Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: VKFSL0rXNTGjI/vZNMQwsn4XZFzYzw4r1WlK472ag3A=
Subject key identifier: C2:35:2E:14:81:90:6C:0B:DD:EB:16:6E:FE:22:97:60:9D:22:CD:4C
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 019D394158C0368B574342C6241BD4A6911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0EC1
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: 9PmxruXa9ZFyXsKqsnfMO1fF1O8v2OBGk//mIEb8tUk=)
2: IY5stn4uFyzkXhxk9GN4WlXIsnU.roa (hash: PjV6+EPoAnHt7bbW6zTa++1bAvRToNMnmP3SVwfF3kE=)
3: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (hash: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:58:c0:36:8b:57:43:42:c6:24:1b:d4:a6:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=c2352e1481906c0bddeb166efe2297609d22cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:0f:7d:00:f9:73:fb:9b:c5:57:d8:68:af:
7f:ac:31:c1:ea:0b:56:19:a0:f5:17:14:2c:6f:d3:
50:a0:aa:18:3a:a4:b1:8f:65:62:24:e5:7e:56:eb:
14:f8:46:0e:c7:65:56:09:fb:11:ee:2e:65:d4:7b:
54:61:f4:49:2d:88:90:30:f6:10:6b:00:68:b8:ce:
ab:5c:90:fc:60:6a:6e:16:bf:9f:bc:60:16:16:fd:
8b:23:e2:b8:be:02:68:8e:a0:0f:91:72:2a:75:f1:
6e:0d:91:1d:f7:91:96:8b:1a:59:67:3b:11:ce:91:
da:24:d1:ad:58:ce:5b:41:9f:40:87:b1:39:40:92:
85:95:f0:4f:47:0b:32:88:0d:d9:7c:36:aa:f3:51:
33:bc:1e:2e:ca:e5:06:58:d8:2d:a3:c2:92:c3:c7:
36:ec:b9:bb:09:17:2b:96:1a:56:2e:96:44:29:dd:
f8:38:d3:5b:70:7f:7d:8c:f2:bb:b1:a9:f9:78:17:
c8:05:32:15:f6:73:f0:75:57:15:0c:a3:de:62:5c:
a7:94:04:c1:a4:22:1f:90:40:78:ea:fd:77:0c:49:
f7:e6:70:26:c3:f7:0d:04:62:bf:06:98:48:0c:02:
28:9a:56:0e:a9:9b:d9:85:9a:3b:c8:16:43:fd:29:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:2E:14:81:90:6C:0B:DD:EB:16:6E:FE:22:97:60:9D:22:CD:4C
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:aa:d3:d7:9d:f3:64:68:ec:00:72:fb:5e:a7:2c:18:35:
9f:86:90:a2:3d:18:91:bb:85:20:14:b3:d1:b1:33:16:c4:f8:
9c:b4:ee:5c:59:44:0d:0d:c7:0c:36:36:40:4b:fd:88:c8:76:
a0:95:23:b1:19:7e:9e:29:59:1c:11:a5:b8:5b:27:e4:1b:7b:
f4:d9:30:b6:54:c8:e8:68:21:38:f8:bd:37:71:b3:08:63:4c:
42:53:64:f4:55:e9:57:9b:c7:c6:07:7f:e3:f6:93:21:40:c9:
c9:0d:c4:22:d6:98:bf:87:a4:8d:45:3c:42:b6:19:84:f5:ad:
08:8c:58:ec:9d:e4:eb:9e:c7:f8:b9:39:bb:00:13:6c:75:9d:
4f:de:35:94:88:be:41:58:1d:44:75:d0:60:87:71:eb:d2:8e:
76:cf:75:be:13:2f:56:f5:94:df:4d:4f:9b:76:d4:70:40:2d:
de:e5:85:bd:08:98:be:61:04:4a:9c:a3:b5:54:30:13:6c:b0:
d7:7f:24:30:0f:f2:61:4a:85:07:5c:d9:2d:e4:09:9a:9b:ae:
b4:01:c6:19:d4:c0:63:18:6f:89:d6:04:80:51:bb:a4:08:a2:
cc:22:db:66:91:c4:23:14:63:17:f6:ee:48:5b:cc:8f:2a:67:
d8:91:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:01 2026 by rpki-client