Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: /8V7lLVv9LReT3NoG+RT8pbwCSYgZxKoJ3DNod2ORJ0=
Subject key identifier: FB:48:AF:10:EE:A5:CF:45:97:1F:C4:78:2D:CC:F9:06:3E:0F:DB:7E
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019CC52B47FA90E01E468202CAE7F15E0063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 01BF
Signing time: Fri 06 Mar 2026 22:01:13 +0000
Manifest this update: Fri 06 Mar 2026 22:01:13 +0000
Manifest next update: Sat 07 Mar 2026 22:01:13 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: lw444IH+CFOqEvB8JAEU1X+wXvzMu6e5nO0QfSkoYE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:2b:47:fa:90:e0:1e:46:82:02:ca:e7:f1:5e:00:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Mar 6 22:01:13 2026 GMT
Not After : Mar 7 22:01:13 2026 GMT
Subject: CN=fb48af10eea5cf45971fc4782dccf9063e0fdb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:70:15:d8:57:e5:9d:4e:d4:9a:30:ea:0a:
2c:4a:16:69:75:26:65:00:23:07:06:13:69:1f:b1:
c8:c7:e0:67:07:8b:1d:4f:4e:86:ff:f3:b6:58:5e:
75:a2:f3:4f:15:54:33:8e:85:a2:c3:a9:4d:14:6d:
4a:55:a6:fe:f5:74:81:bb:b9:2b:10:44:b7:31:d8:
65:40:27:f3:9b:35:a3:fb:d1:d5:af:f2:42:76:bc:
98:40:6f:99:6c:25:ed:25:95:ce:62:a5:f0:88:c8:
33:e0:b0:04:7f:c4:8a:c5:cc:07:4f:15:4c:d3:5d:
f0:79:4a:e2:00:10:36:6f:39:c9:fc:cd:67:07:15:
90:a6:19:40:99:bf:48:ce:65:ac:0a:ca:98:4d:5c:
5a:ca:e1:a2:61:c3:69:1f:bc:4f:2a:d2:17:fe:ed:
f0:25:00:bc:91:e9:5f:88:5b:a1:88:fb:29:55:f3:
a8:df:08:f9:af:12:a4:d3:a5:1c:d6:61:a1:b5:90:
e1:19:27:13:25:46:a3:87:55:6f:8a:b7:2b:fb:f8:
24:86:81:a0:af:23:5e:b6:89:09:77:ef:1d:f2:bf:
16:8c:aa:a6:02:c0:cd:f1:5f:93:9d:5a:c1:f0:3d:
98:01:e9:83:c0:2b:49:d9:47:9b:67:47:a9:41:52:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:AF:10:EE:A5:CF:45:97:1F:C4:78:2D:CC:F9:06:3E:0F:DB:7E
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:be:cc:d0:3c:af:ba:f4:ee:1e:f0:54:8c:67:4a:c0:9f:
ba:82:a0:39:f9:8c:b3:c0:ac:bf:dc:15:1b:be:4e:a9:ca:83:
3f:99:27:3a:3d:86:82:3a:e0:39:15:9a:a7:56:ac:8f:df:0b:
a7:a4:a7:75:b9:56:10:47:a2:b1:c3:28:bf:b2:78:53:0c:4b:
0e:d1:99:24:ae:7f:30:85:9b:cf:4b:ff:5d:89:c9:b1:7e:61:
1c:3f:66:1a:e2:e5:94:d2:bb:a8:b6:83:90:d6:7b:08:c6:9b:
8c:08:bf:82:18:ca:bc:1c:30:e8:91:a3:d6:b2:eb:fa:61:fa:
81:2b:a4:5f:46:9e:00:19:5f:43:e9:d8:59:e3:fc:b7:d9:97:
32:81:46:3b:78:fb:52:d5:fd:eb:b1:0e:c2:82:85:41:bc:46:
b2:3e:6a:39:1f:3b:ed:f6:42:5d:39:42:68:3b:29:fc:cd:a9:
57:7f:66:28:a0:9e:bd:df:a4:27:18:a9:b9:f6:f8:79:4f:7d:
a8:a0:53:0a:70:d6:92:2a:9e:ae:e2:5a:ee:20:28:d6:e3:fd:
27:27:1b:3c:b1:78:e0:08:e7:7e:ef:91:44:8a:06:53:1c:79:
24:fe:90:ea:6c:ff:fe:03:e8:53:18:85:5f:63:a4:0e:ee:b7:
13:55:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 07:00:52 2026 by rpki-client