Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: z60cvS56VqP2TsgaaU6iNdJPce43/MQBhDg/uTcO/0w=
Subject key identifier: 05:D6:02:9A:39:1B:70:26:B1:D1:79:62:6A:E7:AA:BD:19:B4:B9:A6
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019CAB340DFE8AF5DB9DB6E8B7FBBD6729E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 16DE
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: 4ggS2ONBMXsUTTGG8dmc8AUu8Lg.roa (hash: q2SWd9oKEi+bPBkWTJWv3RcDMHC3g4eWB/JrEjpX2iE=)
2: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: Sk5H9qHulSNRbsND/jaQkN1w1EX1aa8qWz559FIpPY4=)
3: YieV5IhtBfHhR0OlHv2vUYM5r_4.roa (hash: 8fgRrOxEwtIdvMj2bohx3wRypSi8a7Y8Q0IaEcHrHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0d:fe:8a:f5:db:9d:b6:e8:b7:fb:bd:67:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=05d6029a391b7026b1d179626ae7aabd19b4b9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:22:09:7e:85:ba:ed:6a:f8:41:a5:6f:fe:
1e:cf:55:d7:ae:dd:2e:7c:8f:54:4a:87:73:15:56:
5b:a5:0a:b7:d7:09:9c:ca:a6:09:8a:cb:c9:c7:23:
90:7c:ed:ca:72:6e:a4:fc:c3:00:e7:48:d5:1c:06:
9c:1b:38:ab:c8:35:4f:1b:03:c0:14:ca:8c:43:de:
bb:dd:c0:64:ef:b4:78:f7:88:62:ae:43:11:25:71:
4a:1e:3b:fa:5c:b4:e9:41:38:20:38:a4:3d:9a:d8:
04:cb:65:e8:2e:55:ff:b3:cf:66:76:49:1d:b3:d1:
9a:ff:7a:63:51:bf:c7:2b:6d:12:86:27:16:a5:83:
89:9c:78:06:35:14:f0:05:60:e9:fc:06:06:5c:de:
78:65:44:a7:87:a1:53:aa:29:20:60:4a:ea:23:a1:
54:be:88:84:69:14:28:ab:8a:22:d2:1f:de:d2:c1:
84:98:b7:7a:42:76:89:e2:21:7e:ae:ee:53:1b:8f:
27:c5:7a:68:f7:e6:df:0d:f3:35:6a:41:d3:60:bb:
28:16:96:9f:a3:79:f0:94:90:34:de:73:09:f1:37:
08:2b:e7:bf:d0:56:8d:57:4a:3e:19:07:82:eb:55:
b9:4f:00:be:e1:c0:60:07:b7:f3:3f:b7:b4:9e:3c:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:02:9A:39:1B:70:26:B1:D1:79:62:6A:E7:AA:BD:19:B4:B9:A6
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:72:d6:72:4d:95:c2:f6:f0:61:2e:98:6f:3b:06:f3:c8:be:
72:d2:e7:4d:35:f2:00:f6:54:5c:5d:c7:85:10:c6:7e:12:e2:
97:65:c4:68:5e:82:92:66:19:0a:26:96:fb:76:70:a8:8e:12:
2e:2d:27:15:65:75:9e:fb:e3:a9:3f:b1:d5:d5:70:93:2b:20:
cf:1a:74:19:b5:04:3e:5b:fa:82:a7:56:1c:e1:47:4c:33:96:
29:43:c8:47:64:60:02:64:fc:aa:df:bf:b4:fc:1b:16:a4:22:
8a:ef:cf:d2:91:47:e9:93:a2:75:e2:ad:62:bf:81:12:06:14:
04:6e:e3:99:f5:94:59:70:fd:27:78:43:1e:c9:0f:f5:1f:1a:
11:15:9f:54:0f:ad:b4:75:9d:f7:62:09:24:8a:55:94:40:73:
79:0f:4d:a6:2f:f7:84:ee:d6:af:b7:07:48:ce:49:00:46:02:
30:18:fe:7b:66:b7:59:52:db:74:f8:2c:b6:20:b9:74:3b:83:
78:d4:8a:9c:c9:54:ff:ea:7e:62:37:ce:1e:9b:ed:41:99:aa:
c8:85:4c:86:30:3a:15:d3:38:a5:e5:8e:43:94:6e:99:1a:3d:
bb:73:87:4f:95:df:36:b5:90:70:08:01:18:31:65:eb:3d:3c:
f1:4e:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:09 2026 by rpki-client