Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: 8hqoMco7sfXUA01lrH7mFWPYybQiIZJyGjhViq4h2pw=
Subject key identifier: 3E:5D:72:FE:C4:E2:C2:84:CD:AC:12:E2:44:A4:04:63:DC:2D:85:B8
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 019D394128689CB8275868335BC2EAC95AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 11:01:04 +0000
Manifest this update: Sun 29 Mar 2026 11:01:04 +0000
Manifest next update: Mon 30 Mar 2026 11:01:04 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: 7sXCeWv8xcGQBBuDiTbfz8zK1GLgSa6zfaVDF1382uc=)
2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:28:68:9c:b8:27:58:68:33:5b:c2:ea:c9:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Mar 29 11:01:04 2026 GMT
Not After : Mar 30 11:01:04 2026 GMT
Subject: CN=3e5d72fec4e2c284cdac12e244a40463dc2d85b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:dc:ad:fb:31:da:2c:7b:9a:51:ec:89:5e:
e2:0c:10:9e:64:0b:e5:3f:8c:de:06:4a:20:f5:df:
f2:d0:bd:77:3e:60:06:fe:a5:70:e0:91:ec:a8:6f:
6c:f7:6a:f8:32:f5:ac:6a:4c:51:67:2f:31:c3:18:
3f:df:23:01:ff:f1:0b:10:53:cb:2d:6f:14:c4:ae:
71:8c:77:df:ad:72:70:69:9b:3e:85:f2:b4:1d:eb:
23:ba:52:b0:37:99:8b:8b:c4:f8:22:67:c2:67:95:
77:51:d7:9f:96:7b:d8:99:9b:e8:e1:66:2f:15:af:
f0:4c:ab:a5:20:c9:65:7b:44:94:ce:71:8e:13:77:
99:6e:6e:95:5e:22:99:90:9f:c8:61:b3:96:ee:bb:
eb:49:95:01:ca:7d:e8:9c:6d:3c:c9:f4:ce:59:35:
66:82:ce:c0:b3:9f:eb:ed:b8:db:eb:64:f9:d3:0d:
50:21:ab:70:d5:e0:d6:dd:28:62:38:65:c5:18:46:
29:a5:8b:cf:70:ee:91:12:77:a4:ef:ed:6e:5b:4e:
c0:35:8b:f5:3f:d7:ba:c2:06:6a:49:78:77:37:bc:
2d:00:04:11:f4:45:9a:31:1b:af:64:db:15:fa:65:
23:b1:3b:59:76:6f:78:31:8d:e3:73:05:25:07:b7:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:72:FE:C4:E2:C2:84:CD:AC:12:E2:44:A4:04:63:DC:2D:85:B8
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5a:f7:1c:f6:45:40:93:55:9b:cb:5b:47:db:5e:bc:d3:d9:
7e:b6:cb:13:b6:be:25:ba:de:4a:dd:9d:ba:51:e0:1e:00:f3:
5a:45:07:55:31:af:15:5a:31:f7:47:61:d8:2a:69:04:2a:eb:
f7:2d:f6:6b:03:e4:88:e4:60:03:d9:09:00:f7:79:a6:2c:ae:
77:77:7f:61:83:0c:72:05:81:92:65:a5:cd:9a:65:30:83:c7:
1d:de:a4:eb:04:d0:85:8b:ca:08:ae:a7:e7:49:29:0f:e0:b5:
96:ca:a3:49:9b:d0:25:e0:eb:25:3b:e0:b8:3f:ef:e7:d8:76:
1b:d3:9b:4e:5d:d7:94:43:b5:ad:dd:6b:e9:3e:21:c7:db:14:
2f:e7:d0:e1:8a:bd:53:25:ff:23:7e:83:d1:c8:bf:d8:0c:79:
a8:e2:30:33:cb:08:b0:f7:da:56:aa:bb:33:03:92:16:39:15:
be:3f:f3:73:6a:60:ad:a9:77:3a:e8:89:4b:fa:fb:22:32:2c:
83:d2:9e:5a:56:58:af:67:fa:bd:ae:5b:67:4f:c0:3b:5c:d6:
ef:2f:ff:f3:1e:bb:f5:de:72:9f:e0:09:d3:e1:61:5b:a9:45:
3e:96:12:4c:d6:ed:ec:fa:c8:34:8b:f5:3c:b8:83:7f:5c:86:
ac:9d:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:58 2026 by rpki-client