Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: ScrZ1CJZQFgII/YySZ78kDnuRjiM6bv4t2AgGTsdU5A=
Subject key identifier: CA:E4:18:48:74:C4:83:2F:89:41:1C:CC:11:54:3D:F6:EB:8B:6C:29
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 01A18BD32EEA4C9210043F00359896297831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 10FE
Signing time: Fri 30 Oct 2026 08:00:35 +0000
Manifest this update: Fri 30 Oct 2026 08:00:35 +0000
Manifest next update: Sat 31 Oct 2026 08:00:35 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: 44w+DTKR46KMH9zvPMpUd+uNtBbjIx1YIoRXbR0c+Ng=)
2: IY5stn4uFyzkXhxk9GN4WlXIsnU.roa (hash: PjV6+EPoAnHt7bbW6zTa++1bAvRToNMnmP3SVwfF3kE=)
3: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (hash: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:2e:ea:4c:92:10:04:3f:00:35:98:96:29:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Oct 30 08:00:35 2026 GMT
Not After : Oct 31 08:00:35 2026 GMT
Subject: CN=cae4184874c4832f89411ccc11543df6eb8b6c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:4a:dd:67:99:78:dc:b1:61:5e:b0:18:15:
d3:0a:e3:49:74:a5:c0:0c:15:53:4a:24:7c:17:88:
2d:42:0c:34:5f:a7:98:c0:ad:24:3f:f8:04:76:2b:
13:3d:f0:93:a1:84:3b:cc:08:fd:ae:b9:9a:0b:f9:
dc:5b:d2:6a:c2:55:ef:7f:92:d0:72:6d:d9:1d:f8:
62:09:8f:49:47:fc:55:bc:a6:73:42:2e:a1:15:d8:
83:0a:c6:62:29:03:08:12:bd:31:87:eb:92:1e:9f:
3c:16:d4:49:70:4b:19:b9:30:5c:0e:7b:eb:7f:d9:
c8:72:43:75:c9:67:0c:e1:d9:8c:76:9e:3f:36:5d:
ff:dc:bc:2d:a0:08:6d:d6:7d:4f:c6:88:25:78:f2:
ab:ad:1b:c0:19:23:e2:4f:03:ff:16:b6:78:8d:54:
48:88:24:01:43:8d:91:3b:83:68:a8:75:38:d1:b1:
08:3b:f6:e0:8d:fc:c6:e9:6d:b3:3d:0d:93:3a:de:
43:e8:be:ab:84:82:67:25:78:65:af:cd:c4:bc:cc:
ba:43:46:41:5c:28:8f:d8:57:ad:ca:d5:84:ad:05:
55:f6:91:27:a2:6d:bc:9b:02:e8:71:e7:11:60:6a:
bb:0b:43:79:28:e3:c1:f2:22:43:ee:ab:90:92:4e:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:18:48:74:C4:83:2F:89:41:1C:CC:11:54:3D:F6:EB:8B:6C:29
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:b3:dc:1a:71:ff:0b:bf:b0:06:33:42:a5:14:a2:b2:dd:7a:
12:60:63:f8:65:c6:db:4c:85:56:41:8e:46:3f:0f:6e:47:47:
3b:3a:91:16:19:d1:fe:ed:91:70:27:fc:66:d8:42:9b:9e:b3:
5c:91:8f:b8:35:aa:b8:9e:c2:a2:51:b7:bc:42:64:20:6c:1f:
c6:03:0c:7e:59:fb:ac:cc:fc:13:9a:a3:6e:26:ac:5a:9a:8a:
f2:05:3f:ad:42:4c:0c:0c:f2:a0:e0:29:ce:65:9d:7e:82:91:
fb:bb:53:34:e5:c9:18:ef:ea:78:e4:64:09:c1:9f:e5:93:fa:
0b:fc:83:2d:6a:c1:44:d0:a0:99:7e:bf:7f:3a:a4:9e:26:9c:
d7:db:2a:27:a4:d4:26:6d:7c:db:10:b1:02:17:c3:1e:33:6d:
d2:92:6b:42:c4:47:34:0a:28:a2:1c:8b:86:52:ed:ad:09:5a:
33:c8:45:48:0f:d9:73:03:ca:bc:8f:14:07:16:57:0f:c5:ce:
6c:20:d0:e9:b9:88:ea:9b:4c:e7:01:b8:69:bc:fb:ee:77:5b:
59:3c:76:8c:25:e8:f6:6a:7b:68:37:d6:94:ac:2e:1a:8c:26:
4a:6f:4b:42:da:fd:05:01:10:2a:b6:8a:25:ff:46:cd:58:a0:
cd:34:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:27:09 2026 by rpki-client