Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: nawoed8sRRdGIeNbzAJuHHKJLP6tLWkx/9JPZFulrws=
Subject key identifier: 40:A0:E0:42:1C:CF:D8:F1:BB:62:5D:20:CD:7E:A3:AC:C4:E5:A1:68
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01A0EB53199EFF92B9E6EF182E3CA6CE2785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 04:01:26 +0000
Manifest this update: Tue 29 Sep 2026 04:01:26 +0000
Manifest next update: Wed 30 Sep 2026 04:01:26 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: sCvesxXJeilrk20bcxAODXp3zJqrbGutSK0iy72GREw=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:19:9e:ff:92:b9:e6:ef:18:2e:3c:a6:ce:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Sep 29 04:01:26 2026 GMT
Not After : Sep 30 04:01:26 2026 GMT
Subject: CN=40a0e0421ccfd8f1bb625d20cd7ea3acc4e5a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:e8:c8:21:49:0c:27:99:ca:2e:20:57:c6:
17:70:d6:61:de:77:35:da:ed:2c:d5:20:2b:4f:78:
e7:90:53:93:20:f7:51:30:fa:b2:d1:88:4c:29:cb:
6a:4c:f4:d8:eb:50:5b:68:e5:d9:77:8b:db:33:59:
cb:ad:7d:59:5f:a1:52:57:78:bf:47:2d:30:e6:69:
b8:ac:fa:36:79:4c:fb:d1:e0:e0:6d:de:46:13:c5:
b3:3a:ab:92:ef:12:0d:96:61:df:aa:86:d7:61:2c:
ec:12:31:bb:3f:37:96:4f:29:2d:51:da:14:3e:d5:
91:90:60:6f:a9:41:6a:5b:0a:69:71:43:e8:fc:87:
91:74:f0:aa:d4:69:78:13:1d:8e:81:61:3c:90:51:
f2:15:a3:84:a5:4f:83:a9:ad:b2:1c:83:42:af:bf:
36:0d:d2:d2:a0:57:5c:0f:bd:6f:5c:89:5a:3b:82:
0e:a5:d3:1b:37:48:48:3e:b3:89:81:c2:09:85:7a:
c3:7c:82:45:44:71:a7:bd:4a:cb:50:45:64:e9:92:
64:d8:bb:80:bf:02:2a:f5:32:a3:ce:7d:4f:ab:df:
de:07:3f:9d:92:d5:6e:b8:27:46:89:b0:45:04:1d:
58:98:ff:fe:9e:b9:0a:6e:19:81:d1:03:0f:bc:c6:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:E0:42:1C:CF:D8:F1:BB:62:5D:20:CD:7E:A3:AC:C4:E5:A1:68
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8a:27:da:13:6b:21:92:ae:9b:11:77:88:ca:4f:7b:ed:59:
9d:9b:af:9d:d1:9c:35:bb:9c:9f:a4:55:2c:e9:d7:75:cc:22:
f4:f4:d3:7e:ae:94:e5:ce:bf:59:95:88:80:a5:62:11:7e:8d:
3c:f3:c7:89:25:be:b7:4a:10:5c:fe:1e:26:f0:22:6c:5a:85:
7e:7d:a8:cc:0a:a3:03:30:1a:aa:a3:b8:f9:d9:0a:20:0d:ae:
c8:cd:c5:4d:56:61:a2:95:5a:d0:7c:be:b5:59:6e:e5:4e:6b:
f1:6a:04:a5:c3:60:a7:ac:1c:23:1d:3d:51:89:9c:9d:c6:1e:
49:ae:94:57:5a:83:55:4b:eb:18:3e:04:a3:a2:6f:78:b0:7b:
fd:95:57:e4:d7:fd:65:26:2c:41:fd:ce:16:e0:8b:ec:40:9b:
92:1b:44:c5:08:e6:90:9a:1a:04:09:65:31:74:e9:ec:0a:a3:
98:f2:15:14:ff:11:72:da:b4:57:3b:79:b8:79:79:c7:39:04:
58:ba:26:dc:16:e4:e4:20:b1:cd:5f:75:e9:f7:fc:f6:d0:02:
a3:e1:e3:5e:93:e5:03:b2:c9:f6:df:90:b5:2c:36:83:41:6e:
17:de:ac:d9:a8:ee:43:0f:32:90:df:b2:a9:22:5b:fb:54:5f:
0a:8a:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:53:43 2026 by rpki-client