Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: 5+c9AiWHRc9wBOl6YEBAJvZHHi22cH7c+ULuZczQluQ=
Subject key identifier: 50:43:E0:90:5E:72:AF:E4:9E:C8:2A:70:AF:41:1E:A1:26:CC:C4:2F
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019D98BDF02A6169B770239559E693B6F566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 1759
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: 4ggS2ONBMXsUTTGG8dmc8AUu8Lg.roa (hash: q2SWd9oKEi+bPBkWTJWv3RcDMHC3g4eWB/JrEjpX2iE=)
2: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: fSueWNMmSOoRpBBNDhMOskJYqCNCqsZ5RtQPH/9DlG0=)
3: YieV5IhtBfHhR0OlHv2vUYM5r_4.roa (hash: 8fgRrOxEwtIdvMj2bohx3wRypSi8a7Y8Q0IaEcHrHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f0:2a:61:69:b7:70:23:95:59:e6:93:b6:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=5043e0905e72afe49ec82a70af411ea126ccc42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:fc:ec:f2:89:36:27:8c:a4:1a:bb:7a:e8:
66:79:9b:2e:8b:80:0f:07:c1:73:c1:db:47:45:3b:
ad:ef:2b:ef:97:5e:51:ee:94:5a:5f:ef:c8:fd:47:
a5:3e:26:49:1e:38:b3:1f:29:f2:99:9a:b7:21:aa:
80:cb:d6:9f:23:d6:4a:39:5c:9f:ae:e6:83:d3:9a:
30:0b:dd:1b:89:d4:38:ec:df:79:1f:53:97:fc:ac:
e1:86:2c:7b:f1:b1:b5:84:7f:f3:46:10:dd:3c:8e:
b4:19:91:ba:bf:cf:77:c0:1a:7a:d9:df:60:e3:54:
01:74:25:c2:27:2b:f6:8d:34:3e:d0:d4:ee:3a:cd:
e3:f5:89:0c:e8:e0:93:05:f5:6a:24:b8:c2:d0:7d:
01:1f:0c:81:a1:ab:3f:30:9c:d3:4e:04:ef:17:8a:
a3:05:d5:4e:4f:17:34:3e:75:4a:47:aa:f7:81:a9:
ed:ca:74:f6:28:53:9e:37:54:13:cc:05:37:fb:b7:
da:92:c1:5b:a7:e8:4e:4f:14:a0:d4:22:0a:0a:ec:
c8:3b:dd:76:68:04:38:98:1a:1c:b0:c3:dc:ad:17:
e6:7e:da:6a:33:f9:a4:cc:b0:ec:f7:7f:a3:93:39:
66:b1:79:a9:f9:59:e1:b1:14:52:ce:02:b0:a0:8f:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:E0:90:5E:72:AF:E4:9E:C8:2A:70:AF:41:1E:A1:26:CC:C4:2F
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:93:18:f6:08:cd:78:60:a8:0d:30:d7:f0:1f:62:c1:e5:
b7:f4:e5:de:4a:24:16:15:8b:6b:94:10:87:75:91:da:68:ee:
4a:1b:54:78:36:29:9e:5b:ba:94:7d:7e:30:a4:e6:d4:16:df:
6e:22:96:ff:8e:49:45:48:2e:87:af:f0:70:46:87:c7:4a:6c:
c5:14:cb:33:a4:66:ca:0a:4f:11:f6:f2:5a:e7:3d:11:c5:c3:
3a:f2:4c:17:d5:33:f8:aa:1b:17:d3:de:cd:cf:d7:32:9c:42:
37:00:fa:42:b7:7a:fb:27:71:f2:94:c8:fc:6b:d0:4c:ba:40:
13:f1:8d:c3:53:40:eb:bf:77:39:a1:19:47:70:7c:9b:77:33:
3f:55:d3:f0:c1:28:ed:ed:a9:c2:cd:a6:84:bf:fc:b6:bd:28:
35:d0:65:8d:b5:77:70:fe:8d:ed:23:aa:6c:65:85:e5:28:50:
4b:7d:0f:43:37:49:36:aa:87:9a:95:49:82:25:63:e1:d7:a0:
1a:4b:66:7c:0d:1c:14:6b:0a:7f:ee:98:62:06:f4:83:92:a2:
6e:dd:e9:50:8b:d7:84:a9:89:3a:5b:12:09:6b:4b:d3:e3:8a:
f8:a5:b1:d2:22:6e:33:36:92:7a:97:bd:f7:32:c5:ec:1e:f2:
ca:f1:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:46:07 2026 by rpki-client