Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: jrRdryK8gyIXZAqIhpkntCTe5P3iRrfWoXkP8h7QOG8=
Subject key identifier: 12:92:EE:3F:8F:55:FC:A9:93:87:83:42:6F:30:41:90:C8:EC:ED:27
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019CAD5963986F3911C56601F80656D296A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0F31
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: aPVO/qdA9FsRTwuYk3k27R2WPW/uywvJbvy8yi80KUA=)
2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:63:98:6f:39:11:c5:66:01:f8:06:56:d2:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=1292ee3f8f55fca9938783426f304190c8eced27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:84:0a:e2:29:21:2b:06:cf:21:45:b0:18:
7a:5b:02:8c:02:a9:81:d1:9c:a5:63:89:1c:47:0a:
d7:cb:b9:df:58:f1:cb:6d:d6:ba:84:ab:40:b8:c4:
45:a3:8c:ca:cc:0b:04:99:91:8b:43:a0:05:b6:53:
cd:84:b1:02:b5:c4:6c:85:ee:91:be:9b:1f:36:7b:
4a:e6:97:73:da:9b:77:a7:f4:33:d5:bb:7f:7f:7b:
4f:20:ed:ae:00:fd:2e:18:4a:e6:39:52:9d:c4:a3:
33:71:bd:d9:7f:88:fa:88:1f:14:86:fa:69:53:13:
00:16:d2:bf:16:fb:6a:30:e0:47:b2:d8:7f:9f:c7:
45:03:7d:b5:1f:96:43:e6:f7:48:92:42:9b:1b:31:
02:eb:af:ca:b8:33:61:4a:4e:39:36:91:93:d5:30:
88:9b:d2:d1:15:b1:f1:2a:68:09:50:1e:b6:68:0a:
44:2d:a7:7e:0f:79:db:8a:46:f3:f3:6e:66:01:3d:
50:46:b1:af:1c:86:c7:05:c4:b8:5e:21:d0:97:a3:
05:a0:27:fb:2b:05:8f:cc:28:fb:7f:bf:78:23:10:
f0:eb:87:db:a2:0b:8c:df:9f:a2:39:3a:af:e4:ce:
f1:b5:71:b3:fa:01:0e:16:1e:cb:8c:eb:6e:38:c4:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:EE:3F:8F:55:FC:A9:93:87:83:42:6F:30:41:90:C8:EC:ED:27
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:08:ff:2a:66:6a:dc:d6:59:8a:ff:83:cd:4e:ad:86:b7:20:
23:87:7e:51:0d:4e:f9:b0:f1:c7:a6:77:1b:14:61:33:13:df:
cf:d4:ba:3b:ef:5b:bc:94:fb:ba:93:7d:7b:37:98:0c:61:31:
8e:0d:bc:a2:2a:85:35:af:82:57:0e:83:91:58:08:47:4d:69:
4e:42:02:9a:e7:59:0e:3a:8e:ec:3a:a0:41:18:6c:0e:73:f6:
8b:66:21:28:e8:0e:03:cc:7c:44:f9:f1:f9:29:85:d4:22:ac:
31:53:d1:06:55:00:8f:f6:e6:cd:a1:99:a6:ec:95:0e:95:f8:
97:b0:1c:21:50:8c:81:32:7c:ec:ab:a7:20:c1:f6:38:f8:94:
55:6c:2b:0d:1d:65:8d:49:e3:d3:d5:55:33:cf:e7:19:13:9d:
41:56:33:6e:fb:92:2a:86:36:e4:0a:40:3b:be:22:34:23:b0:
0b:b5:2e:a1:18:8e:95:8a:7b:c2:ec:ef:4c:aa:05:e5:5f:1b:
a3:d7:1d:f4:f8:41:d4:d6:ba:a2:19:80:b2:f5:58:e1:65:e3:
75:38:f6:da:4f:00:8c:7d:6f:e5:14:b8:77:05:81:72:a3:5f:
dc:f2:6c:49:ce:ec:77:f9:ef:64:dc:95:bb:3f:03:a9:88:7a:
aa:af:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:44 2026 by rpki-client