Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: v71ssMnJhxFr7fFyQFAcuYMTktNUQOKL1B+o+MZD9vc=
Subject key identifier: 91:B2:8E:2A:36:61:C5:C5:10:25:FF:8B:D9:63:29:D0:62:5B:C2:E4
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 01A088D500CB0DAB1A567A9AC3EE67F1CA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 03B2
Signing time: Thu 10 Sep 2026 01:00:55 +0000
Manifest this update: Thu 10 Sep 2026 01:00:55 +0000
Manifest next update: Fri 11 Sep 2026 01:00:55 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: NSDKXvvAVDrmyf6Mq9YY+JYtXBOVjCaOrwPOaf4H/A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:00:cb:0d:ab:1a:56:7a:9a:c3:ee:67:f1:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Sep 10 01:00:55 2026 GMT
Not After : Sep 11 01:00:55 2026 GMT
Subject: CN=91b28e2a3661c5c51025ff8bd96329d0625bc2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:27:55:b4:e4:c6:b6:9a:0f:33:87:62:8f:
34:9c:19:b0:c5:be:47:d1:89:34:56:2a:0e:f8:26:
78:0a:da:7a:37:3a:20:64:49:b3:6b:d4:85:e3:ca:
13:12:36:42:22:fd:66:b0:f7:c0:60:a5:29:82:69:
81:81:97:36:5d:6b:f9:16:09:4b:41:2b:46:fc:21:
c7:e4:ba:68:13:3a:e0:c2:7b:a6:36:d4:f3:14:0a:
e2:2b:2a:13:5f:06:96:61:d0:7c:3a:3a:f7:c9:db:
81:6a:b5:ad:b2:cc:44:07:39:93:bf:8d:b6:b3:8c:
d9:98:de:58:e5:30:1d:10:7b:a1:82:83:e3:95:62:
97:4f:7f:5c:a8:fb:d4:6f:7b:ea:60:a8:f7:0e:be:
f4:fe:a9:95:49:58:60:eb:d1:0d:37:04:ed:45:66:
27:64:5c:69:bc:18:f9:c0:86:66:40:c8:25:63:98:
5f:75:71:78:4c:da:81:3c:3f:a3:b7:cd:07:5e:c9:
c0:c5:2d:94:b3:25:ca:91:62:0f:f8:fc:f1:3d:5d:
4d:3b:c3:37:93:44:51:0f:57:aa:e7:b7:41:be:01:
52:6e:d2:13:e9:6d:4e:43:89:88:bd:65:b9:7d:24:
48:bc:03:9d:a8:69:42:b5:e4:0c:cc:eb:45:c3:b7:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:8E:2A:36:61:C5:C5:10:25:FF:8B:D9:63:29:D0:62:5B:C2:E4
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:ab:38:54:21:ab:7b:63:5b:bc:b1:ec:19:8f:a6:1e:9f:
3c:7e:d9:51:9f:67:22:df:6d:f2:f1:9e:1f:eb:94:3a:97:c8:
83:3a:b3:1d:79:a9:42:be:a7:ee:90:d4:bf:88:dd:9d:0b:31:
4f:76:88:08:3b:63:75:8b:b2:e5:80:9f:9e:b5:66:94:71:d3:
08:2d:4a:b0:54:c3:08:5b:e2:f8:d1:1a:94:7b:46:64:2c:73:
55:89:67:87:6f:e9:c1:62:73:95:eb:20:93:3f:7a:bc:4c:ec:
3e:67:91:9a:9e:a6:f2:a1:d4:8c:76:24:42:47:01:50:39:fa:
1b:ab:7c:dc:ba:69:a4:c1:88:5c:7b:79:9e:88:e3:55:93:5c:
b4:e7:a8:ac:d0:6f:cf:d8:23:62:35:94:00:b7:18:2f:21:89:
7c:57:98:b6:65:5e:2d:70:4c:d1:90:48:a0:08:54:3c:9a:5e:
52:03:fe:ad:5e:04:fe:5e:ee:0a:2e:1b:6b:51:ac:b4:d2:1f:
e3:9f:a1:93:ba:e7:b8:18:b1:bc:fc:95:65:d2:d3:e2:66:f7:
2e:a3:bb:02:e9:99:af:8f:43:a5:9f:48:73:5e:c8:13:a9:9a:
12:b3:35:c4:e4:21:ca:ab:a8:08:51:bb:fe:7b:2d:bd:a7:7b:
a8:29:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:15 2026 by rpki-client