Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: LQxFO9BaQDxxHJwWoK56RVQGwXMzTtYlFRRKipcYj5o=
Subject key identifier: 2D:87:C9:DF:C3:7E:83:F6:A7:0D:CC:34:E0:A1:AE:45:ED:47:10:98
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 01A0C746851BEA67D80E6668C24903CF4B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 133F
Signing time: Tue 22 Sep 2026 04:01:22 +0000
Manifest this update: Tue 22 Sep 2026 04:01:22 +0000
Manifest next update: Wed 23 Sep 2026 04:01:22 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: tKRuVAnPmSP69d/5l5xpOugmgbsDrBTmlCoOnHBbPxQ=)
2: exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa (hash: cpev4QlZRscUMeINHxmW95Jv6ZdGgZyRlFV1/FIBpVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:85:1b:ea:67:d8:0e:66:68:c2:49:03:cf:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Sep 22 04:01:22 2026 GMT
Not After : Sep 23 04:01:22 2026 GMT
Subject: CN=2d87c9dfc37e83f6a70dcc34e0a1ae45ed471098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:bc:f2:2f:05:ec:b9:55:68:56:f2:8c:c9:
9a:7b:6e:60:e6:b5:b3:e3:8b:5f:42:3c:79:80:e1:
a8:77:87:6d:96:db:be:d5:8c:3b:78:f4:00:ad:ea:
53:8b:f7:a2:15:c9:31:92:05:ea:6b:5d:06:c3:dc:
51:72:8f:15:d7:2c:1b:0b:99:56:7b:8f:bf:00:fc:
71:f3:04:b6:4d:71:fb:29:00:8f:69:3f:1d:05:a6:
52:bc:8e:2c:c0:db:a0:c2:98:ad:5e:5f:50:24:a0:
0e:58:ab:bb:f5:69:d1:82:2b:04:cf:b2:73:4c:07:
73:d2:ac:c5:02:f1:13:ee:0c:0e:81:79:f8:7e:90:
6a:56:55:c8:75:da:ae:3a:f7:1a:82:cc:33:96:e3:
23:20:f9:0f:d9:d2:cb:71:75:19:9e:f2:8a:c4:97:
d2:79:5b:17:09:eb:97:e7:2d:e5:52:cb:bd:48:4b:
5f:c7:6f:0f:8a:5f:fa:14:d6:67:a0:40:cb:23:92:
98:33:6f:d0:0d:04:58:b4:c3:11:8e:90:53:17:8c:
6f:5a:cf:7e:a3:f9:0d:f5:41:85:87:43:51:d5:a0:
76:c9:0f:f6:07:bd:2e:22:8b:8e:38:25:1c:05:20:
00:31:03:a8:6f:cf:d6:e3:a3:3a:2e:8d:4f:61:0e:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:87:C9:DF:C3:7E:83:F6:A7:0D:CC:34:E0:A1:AE:45:ED:47:10:98
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:08:95:d9:39:52:66:1b:fb:c9:b1:cc:03:1e:c4:6e:3e:
66:04:a6:20:3d:14:1c:1f:f5:da:2c:d0:9c:05:d4:e2:fd:51:
eb:42:76:2a:e6:34:89:5d:2f:86:aa:0b:7e:c9:eb:a4:80:ce:
59:28:2e:f1:52:dd:de:45:69:2e:65:fd:fa:d9:73:4b:78:5b:
95:50:f4:83:69:11:96:f8:51:07:37:7a:e7:cb:f1:8f:76:0c:
a8:1a:ac:7c:e3:50:a4:d9:f3:d9:f3:c6:e4:31:44:8c:f3:20:
2e:76:78:a6:c2:da:74:58:2c:d9:75:be:68:bc:4c:dc:a8:b6:
0c:c7:65:48:b9:36:33:54:12:5d:ef:1a:7e:ed:88:d8:6d:29:
b8:0d:dd:55:12:99:55:92:fd:ea:da:92:f2:2f:3d:ab:bc:f7:
1b:18:12:ba:a3:27:f5:cb:ac:1e:a8:33:7b:95:ae:1f:5c:f9:
5f:37:d5:cf:f2:6b:a9:b2:ec:7a:88:e9:07:e4:44:f0:ef:2f:
0e:a1:70:f1:f0:85:5c:75:09:bc:60:2b:e6:6e:89:d0:f2:fe:
c6:4e:40:38:94:cc:a6:49:a3:7d:56:61:51:56:cd:d5:32:55:
d9:49:ef:5e:d0:6a:40:3a:1c:1d:9a:a8:a5:ee:ea:21:e7:fb:
f2:a1:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:24 2026 by rpki-client