Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: dk7JREAHF8QHd+Kzd8rinhc6eCq1xgppU5Utw822f4g=
Subject key identifier: 15:65:F4:5B:9A:85:42:C0:DA:41:B0:E2:F7:C3:7B:25:D5:61:CB:A0
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 019F8644CA40F6332D40CC065A38976C6B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 1952
Signing time: Tue 21 Jul 2026 20:01:22 +0000
Manifest this update: Tue 21 Jul 2026 20:01:22 +0000
Manifest next update: Wed 22 Jul 2026 20:01:22 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: fTnULX9qF0gD8skQId8Nvp1kB6M5ipYhux32ahEvKZ0=)
2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:ca:40:f6:33:2d:40:cc:06:5a:38:97:6c:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Jul 21 20:01:22 2026 GMT
Not After : Jul 22 20:01:22 2026 GMT
Subject: CN=1565f45b9a8542c0da41b0e2f7c37b25d561cba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:3c:8b:bd:94:c4:58:99:51:0a:5f:a6:60:
62:2a:bb:00:7b:7f:e0:84:13:db:c3:81:0b:1e:0c:
fe:37:8f:e1:bb:2d:4f:b0:9c:ad:1b:1d:48:ba:75:
b1:24:ae:25:a3:2f:f0:54:2e:74:01:02:3f:d9:98:
2e:16:0e:53:e5:99:41:77:d2:be:71:bb:a7:49:1a:
ca:c9:39:58:e9:1c:8b:d9:9b:bb:26:bf:99:8e:4d:
49:8d:4f:b9:47:15:fe:3a:99:11:14:ff:40:2e:91:
1d:40:7f:45:b8:f9:72:04:5c:5a:5a:60:c7:80:46:
1d:03:98:f5:b5:b3:44:49:d3:38:2a:a3:87:bb:9f:
eb:17:68:8f:fb:43:d6:e5:1b:ac:13:ce:9c:7f:db:
e6:79:28:8b:cb:b7:fe:2d:da:aa:40:5f:2f:2d:6c:
9d:8c:43:f7:96:40:71:90:49:9f:8b:72:5d:13:76:
6e:81:35:3e:6e:a8:12:8c:22:c0:48:43:54:74:41:
c5:91:84:ac:db:7b:b3:0d:d1:51:3f:bc:ee:cc:3e:
b0:ea:be:7c:eb:fa:b5:c1:6e:ad:7b:80:f0:0d:43:
46:a4:39:db:ec:44:0b:21:78:40:38:30:8d:f6:24:
77:d4:c3:fc:7e:1b:fa:61:1a:b1:5c:04:9b:f6:3e:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:F4:5B:9A:85:42:C0:DA:41:B0:E2:F7:C3:7B:25:D5:61:CB:A0
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:eb:a2:9e:ba:8a:0b:71:2c:9e:64:d5:a7:40:c4:6b:c4:
26:b5:ab:4e:5e:ae:80:50:69:78:51:79:e6:70:33:f6:27:5e:
30:96:4c:3d:79:af:8d:d6:5b:fa:7a:e6:28:1d:03:ab:76:b8:
b0:1e:2d:e0:29:5f:6c:ab:c1:9c:ce:e9:f1:dc:19:21:ba:21:
f7:38:af:65:ad:45:21:b3:54:06:ba:cc:a3:f5:39:62:34:01:
ab:51:0e:94:29:28:71:85:80:b4:bd:9e:25:f3:f2:97:74:48:
d6:3d:89:5c:36:92:3d:b4:a5:ef:ad:cf:e1:3d:3c:25:08:5a:
2d:e0:d3:f9:b1:b1:0c:73:be:6b:29:a1:55:b5:f7:29:c8:05:
8f:f3:32:c2:23:91:7a:e6:ae:4f:43:c1:8e:96:9f:57:22:14:
95:cd:6f:43:0a:7b:1d:a2:dc:0c:aa:1c:ca:f5:51:98:a5:79:
08:b9:af:f4:e4:90:09:45:67:4c:31:ce:0f:0e:bf:9f:1b:24:
71:8d:77:bf:52:fa:7c:30:ce:04:60:00:08:8c:fd:61:58:56:
29:8d:c4:42:1b:8a:ea:b9:e5:e0:4a:82:b3:2b:a5:bb:48:d5:
60:e0:e2:0a:87:a1:08:3a:ba:90:e2:a8:96:d5:0a:45:32:27:
46:f4:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:35:02 2026 by rpki-client