Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier: fgCtL/4zS9/87483AMSH2TrhkC++fJRuZE+feiyz6dE=
Subject key identifier: 21:66:32:E9:28:49:D3:0F:CE:C7:27:DD:46:30:55:38:40:E0:26:97
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial: 019D382E7B3F5C7DBF65E5CCAC25B8F886D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number: 0F9F
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: OcT81VMDTVS/1E5lgazwiHcpaWoNSZLaPHVjn69TIBQ=)
2: TtRKH9knUsTtGw8i9ETNhV45f1A.roa (hash: /FXsS0uTBoFuVqv1ofXkL6jk4IQYFBWtqa9QOl+TE6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7b:3f:5c:7d:bf:65:e5:cc:ac:25:b8:f8:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=216632e92849d30fcec727dd4630553840e02697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:fb:24:c1:0a:a9:61:8f:bf:85:09:45:e3:
ae:70:40:a8:32:22:ae:20:3f:c8:8c:36:8e:99:c3:
b9:0c:aa:c8:d2:48:a5:6e:8a:09:a6:15:e3:3f:f3:
ac:6f:97:59:19:18:15:13:0a:b9:4a:bd:62:de:f7:
87:38:6c:a1:97:bf:c7:a4:7a:b9:11:05:82:77:53:
1a:69:f4:b2:4e:cf:4e:29:83:3d:9e:92:7e:78:31:
76:8c:dd:e0:0a:bc:51:6b:ec:ee:f2:b1:a8:44:ff:
d9:e4:86:8c:bd:dd:e2:20:cb:a9:aa:78:2b:30:04:
93:4d:25:51:aa:90:da:65:59:05:a9:31:4d:75:50:
7f:76:87:c2:83:00:97:1f:ee:5d:0e:bb:20:d2:32:
f5:d7:e5:b9:14:2f:8d:ed:58:81:ed:b3:00:e2:55:
54:d6:e9:38:4b:14:8e:f5:6c:74:bc:e7:a4:7d:e0:
84:d1:8b:1b:f6:c6:11:ce:60:92:8e:f5:f0:f7:d5:
15:e2:46:93:f6:7f:cd:de:bd:be:da:9b:b3:9f:6e:
e1:98:58:e1:ce:b8:16:34:3a:ef:94:15:3c:41:ff:
31:e5:16:87:ad:f9:de:80:80:30:f2:15:cb:52:97:
b7:e2:2d:c8:8c:ae:d3:a3:f3:fc:6c:5d:28:91:cf:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:32:E9:28:49:D3:0F:CE:C7:27:DD:46:30:55:38:40:E0:26:97
X509v3 Authority Key Identifier:
keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:0c:7d:50:a0:50:f6:ef:10:b3:1d:66:7f:cc:81:d3:86:
38:69:06:82:a7:5c:0a:c1:e1:88:c0:52:f4:17:b4:6c:b1:4e:
ce:e3:36:60:b0:82:dc:82:6a:f8:51:e0:c9:69:d6:92:a5:20:
de:d3:cd:69:ba:14:bd:96:4b:92:e9:e9:33:6e:20:93:eb:bc:
88:ef:b1:d1:84:08:be:0e:59:19:c7:32:7d:50:ca:bd:9d:98:
0c:c1:f5:98:c2:56:99:99:8a:19:9a:73:ef:14:22:d4:64:96:
85:84:71:d8:27:08:98:fa:a4:95:f1:33:89:8d:c2:f7:d4:7b:
8d:ce:e0:da:0f:da:7f:29:03:21:4a:24:61:b8:aa:8c:c5:e6:
e2:0a:04:42:76:2a:7f:75:a9:f1:99:83:52:77:6a:b1:59:15:
83:c6:b5:05:c4:e8:27:97:d0:c9:ce:3b:fb:3c:95:6b:07:06:
a5:f4:28:81:48:25:6a:64:c4:ae:d6:f1:5b:b2:7b:f7:57:be:
8a:e6:9e:07:bf:a8:dd:6a:4f:af:4c:d7:ed:96:9d:b9:59:0c:
dc:e5:e5:40:5c:52:2c:ee:03:4d:1f:a2:ca:ab:aa:22:2b:71:
df:ac:de:4e:2a:b2:3c:e3:4b:95:1d:de:de:1b:3f:7e:6f:76:
12:c1:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:22 2026 by rpki-client