Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: EJQ78g1YPCqpd0xrBgEHKwbeeCf4Ox/wklTZNvcpC6A=
Subject key identifier: 00:DE:DF:04:CD:64:BE:BE:09:0C:16:7D:14:29:D0:5D:11:2D:12:02
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 019D98F4668540EC4DD14E15BF55E8D94EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 1010
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: +FvJOdN8hudcD8VDYddRkb7OZBX9HgSByaIE6+ycgMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:66:85:40:ec:4d:d1:4e:15:bf:55:e8:d9:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=00dedf04cd64bebe090c167d1429d05d112d1202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:52:1d:ad:60:0e:f6:d5:73:a2:22:bb:6c:
51:08:07:cc:80:f9:58:48:e5:e8:96:7c:9f:e9:3e:
5d:9b:fc:bf:83:8b:71:b7:ae:46:89:f0:dd:f5:2d:
41:5c:66:72:cd:75:57:b2:64:c3:3f:b9:97:f0:a5:
d0:ce:22:73:32:1f:86:67:d4:7e:69:85:ff:8c:de:
4c:cd:64:4b:16:81:89:86:bc:d1:2d:e2:32:aa:8e:
6a:f7:9f:2a:02:e4:5d:05:a5:16:69:17:4c:04:bf:
7c:a4:6c:26:ec:5e:9c:f1:60:1a:5c:cb:83:97:62:
47:5a:3b:63:da:cd:c9:42:7f:b0:03:15:4d:ee:ad:
72:fe:18:e8:12:3a:90:0b:94:07:4b:6a:f5:45:3d:
0f:62:bf:d5:2c:5a:53:f8:2b:45:38:1a:57:85:d5:
1f:47:17:6f:9f:24:a0:14:cd:2c:aa:46:89:26:f6:
3a:77:84:9d:7b:fe:66:8c:94:25:1b:05:32:61:25:
be:4d:43:c6:ba:3a:af:8b:48:e4:64:cb:ae:96:fc:
5d:e7:81:2e:e8:aa:f4:5a:a8:83:d0:e9:ad:1a:8d:
ab:85:06:4e:40:a0:a4:1b:eb:1c:5f:ab:a4:1d:f4:
1a:af:26:29:c4:49:94:37:5b:86:56:62:38:00:a7:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:DF:04:CD:64:BE:BE:09:0C:16:7D:14:29:D0:5D:11:2D:12:02
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:79:19:9e:5c:76:71:be:6c:f2:45:15:d1:a2:9c:c2:20:
3e:89:4a:5b:d1:b5:04:3d:bc:f4:1c:86:29:c5:7e:d8:63:e0:
91:96:d5:9f:fc:a5:0e:43:0f:d2:5e:70:c0:eb:a8:31:6e:d9:
03:c8:5f:f9:95:63:f9:8a:7b:05:18:88:46:94:80:0d:50:6c:
52:1f:6b:ff:55:00:54:19:24:e0:cb:7b:37:bd:e8:b0:b4:95:
7d:3d:99:44:a1:80:7d:84:4d:7e:a8:73:2e:96:7c:e8:e6:be:
a1:c1:f9:27:ad:fe:bc:a2:a6:cf:11:ef:a4:c1:9f:97:9d:27:
ca:03:dc:5b:77:c4:54:53:d2:8a:3d:09:e2:7d:fa:b6:bc:39:
92:7a:85:28:13:20:10:bd:67:ef:e0:43:99:10:07:0e:bb:94:
75:06:e7:ab:4c:ce:ad:35:d4:b0:58:63:08:40:99:cf:0a:9f:
6d:80:96:83:ae:95:54:65:16:1e:5f:c4:6c:ee:14:20:7b:47:
f7:17:d4:52:42:96:93:fa:e2:62:b4:47:11:8d:e2:45:72:d2:
4a:0b:04:7a:12:9d:f7:bb:e4:04:0a:09:ea:bf:ce:26:40:2c:
5b:1e:b7:10:f4:72:3a:2e:eb:4c:29:12:64:16:2a:2f:0f:15:
e5:af:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:13 2026 by rpki-client