Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: /YK/R1o/G78p6vx3mPnUHPpuDVG4CZLSUQJERReRC84=
Subject key identifier: 4B:F0:E3:12:98:33:B0:01:8A:3B:6D:D9:1F:3C:56:13:40:2E:80:EC
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019DB0C5CAFDDE936EDC52158B7117040CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 0239
Signing time: Tue 21 Apr 2026 16:00:45 +0000
Manifest this update: Tue 21 Apr 2026 16:00:45 +0000
Manifest next update: Wed 22 Apr 2026 16:00:45 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: 9irT4NTVgoxhFbFUtazYKM3jQG/09z7TO/2DaiWAZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c5:ca:fd:de:93:6e:dc:52:15:8b:71:17:04:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Apr 21 16:00:45 2026 GMT
Not After : Apr 22 16:00:45 2026 GMT
Subject: CN=4bf0e3129833b0018a3b6dd91f3c5613402e80ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:e3:be:d3:cd:a0:09:24:a0:6c:75:01:88:
19:b5:fb:d2:21:5a:c7:9f:ba:e3:15:3f:42:1c:f0:
05:ad:10:de:8a:6e:fe:ae:62:10:0e:3e:1a:45:a2:
27:b7:86:81:07:73:34:8e:0f:00:cc:ff:98:06:55:
c7:1b:08:2e:14:de:4a:46:e9:26:aa:77:7e:66:7f:
2a:d2:a1:cb:50:36:60:89:cf:c4:ef:c7:7a:05:c7:
4d:e9:2c:97:26:f6:69:3d:d5:d3:ef:4e:c8:c1:0e:
a0:82:ba:57:a0:11:53:6b:fc:d0:47:db:72:55:83:
df:c2:f5:07:52:2b:81:3d:86:3c:8c:a7:c1:1a:e7:
0a:f1:e3:93:32:8c:51:c4:88:3b:fa:2e:94:91:02:
2d:eb:69:94:5a:cb:d3:75:3f:03:8d:e7:49:3a:4c:
29:a1:2b:b5:7f:11:9f:67:62:79:3e:83:68:0f:d1:
7f:18:ec:be:88:85:ce:e7:bc:02:56:7d:8e:c3:83:
de:13:e9:8e:31:08:7b:f6:2d:95:bf:3a:49:2a:00:
9d:58:20:28:07:76:4d:3f:9b:16:4a:93:cc:25:ee:
95:cd:c7:71:31:d2:ac:4e:dc:2f:2c:28:49:41:e7:
9a:cd:7b:51:45:5d:ca:b0:1d:10:6e:ed:35:5a:14:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:E3:12:98:33:B0:01:8A:3B:6D:D9:1F:3C:56:13:40:2E:80:EC
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:a5:e1:9a:7b:a1:41:01:6b:16:47:11:5b:26:11:0f:f4:
d3:26:92:41:91:e0:af:8e:ff:d5:62:37:ce:9f:6c:ed:6b:4e:
b5:99:22:48:7e:b1:9e:19:c5:de:29:a0:e9:c9:b3:30:e8:20:
b8:36:e4:45:9c:70:11:1f:f6:f6:bb:96:1d:70:de:db:6d:a1:
c5:79:06:4a:62:54:de:38:37:b7:79:31:38:f9:b9:c2:be:0c:
ae:51:5f:06:44:3c:8a:10:9f:05:61:e4:2e:9b:5a:34:6a:21:
cb:77:02:1d:de:05:3e:ff:7a:72:d2:61:ac:33:c2:79:37:82:
03:ba:1b:52:bb:65:80:cd:e0:ea:dd:6a:c6:b2:98:84:44:c6:
c4:fe:06:d4:87:c0:89:ab:70:56:9d:a2:b1:56:66:15:7a:ca:
c5:38:dd:70:94:ba:13:dc:a8:2e:aa:fa:2e:90:7f:ea:b5:a8:
86:e3:ca:64:4d:82:51:af:eb:46:3f:b6:df:4a:a1:b0:1a:b8:
a6:04:e9:70:62:b4:e0:a3:27:4b:bd:cf:80:5f:5c:af:c3:25:
2b:e7:f4:ec:50:3b:f3:79:8a:d9:9e:32:78:8a:11:71:bd:ca:
32:fe:ff:d2:46:57:fa:48:33:1a:7e:32:25:5f:e1:9b:2b:5c:
2b:00:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:21:33 2026 by rpki-client