Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: i2TQ7AlzvOzm1GX2xvLe5HUvP1AST2IyCdQSUxqs6y0=
Subject key identifier: E0:E1:33:82:B8:8C:9A:17:7A:1B:6B:E1:AB:62:59:5A:65:C0:3F:D3
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 019D39AEE7F0105B96339F3F4158A48F0BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: WfCaweaz1avD5/enUOiPeI1DHprk8SSdq/4Cwmkfl2Y=)
2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e7:f0:10:5b:96:33:9f:3f:41:58:a4:8f:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=e0e13382b88c9a177a1b6be1ab62595a65c03fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:52:aa:f0:47:2c:98:bc:49:75:6f:fa:cf:
ad:c7:75:c0:32:e3:e9:32:5e:e9:ad:8f:96:2a:7a:
04:3e:b4:4c:d8:af:0f:44:3e:31:ea:ae:d4:bc:ba:
99:82:54:a4:58:90:57:e3:61:6c:2b:6a:b7:6e:b5:
b3:50:a7:8c:1f:86:66:8d:70:48:9c:b6:9c:7f:e7:
8f:3d:ea:78:07:54:3e:fd:53:35:8e:ca:b0:16:4c:
2a:49:fc:19:39:49:9a:f4:ba:a1:b9:d7:35:e8:ab:
aa:81:72:8d:44:7d:7f:56:56:19:36:79:c3:61:c7:
c9:68:39:48:34:5e:5f:84:3b:47:c0:8f:8c:b5:a8:
06:fc:46:b1:b3:89:6f:8c:30:97:e5:53:3f:3c:8e:
8f:3d:20:d7:3b:bb:ce:ed:ac:a3:2c:28:4f:82:e4:
1b:16:5c:c2:09:9c:e0:dd:23:78:f4:c7:24:73:9d:
f3:a3:72:94:8d:6d:cf:08:fa:de:fe:be:c6:50:b4:
f4:d6:02:e0:4a:b6:49:86:57:39:8d:26:67:33:7c:
f8:a7:b0:f4:64:7c:34:8c:9a:cc:dd:f6:b6:7e:7f:
95:67:01:d3:34:4b:62:26:5d:4c:6a:db:06:3f:41:
92:97:c7:41:c7:29:0a:f7:89:40:57:37:40:ce:b1:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:33:82:B8:8C:9A:17:7A:1B:6B:E1:AB:62:59:5A:65:C0:3F:D3
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f2:d3:c1:6f:b5:48:69:80:cd:26:56:21:8a:3e:d7:97:f8:
df:2a:55:93:de:8d:c0:81:7c:79:96:24:cc:33:8c:4a:f6:df:
e2:e6:22:25:fc:3e:92:ea:43:29:93:fb:45:5e:c7:72:b5:4f:
2f:2e:ad:96:96:f1:23:4a:d1:0d:23:0b:4b:23:9f:2e:34:06:
54:d0:c6:6e:e7:09:48:52:39:37:3f:93:e3:cd:8b:8a:73:d4:
c6:ea:b2:8b:b3:f6:aa:23:da:fd:ef:a4:06:fe:6d:06:ad:63:
1c:80:5b:92:50:8f:ee:1a:55:1d:f9:a1:ee:b0:f3:c9:7c:e4:
b9:eb:f9:ca:53:2a:4e:44:da:7f:a1:75:e6:02:1d:0b:1b:4d:
fd:f2:a5:07:e5:b4:d2:56:f4:99:5a:5b:09:42:7e:33:bf:63:
14:42:a9:ec:79:02:e6:0e:48:21:b5:92:80:7e:ad:b9:9b:0c:
ca:fa:03:f4:15:d4:90:60:96:c4:a5:65:79:8f:a0:78:c2:86:
3c:ef:d6:0c:da:af:7e:d8:a8:65:fd:63:cf:fe:ea:b6:7d:ed:
60:9c:1b:cc:f6:97:ff:30:20:7e:17:7e:de:50:e9:4e:2d:63:
8a:11:3c:3c:3c:a1:a3:fa:66:ca:3a:a4:e9:a0:9f:31:e0:a1:
fe:d8:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:53 2026 by rpki-client