Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: voOJU1TdnnYNJvyM0y7nIeh3upUetakQ/IEmupcBqh4=
Subject key identifier: AE:02:E9:05:7F:99:BF:46:B2:FE:8F:D0:E4:DB:DE:1A:31:59:7D:23
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019CAC47022168C23EBA4C47C6ED7EB124DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: F/0uE0ji7LbxePEsFlwaaZ5t3ItOlB4D/j35IaFAsd8=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: SyWBqT58dPR944ENyBXecfRLiu0.roa (hash: nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:02:21:68:c2:3e:ba:4c:47:c6:ed:7e:b1:24:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=ae02e9057f99bf46b2fe8fd0e4dbde1a31597d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:37:2e:14:4e:b6:69:77:bf:f3:25:6d:e7:
60:78:ac:d8:fa:ef:53:2f:f2:c1:c5:10:e5:6d:51:
9f:09:d8:e9:b5:65:90:22:9e:15:4a:e9:1e:05:d2:
aa:98:cd:98:1b:ef:cb:8c:24:16:d0:1f:bc:90:65:
47:a8:fd:a3:ac:a9:e3:9d:5e:7c:8c:ab:52:ed:fe:
b9:9f:10:71:c7:24:a1:44:43:dd:1a:e2:24:25:54:
cf:5b:1f:18:be:70:e9:9b:2a:b8:d2:f0:c0:37:b0:
f6:b7:77:1f:68:31:94:3d:93:2c:71:cf:df:19:c2:
df:92:48:54:16:5d:c6:5c:c3:ce:25:99:fd:e7:02:
96:9a:4a:04:1b:46:cf:fe:a2:0d:a0:01:6b:a6:a2:
1d:72:fc:f9:a3:9c:84:99:db:ea:cc:68:1c:2d:e7:
5b:db:a4:0b:38:d3:f6:ad:87:8c:f2:db:22:7a:09:
46:24:ee:ba:85:bc:de:d9:06:ac:13:96:45:23:1e:
12:e3:ec:20:10:a1:92:c7:6b:f3:d1:de:ff:f3:83:
3e:27:3c:bd:e4:62:9c:19:7b:4b:1c:73:d9:60:6c:
1d:12:ab:4c:b5:5e:e9:89:03:2d:de:a6:13:5a:6a:
d7:30:8b:55:cb:c9:72:2c:ce:04:5b:62:f2:f1:ce:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:E9:05:7F:99:BF:46:B2:FE:8F:D0:E4:DB:DE:1A:31:59:7D:23
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:35:8a:9d:70:5f:49:93:a2:6d:85:c3:d2:af:dc:39:8d:92:
d1:e4:f4:1e:28:bb:48:60:b8:7b:a1:8b:b5:aa:a1:c6:87:c9:
4c:62:36:e9:8c:70:9f:9b:8f:26:c4:28:cc:68:39:5d:d9:bb:
95:d7:fb:7b:60:53:29:ef:8d:ce:e1:07:08:6e:ca:71:f4:fb:
9a:43:df:26:96:20:79:a1:64:bf:ff:cf:7b:c1:44:42:18:e5:
00:97:5e:79:3c:70:1a:b4:c8:58:6c:40:9f:c4:7b:9e:ab:1f:
fb:33:08:25:34:94:b8:76:a5:04:78:72:45:ec:d7:06:79:b6:
0e:7d:4d:bd:d0:f2:75:87:83:77:48:3e:ab:0c:1a:0d:89:0c:
8d:b4:27:ab:fc:da:36:ef:c8:c4:f6:f8:78:ee:4a:3a:ec:34:
22:fa:b9:04:27:a3:d7:46:62:fd:77:fb:36:c5:f3:00:e0:b8:
7a:62:32:fd:69:5c:04:58:55:de:c6:07:7f:a4:68:69:88:b2:
c6:3c:f4:8b:97:f1:40:46:00:d4:31:1e:bf:cd:06:bb:d5:cf:
5c:7b:6f:02:da:04:fa:a0:73:62:25:54:40:47:b9:95:83:b1:
bd:fe:f0:51:95:12:01:85:3f:72:dd:ff:78:45:75:b7:27:0f:
93:94:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:29:52 2026 by rpki-client