Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: rtCoc1Is+C9aROS7jArNSUxAchaUam//L2RsFdr3SDA=
Subject key identifier: 1E:35:6B:48:12:DB:10:0C:C8:6F:61:E4:0D:4C:C0:FB:B8:6E:C8:C5
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 019D38D3887C2416CAC5A93F8E5E1D0884BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 074B
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: eIozndm6EeawvLKxPzYjeByPllz3MDqSmMVR2RfXl5M=)
2: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (hash: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:88:7c:24:16:ca:c5:a9:3f:8e:5e:1d:08:84:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=1e356b4812db100cc86f61e40d4cc0fbb86ec8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:67:bf:e5:5c:4f:97:22:b9:a2:76:ca:8c:
2a:71:40:5a:31:dd:76:55:e3:40:d5:32:59:40:52:
1a:28:a6:81:ff:bd:f8:b6:12:70:3f:3b:51:92:23:
34:36:bc:f3:30:ec:68:19:f9:fa:40:cf:7d:69:4b:
d5:3e:2b:03:cb:3d:39:21:94:fd:6e:d8:60:be:f2:
2f:18:d8:be:0f:bc:5e:ff:34:b5:7d:72:13:96:46:
4e:7b:0d:8c:1b:68:40:65:ae:33:57:b6:2e:9a:23:
e9:01:79:d8:b2:5b:b1:83:36:60:17:7f:04:7b:0e:
2f:7a:2f:40:79:c7:51:5b:6a:bd:8e:8c:1a:f4:eb:
43:6f:bc:eb:53:d6:d6:6f:60:fd:83:39:d1:71:17:
1a:3f:aa:f5:45:4f:97:18:9c:6e:9b:97:98:82:9a:
84:8d:d0:0e:b8:9b:07:0e:8c:53:62:df:3b:b3:67:
85:f9:5f:f3:95:55:b6:7f:c5:24:4c:95:2e:33:e7:
8b:7f:d2:fb:64:fb:de:dc:09:9e:e0:40:58:92:d5:
b7:da:65:5b:93:35:de:a1:dd:3d:2c:86:92:0d:87:
59:a9:05:42:0d:4a:95:9d:63:cd:af:50:04:f8:63:
41:aa:32:21:ff:c1:71:92:6f:43:d0:72:f3:4e:53:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:6B:48:12:DB:10:0C:C8:6F:61:E4:0D:4C:C0:FB:B8:6E:C8:C5
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:4e:19:d2:91:85:98:63:1e:92:7e:59:ad:02:a1:23:8b:
5e:1b:22:ae:64:85:20:38:48:70:a5:c2:26:b6:a4:72:ed:47:
8b:8b:b5:32:14:84:7a:53:f1:0f:d4:d8:8b:0a:49:fa:fa:b3:
80:30:3c:c1:d7:ae:01:11:01:71:b9:cf:52:f8:9b:91:85:8b:
99:c7:c1:83:43:eb:fa:0e:b0:5d:e3:0c:f4:e3:3e:bf:4b:92:
ef:68:6e:e3:8a:5b:f3:79:16:97:fb:20:1b:1a:5d:5b:26:20:
c7:22:0c:d2:a3:43:d8:77:ff:e4:48:b0:22:72:1b:82:90:53:
fd:28:6f:ac:90:06:b2:b3:8c:06:0c:f0:0a:51:7c:ec:db:70:
f6:99:b7:ca:20:46:16:71:43:71:6e:ab:c7:ba:49:68:ea:35:
29:9b:39:3e:77:48:41:7f:7e:5f:7e:1e:b7:17:bc:b2:fa:b3:
be:01:39:b0:74:3a:be:31:f6:b5:fb:e7:dc:1f:fa:6c:4c:3a:
27:47:b6:73:44:00:d7:46:ea:c8:11:5c:bf:15:5d:f1:eb:3f:
e9:f4:b7:b4:b8:1c:be:08:7f:1f:33:ec:eb:a0:d5:b0:89:f1:
0d:b1:e4:b9:19:29:c8:93:29:89:1b:25:fc:48:cb:1a:91:ba:
9b:9d:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:43 2026 by rpki-client