Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: NP+ZI9MrMc+FO90lSFtsS7Ch3rBoEnXe3drEbQqInDk=
Subject key identifier: 1C:87:76:66:15:AF:ED:EB:86:52:FA:B2:8C:70:37:BA:88:B0:F6:74
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 019D38D31807290F0032E69A7B54A40DC7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0D1D
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: 2ZzmrAOD2TT8XUAdfYULtaNND9tTBvAsKL67En9o8yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:18:07:29:0f:00:32:e6:9a:7b:54:a4:0d:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=1c87766615afedeb8652fab28c7037ba88b0f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:35:82:50:b0:66:39:8e:30:2a:6e:43:23:
06:ae:e5:33:0f:34:27:d7:45:2c:fd:75:7d:0f:65:
a8:3e:84:ed:53:e8:5e:92:ca:0e:5c:71:5f:3f:df:
be:69:76:36:ac:a6:2d:d4:a6:4e:ac:a0:21:6d:7e:
24:60:42:09:b8:ec:e3:7e:9f:1a:1c:21:f9:37:fb:
68:58:0e:71:fb:74:4c:c2:8b:43:10:5b:7b:26:2a:
0c:e9:2b:c3:6d:99:7d:b1:b3:bb:91:ac:03:37:7a:
25:59:9b:15:34:61:af:f4:41:f5:e8:4f:84:c8:5c:
62:10:aa:15:f4:95:89:ec:c0:2e:a1:7c:2d:06:11:
04:25:84:47:32:a9:78:69:4e:50:1e:15:b7:2c:4c:
41:32:4a:15:05:6f:c7:7c:71:bb:b0:8a:ba:9f:dc:
d8:63:82:80:2f:09:91:ee:d2:b3:8c:b3:00:e5:39:
f0:72:7c:6f:42:6c:4d:b4:0c:0e:ea:4f:7b:cc:cf:
1f:e0:0e:0b:e4:39:28:10:55:b6:c8:35:a0:59:30:
fa:65:89:0b:43:81:85:ed:a0:e8:66:1a:2e:b1:25:
cf:96:33:5a:c2:a8:6b:c8:23:ab:6f:8a:ce:43:14:
42:e5:f8:da:ba:50:89:60:0f:56:00:0a:b7:a9:05:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:76:66:15:AF:ED:EB:86:52:FA:B2:8C:70:37:BA:88:B0:F6:74
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c1:9a:a4:4b:45:3f:82:cb:ca:b6:9c:7d:84:82:90:ff:86:
0a:98:60:2f:ba:d6:d4:bd:d3:b6:fc:e1:89:fa:39:48:35:c4:
ed:4d:0a:d9:1b:6d:fa:73:79:ee:e3:0e:6f:66:c3:b2:39:e2:
4a:5b:49:60:ac:e0:5e:aa:3a:1a:58:9a:ce:cb:85:ea:a3:42:
de:d5:86:dd:25:34:57:8b:6b:a1:46:29:69:31:4f:6d:76:ba:
4e:80:5a:f4:8f:7c:46:96:26:cb:95:fa:73:93:5f:dd:19:9d:
85:25:e3:79:2d:f6:9d:f2:2b:b9:66:4c:86:94:66:a8:9a:a1:
61:f1:5d:26:a5:f4:d7:27:9a:ab:c8:c8:27:f3:f9:c9:f3:28:
b0:2c:a2:03:51:18:27:dd:f6:6a:39:04:00:6c:84:66:b2:7e:
36:06:0b:be:3f:f0:ad:e6:22:87:53:1e:18:90:1b:09:59:96:
09:b8:e6:46:3f:c3:59:de:03:bf:eb:35:7b:42:9b:6a:42:81:
ad:ee:16:71:41:aa:eb:c1:73:c1:47:c8:e9:c0:18:46:b5:92:
b3:5c:22:04:77:aa:16:55:ea:51:7f:48:7f:41:28:00:11:95:
84:2a:36:e0:e6:a1:ee:9d:e6:85:90:51:94:80:d8:bb:c7:75:
fd:fb:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:32 2026 by rpki-client