Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: vzEsEHJyopUPDOjgPGOpkBZkg/wEt7/XMO7dKP4/ac8=
Subject key identifier: 53:85:3B:66:E6:16:C2:EC:F3:CB:12:A2:9E:34:B3:53:6C:E5:E8:9A
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 019CAA8FCA97DBA2AB346BFFC4CBB6950054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 07A1
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: w1OhgvinCOxrP703VGybPE+QA9wKRQITFgsEWUPVW74=)
2: udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa (hash: XThKptGke2Rt2jt7oAQhE+VAuCr0Qg/2RUNkoKL1FUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ca:97:db:a2:ab:34:6b:ff:c4:cb:b6:95:00:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=53853b66e616c2ecf3cb12a29e34b3536ce5e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:00:95:fe:60:8f:20:0a:af:a2:19:14:fc:
2e:13:bd:a8:6b:bc:08:1e:c5:4c:ec:39:6a:83:e9:
23:18:5e:13:14:b4:64:af:6f:58:f1:af:e7:29:39:
01:93:51:87:1d:5f:57:1f:fe:3d:ea:32:73:f0:85:
4e:c7:cd:82:51:78:7f:46:3e:a9:40:2f:50:98:71:
1c:04:5a:cf:68:c1:db:e7:fd:b3:e2:c9:fc:5f:72:
e8:d2:46:eb:a9:ce:28:6e:84:a9:c8:0a:ae:da:bc:
10:3d:80:42:65:ca:b4:fc:c5:85:43:57:d7:f4:f6:
75:a9:4c:42:27:2e:2c:a2:38:0f:06:95:f0:9b:60:
c5:1f:3a:61:28:e1:6f:e2:8e:43:d5:09:4e:bd:c8:
74:d9:03:bb:4f:92:81:af:fe:63:bc:ef:cf:15:7a:
f5:9c:b2:71:ae:71:35:91:48:a4:27:be:20:c1:c0:
c4:a3:ed:0f:eb:b0:ba:08:16:e0:fa:03:bc:72:7e:
f2:80:e3:50:a3:a1:b1:3a:a2:c7:c0:d9:8d:63:78:
4d:cf:12:d1:6f:8a:91:59:6e:f0:13:de:75:68:d4:
98:ef:c9:88:fe:f8:81:76:53:34:86:31:ec:99:a0:
c8:ce:9f:71:6f:60:ea:93:d8:7c:7b:d0:d9:ea:6a:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:3B:66:E6:16:C2:EC:F3:CB:12:A2:9E:34:B3:53:6C:E5:E8:9A
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:75:4e:0b:2e:aa:15:48:b5:66:84:83:07:dd:ee:e3:eb:a0:
c2:f3:d1:76:76:90:3a:3e:31:ec:ae:84:d2:23:30:bd:fd:fe:
64:33:81:5e:e8:e9:13:e7:91:69:6d:09:b8:96:7a:b7:e3:36:
0b:fb:54:2c:88:fa:17:fd:82:d7:90:cb:dd:5c:f2:2b:bb:1e:
3d:78:7d:71:c0:47:31:f2:eb:d5:76:85:31:f4:3f:e9:80:89:
03:f6:0f:74:a3:4d:f1:33:ab:94:6f:aa:07:ca:68:b8:d2:59:
14:10:17:dc:c9:ea:d4:ca:2f:67:aa:80:81:3f:62:e4:fd:7d:
85:48:a3:02:23:2d:a1:c9:94:fe:42:ea:15:60:97:3a:82:f8:
1e:37:f9:6b:13:81:11:67:2c:cd:aa:5b:9d:86:db:02:a9:22:
03:5f:cb:f1:a4:00:85:e2:ed:16:12:77:c5:61:2e:57:89:cc:
2a:f1:10:16:6f:94:62:73:1d:22:d5:32:be:89:0f:d1:34:52:
a5:6f:71:cc:9d:c9:58:1b:d2:1f:6e:c4:bc:b7:3a:49:28:d2:
ed:e2:87:5b:32:10:31:1c:8d:c6:95:40:6a:16:8b:db:ff:0e:
6c:be:35:76:c9:b7:a2:a4:bc:50:ad:64:8c:6d:5c:6d:79:a2:
ea:ff:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:21 2026 by rpki-client