Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: NJkWdQN9+Sx1pFByWD8fwav0otG1+6ahNKf5KFCR85I=
Subject key identifier: C2:6C:37:01:06:71:79:50:C8:47:0B:E8:06:31:3C:11:0D:93:C6:31
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019DA3E6B12BD98877FB3DDBAD8BAC5701F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 119E
Signing time: Sun 19 Apr 2026 04:01:38 +0000
Manifest this update: Sun 19 Apr 2026 04:01:38 +0000
Manifest next update: Mon 20 Apr 2026 04:01:38 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: nFaYEs7FgrbwL2Wqp4Zi18PHJWxzqultzbXZpsRl4dM=)
2: VYt88J2micc3RjkOiAbgbsahES8.roa (hash: Zo8tOxRpop/qL57ADwlkJqC3DjP20BCdR/VwhP6MEb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b1:2b:d9:88:77:fb:3d:db:ad:8b:ac:57:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Apr 19 04:01:38 2026 GMT
Not After : Apr 20 04:01:38 2026 GMT
Subject: CN=c26c370106717950c8470be806313c110d93c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:54:53:92:ee:55:d8:68:ff:f9:d9:90:32:
33:13:91:6b:b3:50:92:d3:70:9d:45:14:5f:f3:99:
6e:d8:01:ee:f3:20:ca:6e:bd:2a:fd:27:27:e3:a7:
6c:7e:dc:d4:2f:74:90:9c:dd:72:c0:55:b2:98:c5:
d0:72:7b:c4:d3:11:f2:ca:af:b3:32:ad:91:3e:79:
cc:34:11:77:4e:7a:68:0e:63:78:3d:c1:c7:23:25:
70:aa:d2:bd:8d:11:c6:64:b4:dd:ce:dd:fe:8a:63:
fd:8a:14:d4:05:56:9b:5c:85:9e:b8:c2:cd:1f:7e:
f8:15:5d:9d:ab:2d:4a:b7:06:d9:3f:05:5f:d8:47:
89:e3:76:22:79:d5:2e:14:f5:b2:7e:97:40:93:ee:
36:69:e4:6b:83:07:77:66:55:04:10:14:5f:55:0b:
6f:bb:2a:32:63:85:ff:36:89:16:f7:af:36:c5:60:
0c:ce:7c:b2:2c:49:cb:f8:85:01:23:51:87:76:16:
50:94:4f:05:53:a4:78:ee:2e:b8:32:6d:3f:6f:08:
41:88:6e:39:b3:12:f2:a9:36:a5:a4:85:d3:4f:70:
08:ef:b2:b4:28:f2:02:7c:4f:f6:fc:02:20:6e:18:
13:9b:d6:7e:0d:18:d3:89:a6:5a:b3:2c:37:0b:26:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:37:01:06:71:79:50:C8:47:0B:E8:06:31:3C:11:0D:93:C6:31
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e9:41:75:46:94:e2:70:cf:b6:fe:e8:33:24:ff:a1:4a:8d:
30:d7:47:e3:92:50:04:cb:b1:e1:51:92:5a:bf:c2:01:fb:54:
26:fa:69:37:6e:75:f2:2b:0c:39:f8:69:7e:ef:ce:3e:20:eb:
3f:7a:05:71:3c:be:59:a1:32:bb:c6:b2:de:c9:9e:ae:1c:98:
0c:e8:cd:73:20:40:f5:dd:45:eb:84:92:dc:b9:c6:16:2c:f8:
ff:7a:5e:49:f5:37:2a:fe:ec:75:1d:41:7d:ef:a9:a5:e7:d0:
e6:ec:e8:12:1b:dd:34:97:52:4e:be:42:de:9a:c6:ce:46:db:
f4:55:4b:1b:aa:0f:eb:fc:6e:45:7f:6f:f4:82:e4:4a:37:9b:
d7:db:a5:5f:a2:d9:52:cb:71:2b:e0:c0:45:36:fa:ed:10:68:
bd:f5:59:b8:d1:5c:eb:b7:55:6c:23:5a:97:26:f3:45:17:5d:
e4:43:15:ca:57:db:f4:48:d4:85:71:07:7e:d4:de:b7:43:ae:
3e:a3:d8:90:35:d0:3a:fb:08:7e:b4:b8:2f:6a:d8:22:f6:57:
fc:aa:eb:ef:d8:c8:07:fc:9c:7b:8c:cd:22:e0:92:a8:bb:bd:
07:5e:a1:b3:70:7a:8d:43:9d:8c:69:44:9a:67:56:62:17:e7:
8a:dd:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:00 2026 by rpki-client