Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: VL6Pj1GFgWEfNXId3dHhYFEtjXeTDJU2iQmVtGcwVps=
Subject key identifier: 6F:71:11:82:64:A5:FF:F1:04:03:DC:8B:9C:BC:18:A9:12:6A:C7:C1
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 019CAB6B44578F915E59FF0065081E52AFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0F95
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: IbYCymJImHROlWolztqa8+n/CQ12ZLcmPv1how+3qV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:44:57:8f:91:5e:59:ff:00:65:08:1e:52:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=6f71118264a5fff10403dc8b9cbc18a9126ac7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:2f:43:a9:56:e6:0f:d6:ea:07:10:10:96:
84:23:d8:5c:ef:8c:ec:03:96:ec:bf:36:39:00:9b:
53:fa:af:5d:63:40:d5:6c:09:95:8d:33:f9:c4:26:
f4:4d:ae:5a:8b:98:df:09:a7:e9:e0:e1:f9:b0:37:
d7:51:94:2d:1e:3d:76:f3:b5:61:3d:32:88:d4:06:
22:1e:e1:29:6d:39:88:87:a7:d7:31:dc:cd:4c:11:
4a:cb:cb:45:74:9c:7a:a9:74:a9:65:8e:5c:15:22:
4e:89:64:a6:d2:c7:86:79:d0:c3:a8:88:20:7e:8a:
40:dc:4f:de:7b:73:6b:63:d0:0f:da:ac:63:f3:f2:
29:db:17:37:5a:dc:4d:19:75:89:f0:70:bc:59:46:
0d:a0:c0:b4:4f:18:cc:18:9d:77:18:b0:2f:2b:84:
2b:42:c2:06:c4:75:40:42:65:53:9f:34:a6:85:7d:
50:c4:e7:c5:3f:c2:a3:77:68:5b:3f:c1:7a:a0:b3:
7d:62:60:02:15:87:85:03:31:b5:bc:c7:33:04:89:
61:f7:a7:af:73:aa:a5:6c:af:75:d2:81:6a:e4:9e:
5f:72:39:4b:a9:17:21:0c:d7:36:bb:83:cf:9f:39:
20:89:f1:a8:4b:cf:4b:be:14:57:f9:5f:c8:c1:6f:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:11:82:64:A5:FF:F1:04:03:DC:8B:9C:BC:18:A9:12:6A:C7:C1
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:09:77:43:3a:c0:01:db:0a:5c:d8:02:6f:0f:6f:3c:34:c4:
57:24:a1:26:23:b4:dd:45:f1:7b:bc:d3:f4:c9:a8:7e:5c:f8:
f2:da:00:a8:ce:7f:4b:5a:8b:c3:6d:84:f5:29:08:36:ba:53:
cc:b0:56:e9:0e:d1:ea:cf:71:17:40:1f:fd:7e:00:50:5f:dd:
b4:3e:2b:0b:12:99:63:0f:4f:51:9a:27:eb:38:b1:88:73:13:
23:2b:ba:bc:36:84:f8:6c:76:30:5e:71:ff:e7:cb:04:25:01:
7a:7b:b9:b5:8a:ea:c5:5f:f6:22:08:c6:01:62:e7:2f:d5:5a:
0d:bd:a2:c1:78:f2:b8:59:d8:e6:b5:ad:21:45:7c:09:76:07:
80:d3:19:ed:11:68:2a:18:7e:da:7e:b0:06:23:16:b2:0b:73:
b5:51:54:22:15:b1:17:70:49:7f:49:e2:ba:be:61:67:d2:7a:
1e:14:38:1f:f3:bf:b3:be:42:f5:24:e7:ca:62:f5:9f:47:f6:
d7:08:67:45:93:7a:fe:dc:4d:6f:49:3b:85:89:df:50:5f:99:
36:50:85:af:b2:df:52:e3:01:52:94:e2:6d:ff:11:a1:10:94:
02:64:86:b4:96:56:ac:1e:65:88:e6:cc:b1:4e:28:73:24:2a:
4b:43:11:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0RXj5FeWf8AZQgeUq/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2UwODIxN2FjNmU2NjNjMDhkZDE2MThmNDlhZGE0ZWJl
NGZlZGMwHhcNMjYwMzAxMjIwMDU5WhcNMjYwMzAyMjIwMDU5WjAzMTEwLwYDVQQD
Eyg2ZjcxMTE4MjY0YTVmZmYxMDQwM2RjOGI5Y2JjMThhOTEyNmFjN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ovQ6lW5g/W6gcQEJaEI9hc74zs
A5bsvzY5AJtT+q9dY0DVbAmVjTP5xCb0Ta5ai5jfCafp4OH5sDfXUZQtHj1287Vh
PTKI1AYiHuEpbTmIh6fXMdzNTBFKy8tFdJx6qXSpZY5cFSJOiWSm0seGedDDqIgg
fopA3E/ee3NrY9AP2qxj8/Ip2xc3WtxNGXWJ8HC8WUYNoMC0TxjMGJ13GLAvK4Qr
QsIGxHVAQmVTnzSmhX1QxOfFP8Kjd2hbP8F6oLN9YmACFYeFAzG1vMczBIlh96ev
c6qlbK910oFq5J5fcjlLqRchDNc2u4PPnzkgifGoS89LvhRX+V/IwW91FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9xEYJkpf/xBAPci5y8GKkSasfBMB8GA1UdIwQY
MBaAFBfOCCF6xuZjwI3RYY9JraTr5P7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQt
YTgxMTczODdlYTM0LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQtYTgxMTczODdlYTM0
LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAl3QzrA
AdsKXNgCbw9vPDTEVyShJiO03UXxe7zT9Mmoflz48toAqM5/S1qLw22E9SkINrpT
zLBW6Q7R6s9xF0Af/X4AUF/dtD4rCxKZYw9PUZon6zixiHMTIyu6vDaE+Gx2MF5x
/+fLBCUBenu5tYrqxV/2IgjGAWLnL9VaDb2iwXjyuFnY5rWtIUV8CXYHgNMZ7RFo
Khh+2n6wBiMWsgtztVFUIhWxF3BJf0niur5hZ9J6HhQ4H/O/s75C9STnymL1n0f2
1whnRZN6/txNb0k7hYnfUF+ZNlCFr7LfUuMBUpTibf8RoRCUAmSGtJZWrB5liObM
sU4ocyQqS0MRig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:24 2026 by rpki-client