D
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: KHpNBxmCaKOhEW+ZzWOd+hUIz8VV+uCK0Q7QB4roy5A=)
2: Muw91QFF1gZnvIhmwJGxe0JW4UM.roa (hash: uuXLdfsOuVDa4QD34/Jn4ShZlQdSH9Vf/9OOXP9hBVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:13:98:1e:01:aa:db:ca:5d:83:89:27:af:36:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=13a4f8a9b98ca18346b39f3c15f27321e243249a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:53:d9:d1:d9:ef:ac:74:a3:a9:79:33:60:
de:2f:97:68:10:47:68:45:71:44:65:a6:07:9c:f2:
5d:54:80:f1:32:4b:1f:c3:5b:69:3f:78:b1:a4:4c:
b0:7e:0b:aa:62:98:1b:9e:64:aa:33:f5:d2:19:91:
a9:78:87:39:54:c8:45:26:42:ba:f9:30:8f:33:b2:
6f:a8:ee:6d:4a:5e:e8:0a:cd:34:52:ed:81:b6:87:
81:9a:47:1d:3b:62:b6:47:9c:12:54:7d:dd:83:3b:
ea:3d:d8:3e:8d:a1:ae:d1:a8:6c:5c:b2:10:0a:e5:
5c:71:84:94:98:57:83:5e:29:39:fa:97:ef:26:87:
46:a9:8d:74:1e:11:60:05:f5:a7:ae:0a:c6:86:65:
e8:bb:b4:a9:aa:1d:4f:b2:08:b8:7a:5d:df:9f:32:
17:34:63:4f:c9:a9:22:86:eb:04:6b:e2:a1:02:a3:
31:01:5a:6b:21:f1:12:a8:65:7e:be:04:56:cd:8f:
fe:47:71:38:ae:3f:68:2b:00:01:1d:5d:45:ac:de:
be:e7:57:65:48:e9:2c:12:c7:31:b5:08:2e:3b:2b:
a8:66:00:53:26:ca:8c:f1:49:8a:04:bb:78:15:eb:
a7:7f:a8:b1:b6:28:2c:10:07:23:de:46:a7:9d:0f:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:F8:A9:B9:8C:A1:83:46:B3:9F:3C:15:F2:73:21:E2:43:24:9A
X509v3 Authority Key Identifier:
keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f9:84:5c:3d:b6:06:6e:f8:e7:4e:0d:fc:3c:f9:43:0b:30:
bc:10:2b:c5:f3:8f:41:0e:0d:cc:14:0f:5a:03:87:58:5f:dd:
bb:ec:64:2b:e3:5e:f9:28:51:33:31:47:54:cd:c1:4e:be:c5:
68:90:de:be:e2:78:99:fd:bb:8f:37:45:cc:a0:af:73:71:b5:
81:64:0e:c3:39:80:bb:86:b3:49:08:d2:44:7f:e1:b0:e1:2a:
04:13:8e:c6:42:d1:2e:7d:a5:01:bd:c7:e9:c4:74:0a:7d:40:
83:27:77:e5:c5:ed:1c:a9:26:16:71:11:82:51:40:89:5d:db:
19:26:63:38:4e:d9:e9:5e:68:d6:cd:63:53:a9:0b:ca:81:df:
d6:05:99:95:0a:ee:11:9e:2f:2b:9b:ec:94:99:00:45:8b:a4:
9f:3e:1f:a5:67:9c:98:1f:33:f5:0f:a2:36:ce:9c:57:f5:fb:
1b:32:e2:0d:3d:f2:47:0d:90:60:53:98:e8:dc:1b:99:d9:84:
9f:d4:9f:68:b2:3f:0c:d6:eb:73:12:74:05:95:e1:b5:c0:88:
28:31:3d:b9:ab:22:7f:8d:29:98:10:8f:7d:95:b1:f3:46:8e:
f7:28:b7:f4:14:8b:02:eb:ea:b9:80:a1:cf:b9:a3:c6:f8:7a:
43:3e:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:00 2026 by rpki-client