Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: ELPIixCmshtjLw/V3X6IhP6t+UyI5qykVFhbz/L9rDs=
Subject key identifier: 38:55:56:CF:51:B6:9D:09:CB:F3:99:57:2E:9F:B7:56:AC:EB:05:5C
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 019D37C0602B892F8CD594FA28E5B657B2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 07E7
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: o87FO/6sTLxUokLlONB3AIAX6bcbCP5MnvKM5VAZNNg=)
2: SbtU24bKXJzT0r_Edu3hABMBFRg.roa (hash: uhs0gjYBAZV/9eh8e1DZS32viLByYHa3Altj0TI5SN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:60:2b:89:2f:8c:d5:94:fa:28:e5:b6:57:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=385556cf51b69d09cbf399572e9fb756aceb055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:e8:9f:02:b5:3e:93:d8:67:8e:a9:16:53:
36:5e:b7:9d:ff:2c:da:23:88:c9:55:5c:ee:59:02:
c0:2e:d7:85:d8:98:e8:cf:cd:7d:81:54:f3:53:50:
63:72:82:0c:46:f0:b6:b2:af:3e:13:bc:30:b9:7f:
13:66:bc:3d:9e:97:47:1d:4d:63:de:4d:4e:9e:22:
6e:15:96:e4:1a:f5:09:d4:8d:1d:79:4b:e4:29:aa:
fb:b9:6b:8c:5e:37:e5:46:f4:dc:03:8b:24:da:67:
b2:bf:97:36:62:ed:14:94:84:20:2a:3f:2f:71:cb:
2d:aa:3a:5f:8b:ba:a1:a1:50:b1:2d:c0:59:48:da:
76:d0:ec:32:93:72:b0:19:f1:fb:d5:e8:ff:d2:e5:
1e:6c:37:0c:bb:ac:b5:54:74:cb:d9:ba:a1:ea:7e:
b7:c9:87:c1:33:eb:5d:93:3e:dd:1e:e9:4c:7c:bd:
81:69:7b:15:28:a7:c0:95:12:65:0c:c7:ea:78:6c:
d4:f1:8f:9d:c8:da:fd:07:cc:81:d1:cb:62:17:df:
2a:ac:47:40:80:84:e6:a3:c9:b0:33:15:06:5a:64:
35:88:e1:81:d3:b2:bf:82:ff:b4:60:8d:5e:e1:bc:
a8:99:75:1e:60:d2:f5:58:10:f5:4b:5a:a4:4b:ad:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:56:CF:51:B6:9D:09:CB:F3:99:57:2E:9F:B7:56:AC:EB:05:5C
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:93:2e:c4:4a:4c:1a:83:f7:a8:a2:49:b6:46:98:ab:07:
60:42:ec:02:58:8a:cd:6a:99:37:8f:6a:f4:11:5e:97:90:2d:
09:45:23:90:de:f0:a0:6f:4a:6b:dd:cc:b2:d0:ce:37:02:74:
37:68:f8:48:22:af:c5:94:e4:39:ff:f8:a0:b3:6d:24:94:76:
25:ea:e5:a6:f6:ad:d0:f9:b7:cf:06:de:82:bf:c1:95:39:e5:
72:c7:a8:c8:34:b0:8b:d4:d8:c5:d9:17:0c:48:27:63:4f:e8:
43:7d:86:26:04:7e:35:ca:3e:77:d5:88:67:96:a8:46:e2:e6:
6d:a8:44:fa:d3:fc:90:50:73:12:ef:5a:82:a9:31:4b:0f:43:
e7:3f:e9:6d:8a:22:a4:44:bc:1a:bb:34:99:bd:b7:03:1a:19:
3a:f0:8c:fc:c9:e8:5b:be:8b:fe:ea:15:19:db:cc:1b:c0:b6:
db:0c:89:49:32:59:42:f4:33:15:b5:89:b6:35:fb:7e:f0:c9:
df:8a:94:76:54:52:05:10:03:c2:11:0c:1b:13:a0:d1:c0:c6:
40:d9:07:7a:ba:e5:7d:3c:80:ad:77:0f:20:43:93:fb:c6:d2:
ca:dd:67:27:d1:09:11:25:8f:57:c3:62:ab:fc:84:f2:45:96:
f7:7a:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client