Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: xezWmAMGxBua8mSdjNiQYgHnLuJWl6f4Xbh3OFSFlK8=
Subject key identifier: 41:A9:A4:F1:A3:38:24:EA:6F:28:89:DD:7D:71:ED:9C:F6:74:FC:34
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019D371BBE86A00ADEB3B8D057C9DCB7D4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 01:00:58 +0000
Manifest this update: Sun 29 Mar 2026 01:00:58 +0000
Manifest next update: Mon 30 Mar 2026 01:00:58 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: YkR6FQq9ocAswwZsPJ9Zu4zIWOBijTUXAVA1UVZZMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:be:86:a0:0a:de:b3:b8:d0:57:c9:dc:b7:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Mar 29 01:00:58 2026 GMT
Not After : Mar 30 01:00:58 2026 GMT
Subject: CN=41a9a4f1a33824ea6f2889dd7d71ed9cf674fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:35:5c:46:31:fc:14:e4:fd:2e:fd:17:fb:
91:04:fb:4a:1b:7f:b1:d8:da:2e:cb:c5:55:0b:b0:
29:85:8b:e3:be:e8:1a:2b:29:2e:45:1c:01:64:92:
2b:e3:aa:72:dd:77:16:39:68:39:3d:3b:65:0e:2a:
68:b6:53:bd:3a:3a:8a:99:42:5e:88:f1:1d:c5:c8:
b3:a0:c5:b6:3b:43:26:68:cf:b6:37:97:45:20:76:
62:e3:d7:49:65:62:8f:cd:cb:aa:e2:5d:95:9e:39:
c9:9c:a1:6d:28:93:09:4c:8f:2c:b8:01:d7:0c:f4:
95:ed:0f:42:27:24:b1:52:fd:7c:19:b6:42:4c:35:
23:8b:fc:34:d7:33:31:ec:c3:8f:ff:7f:bc:19:52:
be:e4:73:11:d8:07:7c:ab:bf:17:dd:9c:e7:7a:99:
ca:0d:e7:a2:dd:b5:38:cd:fc:6d:db:f0:80:bd:75:
5a:15:e1:88:9f:a8:06:34:dd:d4:ea:72:1a:a1:50:
2a:bf:0f:cf:8f:d7:af:2d:09:13:d9:ae:9c:86:0b:
4c:aa:55:16:dc:a3:ef:5e:37:ea:8d:a7:97:06:dc:
53:13:e0:34:5b:aa:ce:70:6b:30:ad:c2:cf:cd:83:
19:31:ae:1a:e8:aa:6e:e4:f4:86:0d:2d:95:6a:66:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:A4:F1:A3:38:24:EA:6F:28:89:DD:7D:71:ED:9C:F6:74:FC:34
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:26:c3:0f:1b:90:00:ed:65:65:89:eb:af:e9:e4:95:9e:5f:
f7:8f:91:a2:94:5a:03:40:30:60:84:51:26:e8:18:78:2f:90:
37:39:91:21:0d:a6:a3:33:98:9e:f4:e5:14:9f:26:8c:77:e1:
ae:46:92:26:19:f0:34:3d:b3:6d:96:2b:4b:18:a2:01:31:bb:
b7:54:a7:77:13:8e:ac:5e:61:89:a7:fc:7c:68:c4:6b:5b:b1:
cf:b6:aa:db:95:d0:9c:99:03:09:a1:a9:a5:76:de:12:53:70:
ce:54:04:65:74:0a:3d:23:a3:54:47:9f:b7:1b:47:9a:0c:80:
a8:27:98:5f:6f:cb:be:bd:ea:e5:6d:af:86:8b:5a:a2:51:ac:
b0:73:1d:35:4f:d0:41:ca:0c:f6:d0:de:73:6a:aa:69:cd:c0:
4b:1d:a0:4c:c7:a6:70:9f:59:ec:05:41:b1:e5:48:fc:3a:e2:
7c:36:52:99:3d:b8:f9:a9:7a:2b:43:a0:e4:e7:c8:1d:cd:2e:
cb:2e:f9:13:23:23:6a:9f:68:25:e5:d6:c5:31:f6:fe:ed:4d:
a3:65:f7:33:99:b2:f8:ad:39:2f:93:68:78:13:cd:6a:f5:cf:
83:a0:28:14:d3:48:0b:9f:f5:81:82:c7:b4:9f:cd:3e:f6:04:
20:5d:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:52 2026 by rpki-client