Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: oU0Dwyr+4qQU3ffip0KNew+FNSF2KJvWjDie9pKNYDU=
Subject key identifier: F8:76:91:BE:27:59:72:C2:EE:28:4C:4B:94:37:17:74:B3:4B:48:89
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 01A08AFB092BDBFBE63127D9A5E839556BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 1079
Signing time: Thu 10 Sep 2026 11:01:42 +0000
Manifest this update: Thu 10 Sep 2026 11:01:42 +0000
Manifest next update: Fri 11 Sep 2026 11:01:42 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: FKFnAkVjjXjoEau7z5pyIwzmKLBsyZFE3ZTcA+AcDuk=)
2: IY5stn4uFyzkXhxk9GN4WlXIsnU.roa (hash: PjV6+EPoAnHt7bbW6zTa++1bAvRToNMnmP3SVwfF3kE=)
3: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (hash: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:09:2b:db:fb:e6:31:27:d9:a5:e8:39:55:6b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Sep 10 11:01:42 2026 GMT
Not After : Sep 11 11:01:42 2026 GMT
Subject: CN=f87691be275972c2ee284c4b94371774b34b4889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:56:59:6c:b0:9c:3d:25:55:ed:30:68:5e:
57:01:5a:e7:12:2e:46:67:ff:7c:fe:bd:bd:a4:71:
6c:61:9a:ae:9f:df:1d:5d:7c:70:d0:57:df:07:68:
64:35:77:89:2f:6f:ce:4c:d8:02:d6:1b:d2:aa:bc:
20:18:3e:91:56:4b:c1:02:bd:44:f6:a8:5a:6d:8d:
fc:c3:e1:b1:68:da:3d:12:81:a2:32:37:26:8a:7a:
ba:56:a3:67:70:26:7c:af:75:5d:33:78:49:66:ee:
25:99:d4:57:bf:16:e5:f4:f5:ab:52:68:64:d7:35:
8e:85:19:7d:c8:12:ff:65:61:fc:2b:9f:43:68:85:
57:0c:d0:3b:ab:ef:27:d7:60:c4:4a:e8:c9:e5:97:
15:60:25:5b:e2:00:78:7c:e0:d0:e1:29:81:1a:fb:
2e:9c:50:fb:31:a6:3b:fa:a6:f0:69:ef:af:0f:bd:
4e:15:b2:98:1f:3c:62:25:47:02:4f:9b:bb:5d:de:
18:d9:2c:13:0a:6d:6f:41:bb:fc:6a:05:9e:7c:07:
c5:54:e9:19:85:53:2f:fc:dc:7e:8d:4d:f9:b2:b1:
15:c6:b8:9d:55:95:bd:9d:6e:14:eb:b3:86:03:f7:
b5:13:08:8d:50:7e:ec:aa:95:19:5e:5b:c1:65:6e:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:91:BE:27:59:72:C2:EE:28:4C:4B:94:37:17:74:B3:4B:48:89
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:53:df:38:81:3f:e9:83:71:37:20:4a:09:57:4a:99:89:
05:6c:a4:0b:60:83:aa:2f:94:39:46:c0:36:f0:84:00:d5:75:
de:14:e7:35:36:c4:86:63:ec:7a:2e:41:c8:6e:4a:12:88:4f:
f5:04:ed:83:17:05:f4:62:4e:a8:30:ab:ca:61:16:37:75:97:
7e:36:05:c0:fd:7e:05:3f:e8:17:69:b2:9b:b1:c4:54:7d:b1:
84:15:b3:5c:d6:a2:a7:de:ba:14:fc:7c:a5:23:45:9b:bd:bc:
74:f8:a2:8e:62:c2:52:d6:df:84:c7:eb:4d:74:fb:42:8c:f8:
74:1f:06:9e:ec:0c:bc:2c:1c:49:22:ad:bd:d3:c2:45:c0:7c:
f5:0d:fb:45:ac:cd:da:c1:52:d0:a1:99:ea:b3:db:cf:32:3a:
c5:02:2d:15:d3:4e:6b:01:4a:44:44:76:df:e1:49:8b:35:0e:
ee:61:a7:87:23:57:2c:5b:a2:6c:56:f9:75:56:3a:68:16:8d:
4b:27:e4:9c:96:71:05:42:d9:29:9e:08:4a:98:50:90:bc:9a:
88:bd:38:22:e6:9e:02:be:d7:29:9e:fb:cb:8d:39:7e:a6:45:
b8:3a:b8:62:95:71:8e:5a:37:0a:7e:03:e6:a0:5a:bb:b5:31:
32:ac:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:56 2026 by rpki-client