Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: jc00ldSucEBQgDhaNGwQcIkN01ARZpQBhl/1wBZuteQ=
Subject key identifier: F4:B3:57:57:97:F9:FE:D2:7D:5B:7C:1F:5B:22:E0:C3:7D:20:90:9C
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019CAA21C727E8F21479458378AD05BB5BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 111C
Signing time: Sun 01 Mar 2026 16:01:06 +0000
Manifest this update: Sun 01 Mar 2026 16:01:06 +0000
Manifest next update: Mon 02 Mar 2026 16:01:06 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: 4GHAlS6G6vvsHXWMLwl3VUvs7F563Cg52aqLSQjiUco=)
2: z5eGL-fse1We1bptm25VEPuwfto.roa (hash: /QZbVKe0lTLtD3ctMSCQSNAZAq2u7V/TkGsjkJaoUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c7:27:e8:f2:14:79:45:83:78:ad:05:bb:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Mar 1 16:01:06 2026 GMT
Not After : Mar 2 16:01:06 2026 GMT
Subject: CN=f4b3575797f9fed27d5b7c1f5b22e0c37d20909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:13:03:05:18:54:56:48:54:c8:85:89:d9:
79:03:a4:01:a2:7b:8b:43:33:cc:ef:e9:c6:37:1c:
a1:2c:38:60:fa:ae:21:a5:31:a0:c0:aa:41:54:88:
cf:d0:b6:b5:e0:32:c2:30:be:40:82:f3:cd:7c:31:
e4:4a:e4:43:29:6d:3a:9b:7d:51:7f:aa:62:82:6c:
6b:43:89:e3:1d:32:36:86:13:85:73:50:42:9d:82:
e4:86:37:7b:80:44:ac:87:c5:9a:e0:9a:25:a4:1b:
b3:c6:01:42:6d:e9:22:a5:c3:fa:0a:35:15:1a:cb:
bc:4e:07:72:39:f0:b0:5c:dd:43:49:65:ed:84:e5:
4a:a3:16:11:75:f6:a6:10:61:30:d0:17:20:7a:68:
74:55:fa:73:56:87:ff:02:8e:0c:a9:c1:c9:ae:80:
cf:9f:24:0c:19:8e:95:35:20:5e:7b:5f:2f:c1:c8:
4b:9f:a2:0c:96:6c:69:24:49:38:9a:01:8e:cd:7a:
9c:14:ce:c4:f3:7d:3a:f0:8c:47:1f:d0:4d:b2:fc:
9a:71:40:01:8d:91:54:30:d7:2e:75:69:80:0f:2e:
32:2c:ee:d4:b7:4d:94:8a:12:7d:3e:59:5e:13:60:
4a:97:ac:07:52:6c:1e:74:c2:0c:be:9f:66:a4:ea:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:57:57:97:F9:FE:D2:7D:5B:7C:1F:5B:22:E0:C3:7D:20:90:9C
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5c:33:58:8e:e1:13:09:9e:6c:d9:2d:3c:96:cd:e1:35:d7:
d5:2c:96:91:75:ff:50:e6:2e:51:6e:fb:0d:36:d4:16:e2:7d:
f2:23:65:96:c9:e6:4d:11:4d:4e:4b:94:45:4a:4c:4a:d0:29:
2a:fe:dc:94:a0:2d:00:3d:96:9b:29:ec:a4:10:77:08:cd:69:
95:32:7a:38:11:35:4b:64:fe:93:57:d9:8f:d6:ad:33:4f:aa:
d2:f8:66:9f:b2:12:5a:c2:dd:7f:1d:5a:f8:aa:67:fd:f7:97:
73:73:20:c0:27:6d:11:98:3f:75:8a:40:3f:6b:71:47:4b:84:
73:ba:58:92:ca:d4:e4:0b:fd:ec:79:37:23:8b:71:87:fa:e7:
b7:89:ab:18:7a:3f:62:87:a5:ea:5e:5f:9e:99:9f:fe:45:ae:
2e:3e:64:8a:b9:03:9b:7e:78:50:93:f0:9c:d9:90:cf:03:23:
ae:69:6d:7a:85:be:f7:88:ef:3a:51:f8:7b:f9:33:6f:ba:f5:
cc:9b:f3:0c:87:eb:58:60:ba:fc:0b:b8:61:44:d6:25:db:41:
3d:59:1d:30:33:4e:20:94:82:cc:05:cf:37:20:5a:0f:95:4f:
68:e7:cc:cd:11:33:42:70:c8:65:f8:22:74:53:ef:01:a6:83:
f7:37:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:31 2026 by rpki-client