Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: TE3bxxqr1uJlshc3ys7P6VLAe8lfeCi5Pp1O+Ld9joo=
Subject key identifier: C2:73:A4:9F:15:38:BF:F4:67:A2:C5:F1:62:36:51:B2:D1:71:B8:E4
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019CAA58FD2C157F4349EC75CE25018775AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: sBIrnj5ilJWFs7oh9+c92tqcTPKsGYE6TyU+IESMenQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fd:2c:15:7f:43:49:ec:75:ce:25:01:87:75:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=c273a49f1538bff467a2c5f1623651b2d171b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:46:3a:96:9a:f9:6c:5e:e6:c8:6e:33:fb:
89:97:cb:46:25:df:59:96:ac:f7:1e:01:6c:e6:85:
a0:95:30:c4:df:cc:28:c4:80:62:94:24:63:8b:39:
4e:f6:73:ed:59:56:27:c4:c3:b1:a1:a5:d1:a8:4a:
46:4a:47:08:87:af:e2:c4:30:86:f3:8f:6e:bc:c3:
fc:d0:23:bf:57:07:f1:60:b8:53:2c:ec:0f:73:43:
fd:7f:f4:f4:d0:65:f3:03:5d:fe:03:2d:7d:63:3e:
3b:85:f8:23:9b:fd:f7:12:66:e7:4d:f9:a3:42:28:
68:5b:54:68:bb:f6:b1:e3:20:da:6f:62:c6:bf:6a:
8b:de:59:9d:d1:0b:9e:f4:14:5f:c8:db:23:e2:ce:
b3:81:26:1a:f6:86:a1:c7:05:f0:da:8f:f4:4c:0a:
63:29:df:b6:62:ca:08:37:f7:56:83:6f:9c:db:e3:
3c:60:b6:19:c0:b0:29:b4:29:d7:39:f6:2d:47:f1:
1a:fb:67:6d:e3:fe:db:4f:00:36:68:49:0b:95:78:
82:a9:f8:0e:2c:63:7f:65:c0:6b:de:40:da:2d:11:
7c:ed:e2:e6:48:73:7e:2f:a6:c8:fc:a2:67:cd:a6:
c2:76:95:fe:33:d0:a9:4d:b3:3c:5c:97:9d:b5:b4:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:A4:9F:15:38:BF:F4:67:A2:C5:F1:62:36:51:B2:D1:71:B8:E4
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:02:9c:e9:d1:99:f9:ae:b8:a7:22:da:47:bf:3f:eb:2b:68:
3a:d6:18:36:55:7f:dc:ac:af:7e:a9:f1:a2:3d:77:54:3a:95:
68:75:79:ae:ad:4f:c0:ea:ac:69:96:79:4d:95:7f:a5:56:87:
e5:c9:0a:79:fc:a7:ce:83:87:4a:b2:8e:00:d8:e2:1e:49:7a:
5b:44:6e:9a:da:67:dc:58:25:ed:87:f9:9c:3e:29:61:11:cb:
1c:89:fb:19:ad:ee:54:aa:36:04:6d:df:cc:c3:af:c5:37:5f:
57:74:80:1e:b9:47:d9:6b:47:9d:01:bb:0f:71:14:38:b6:2a:
c1:fb:d9:e7:d4:40:60:0d:ec:7c:cb:b3:3c:55:b4:c7:be:f7:
15:51:3b:3a:15:dd:1e:e5:95:17:e2:84:01:35:f3:2a:0d:4f:
61:f8:52:81:0d:01:d4:13:40:d3:9c:ad:4a:46:17:eb:9f:02:
e1:40:d1:5b:9a:c0:e5:e1:47:bc:60:42:27:1b:ac:0a:b5:c8:
29:1a:ae:4e:00:51:87:00:39:07:a6:2f:22:4b:f1:56:29:bb:
96:27:f1:bc:eb:04:c7:a4:cc:9c:67:4d:5e:1e:67:cb:b4:93:
a5:c5:7d:8b:ff:b5:70:8c:65:8c:8d:9e:91:56:e2:92:a9:dc:
cf:0e:4f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWP0sFX9DSex1ziUBh3WuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjYwMzAxMTcwMTI0WhcNMjYwMzAyMTcwMTI0WjAzMTEwLwYDVQQD
EyhjMjczYTQ5ZjE1MzhiZmY0NjdhMmM1ZjE2MjM2NTFiMmQxNzFiOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxGOpaa+Wxe5shuM/uJl8tGJd9Z
lqz3HgFs5oWglTDE38woxIBilCRjizlO9nPtWVYnxMOxoaXRqEpGSkcIh6/ixDCG
849uvMP80CO/VwfxYLhTLOwPc0P9f/T00GXzA13+Ay19Yz47hfgjm/33EmbnTfmj
QihoW1Rou/ax4yDab2LGv2qL3lmd0Que9BRfyNsj4s6zgSYa9oahxwXw2o/0TApj
Kd+2YsoIN/dWg2+c2+M8YLYZwLAptCnXOfYtR/Ea+2dt4/7bTwA2aEkLlXiCqfgO
LGN/ZcBr3kDaLRF87eLmSHN+L6bI/KJnzabCdpX+M9CpTbM8XJedtbTCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJzpJ8VOL/0Z6LF8WI2UbLRcbjkMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQKc6dGZ
+a64pyLaR78/6ytoOtYYNlV/3Kyvfqnxoj13VDqVaHV5rq1PwOqsaZZ5TZV/pVaH
5ckKefynzoOHSrKOANjiHkl6W0Rumtpn3Fgl7Yf5nD4pYRHLHIn7Ga3uVKo2BG3f
zMOvxTdfV3SAHrlH2WtHnQG7D3EUOLYqwfvZ59RAYA3sfMuzPFW0x773FVE7OhXd
HuWVF+KEATXzKg1PYfhSgQ0B1BNA05ytSkYX658C4UDRW5rA5eFHvGBCJxusCrXI
KRquTgBRhwA5B6YvIkvxVim7lifxvOsEx6TMnGdNXh5ny7STpcV9i/+1cIxljI2e
kVbikqnczw5PBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:06 2026 by rpki-client