Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: Rd2q+7RizT9FzSMOGJ++39tHcGsOcCKONi9St1DOpQ4=
Subject key identifier: 2B:1D:E0:2E:B8:FE:5E:E0:9E:20:1B:4E:B0:7D:C1:7B:56:26:8E:EA
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 019CACB45C21881756A8346B4E3DD085A60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 0AFF
Signing time: Mon 02 Mar 2026 04:00:27 +0000
Manifest this update: Mon 02 Mar 2026 04:00:27 +0000
Manifest next update: Tue 03 Mar 2026 04:00:27 +0000
Files and hashes: 1: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: 7eEztb/JLHX01MrFtmiJeuEciwBdFHzb01R48lNo3Uo=)
2: PUmRbcQEHO-1E9MjUNB1G27jvC4.roa (hash: 1b5K13lRJVgXMES2Ogtx5dT9HxojliDTCamL4LINRu4=)
3: ieoHlH36HWDIPWckSlvGHJy24ZU.roa (hash: j9WOIqYDUZqSN+7FGuaKTEgZ+HNu/dxrw2EWxoIKCOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:5c:21:88:17:56:a8:34:6b:4e:3d:d0:85:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Mar 2 04:00:27 2026 GMT
Not After : Mar 3 04:00:27 2026 GMT
Subject: CN=2b1de02eb8fe5ee09e201b4eb07dc17b56268eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:6a:78:80:7f:99:ed:ab:f4:74:f8:5a:0c:
d8:d8:94:3d:67:49:3d:b7:f3:da:b7:b7:40:3c:e9:
fb:fe:33:f4:28:5e:e2:a3:d2:48:2a:23:d5:a1:a3:
00:3d:53:18:3e:16:da:d6:13:16:82:41:f7:a4:04:
58:f7:33:93:90:3d:87:44:b9:86:fd:8e:d4:85:96:
11:d3:77:40:56:30:68:29:05:7c:fb:96:44:a3:4e:
da:12:a7:6a:4a:31:fd:dc:c2:77:7c:41:48:24:e9:
09:74:28:cf:10:03:e2:11:33:6e:11:8c:c1:b2:f5:
90:d1:37:c4:cc:67:ee:f9:03:2f:6d:8f:26:4c:ae:
2a:18:15:b0:46:07:2e:45:48:cc:72:78:ea:ff:96:
c1:f3:f1:f7:29:8c:e9:e5:bf:bb:ca:dc:f5:57:89:
57:69:8d:3f:f1:5f:2e:25:af:9f:07:00:1d:86:27:
5e:06:39:43:74:33:3b:1a:a4:46:ff:c2:e5:2d:c1:
0f:21:1d:b5:dd:0a:d4:ec:a6:07:68:ec:6c:5b:09:
5d:b0:90:9c:d8:46:54:0c:e8:30:74:1f:6e:5b:0f:
a0:a1:c0:17:42:2c:7a:be:d1:37:74:71:3b:e5:df:
77:d0:a6:99:1e:c7:f3:58:fd:dc:ad:1f:5d:44:6d:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:E0:2E:B8:FE:5E:E0:9E:20:1B:4E:B0:7D:C1:7B:56:26:8E:EA
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2d:34:34:0e:b8:ee:24:e7:48:c4:b7:9b:0a:4c:49:5f:ec:
7b:0b:f1:cf:e5:da:b2:f1:62:27:1d:89:e0:e2:88:0e:84:aa:
b3:d9:b3:5f:3e:6e:be:55:fe:e9:8d:1d:31:50:d7:9a:a4:75:
4b:0d:a9:dc:42:0c:23:57:cb:3a:66:0f:f2:6d:fc:e1:c6:da:
96:19:26:ed:9e:92:af:3a:f9:ca:50:3c:b9:dc:e8:73:dc:7d:
8b:a8:31:b3:d8:bf:1f:be:ba:04:c6:84:28:2f:e1:8f:3b:7f:
27:a6:91:4c:fa:5e:96:91:e0:a4:9d:32:c8:6d:e5:cb:17:fb:
10:00:bd:3f:17:bb:a8:ed:8d:82:7c:ce:0c:7f:e8:fe:bc:30:
8c:85:63:1d:bb:64:37:cd:39:ec:80:92:e4:b9:7a:c6:33:90:
9a:c5:31:f2:0c:24:30:38:af:e4:a8:b9:26:6b:8e:83:57:8d:
25:55:43:c8:3c:d2:81:e3:1e:54:49:5d:17:5a:71:f5:b6:86:
87:b1:ca:98:03:10:95:3d:02:9f:c3:0b:3c:b9:ea:d8:d4:74:
89:c1:de:c0:1c:84:9a:8b:9c:a9:f8:b1:ce:63:c1:c9:25:de:
13:d6:8a:8b:35:61:d5:e8:f1:79:cb:f2:92:a0:24:7f:64:88:
e7:4a:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:10 2026 by rpki-client