Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File: F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier: gKOOU7EJ0w2KKaHCx9vzY+/YhP+Mmzg79g34NiGfO7c=
Subject key identifier: F2:65:24:18:BC:00:A5:E1:A3:79:57:93:D5:E1:8D:ED:DE:F1:7D:2A
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 019CAAC70E4E2196368AA320FB88FE150772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number: 1385
Signing time: Sun 01 Mar 2026 19:01:37 +0000
Manifest this update: Sun 01 Mar 2026 19:01:37 +0000
Manifest next update: Mon 02 Mar 2026 19:01:37 +0000
Files and hashes: 1: 7LMaVQHIURLIHhJQQlzIccTVpOE.roa (hash: 5km+tw1h03H4l3wkZKI+O7HJSeNoMxRPhDOUY2h8vd4=)
2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: xevxJgldozx9sDKk+a1I/PR4hMwECzWIV/b10+He6J4=)
3: LI9K_zdJnsTE9lvQTqFYKf6AYsU.roa (hash: pcuAI5XjcKbL6fmMT5QI/ixfEpBYRotLo9ai79rRnLo=)
4: NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa (hash: x5vufpHlYAUdkIPewVIu2Kz4yUhsko+l9KK+oarRKKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0e:4e:21:96:36:8a:a3:20:fb:88:fe:15:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Mar 1 19:01:37 2026 GMT
Not After : Mar 2 19:01:37 2026 GMT
Subject: CN=f2652418bc00a5e1a3795793d5e18deddef17d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:34:aa:29:51:3b:ce:7d:5e:09:fc:c3:03:
33:08:fa:e8:9c:1e:b3:c6:de:65:f5:af:9f:5c:8d:
0d:f0:7d:11:5d:a6:53:f5:98:aa:a6:2c:5a:c9:59:
4a:c2:e2:a1:49:59:05:a8:4d:6e:1e:f7:9b:65:a9:
7c:9d:c5:ff:5b:e5:3b:df:65:8c:62:56:e2:2a:d7:
20:03:6d:0e:86:67:2d:b0:2f:7d:37:3d:f3:04:33:
51:1a:d8:91:0a:c2:f0:87:23:47:7a:b6:c9:c5:8d:
8c:3b:d9:62:0b:b6:28:4d:b6:83:be:80:7d:a0:ce:
17:b5:be:11:2c:c6:4c:29:75:24:ff:31:22:75:b6:
cf:12:d7:25:fe:f7:67:3c:0a:5a:35:64:f0:6a:f3:
9f:97:bb:72:7e:88:89:12:c2:71:67:c4:38:b0:c8:
d3:ec:97:b1:b7:7b:b1:a6:6e:0f:fb:66:c5:cd:fe:
9b:a1:5e:3a:f8:52:a3:30:c4:81:d0:74:16:0d:4b:
2e:25:26:8f:e0:3c:84:09:0c:8d:e9:f5:ad:3b:8c:
2b:55:76:b9:c3:b7:f9:da:b2:4e:57:2e:8f:56:de:
12:96:94:74:80:77:87:5e:70:9d:29:30:13:b1:bd:
fa:77:ca:78:6b:c4:bd:8f:d1:e5:60:6e:4c:7d:f6:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:24:18:BC:00:A5:E1:A3:79:57:93:D5:E1:8D:ED:DE:F1:7D:2A
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:9f:db:95:7a:82:d8:af:b2:8b:f1:26:31:b0:fe:ad:bb:
23:84:2f:c1:45:ca:ed:86:c3:dc:fe:82:d4:0f:5c:7b:d3:ef:
02:0f:6a:41:08:f5:e9:32:17:7a:5c:f9:11:49:74:2c:71:40:
22:25:43:c9:1e:40:fc:9e:c4:85:91:70:14:2c:ff:0e:33:d8:
f2:d4:6b:2e:8d:b2:3a:e8:c0:20:99:2e:5f:6d:b1:97:82:dc:
5d:fc:70:47:d9:77:fa:0a:4b:44:5c:ac:c6:2f:4e:9b:b6:5c:
7e:4d:0b:0c:e8:df:c8:96:78:9b:02:2b:69:08:52:a0:ce:28:
db:a7:8e:15:61:21:1f:a5:3b:21:02:fd:d8:00:9d:9b:98:6d:
97:4a:92:c1:9e:5b:7f:a4:80:ff:82:28:e1:3c:a8:7d:d9:37:
a4:64:fe:52:98:8a:ee:33:87:6e:e8:6d:af:5b:d0:d6:a8:24:
5e:5f:ab:e5:15:b7:ad:b0:a3:9d:55:a2:78:fc:35:51:07:4c:
5b:56:c6:a6:b2:25:17:1c:0c:54:50:76:6a:0b:54:16:38:84:
1a:08:a5:6b:ab:37:7b:7e:97:31:50:75:3c:12:1d:e3:fc:0d:
0d:67:7f:77:28:2f:ff:c1:47:dc:ef:75:a7:f5:e3:38:1b:10:
f1:eb:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:57 2026 by rpki-client