Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: r93zM7AqNgFaiA/Mm1l2eETSR0Rr5EHt5zyBePGETmA=
Subject key identifier: E5:04:A0:54:C2:EC:74:7B:5C:C7:B8:75:C4:69:3E:6A:D0:0E:34:F7
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 019D390A5E3EC59BBC450E115F35EED03AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0AF6
Signing time: Sun 29 Mar 2026 10:01:13 +0000
Manifest this update: Sun 29 Mar 2026 10:01:13 +0000
Manifest next update: Mon 30 Mar 2026 10:01:13 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: IMSAHLdeTo0VtpmQvRHti2j4SMipVYFC5tttKoQQ9EI=)
2: ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa (hash: CCPYX7azV0XU3mTS7uui9xIKAvE3rZogRNVuJDuaOG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5e:3e:c5:9b:bc:45:0e:11:5f:35:ee:d0:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Mar 29 10:01:13 2026 GMT
Not After : Mar 30 10:01:13 2026 GMT
Subject: CN=e504a054c2ec747b5cc7b875c4693e6ad00e34f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:2d:24:4b:47:e9:4f:64:77:43:8c:5c:55:
5b:fe:ca:d5:65:03:2d:ff:14:52:1d:46:98:1e:97:
13:23:2a:39:88:79:d9:af:10:6d:f3:55:7f:3c:48:
a2:be:38:59:92:43:9f:1f:33:ab:9a:97:af:88:ec:
72:15:f0:06:ca:01:78:cd:62:1f:4f:1b:ef:71:26:
14:55:f3:ac:71:ac:df:8e:42:9d:20:bd:ac:32:10:
89:13:5d:ae:17:ec:96:03:34:4e:37:9e:a6:1b:9c:
47:ca:d8:bc:99:88:9b:14:17:54:2f:10:96:c1:41:
ed:52:d2:05:4f:c3:76:eb:dc:39:23:10:8c:cd:08:
85:fc:c7:88:ef:7d:da:97:dd:8f:fe:3b:c9:c7:6e:
a3:94:e3:a1:9f:1d:8b:d5:24:ba:cf:de:a2:92:5c:
33:6b:6e:d1:96:be:24:fe:21:ea:4a:67:b4:d9:0a:
bb:4b:56:ad:60:4a:2c:70:57:dd:17:8c:91:5b:59:
95:c4:6e:99:92:b2:04:7b:94:e9:79:55:b1:d9:b9:
9b:0b:db:59:51:6b:c3:9d:c0:bd:09:e8:72:59:ab:
fe:11:c7:b7:80:2b:99:38:fb:62:bb:ec:79:fb:ba:
db:3e:b5:81:17:52:56:ae:9c:64:37:be:65:61:3f:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:A0:54:C2:EC:74:7B:5C:C7:B8:75:C4:69:3E:6A:D0:0E:34:F7
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:34:64:cb:ee:c6:d7:6a:8f:17:44:ab:5c:08:75:fb:f0:
c7:93:f9:49:28:da:00:d6:e3:c1:da:0c:39:60:4c:b6:d8:80:
bd:32:48:89:3a:ba:a7:50:6f:8a:0c:6f:16:aa:73:1f:43:b8:
3e:82:14:39:9e:6e:0c:2d:97:fd:b4:44:c8:93:eb:7f:b6:6e:
9f:68:10:2f:a2:a5:9d:83:a8:35:8a:43:1d:18:7e:72:90:eb:
d1:f7:78:38:94:67:14:97:61:06:bc:41:2a:12:af:19:a2:59:
5f:1b:2e:25:92:55:35:bd:1a:d3:5b:07:38:c0:3b:ac:52:cd:
bd:c3:83:83:e7:a2:98:24:cd:9e:e5:ba:41:68:18:3b:16:02:
33:d5:0e:b0:89:c2:b8:da:72:c6:04:e5:be:bd:1e:05:a9:a6:
2e:4e:73:89:e8:4a:a2:ca:05:aa:ae:1b:11:46:84:32:29:59:
78:a4:62:74:9d:6f:81:05:ff:b7:90:d5:f2:4b:f5:67:9f:84:
cb:94:33:da:a4:4e:08:26:df:58:e8:1a:cf:76:6c:a1:e4:8e:
35:9e:9d:b2:7c:38:0c:be:8b:59:21:fd:05:45:38:37:cf:59:
06:58:7a:4c:e3:43:29:7b:7f:3a:4e:fa:db:d8:6f:30:fd:cd:
ca:e1:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:28 2026 by rpki-client