Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: Onj8O1MpqlopMCI7TscQx+wRmOxLbUHpBV/sAS+yQ/w=
Subject key identifier: D6:BB:55:74:62:B4:AC:17:FD:88:E5:F8:FA:62:7E:0B:E7:11:B0:23
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 019CABD9BF543FBC2148A22775067B364DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 156F
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: 7ZeEPnq8qAGWzbg0g_GL99T2lWE.roa (hash: xOUCqAoyq3bkCXhWZ2R4X5JpC2BDM2bVuKtzDaEPVbU=)
2: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: w1ueJklaQ2/fvJJqgSwFg/xhRZHAKITtMDzlCbjS7ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bf:54:3f:bc:21:48:a2:27:75:06:7b:36:4d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=d6bb557462b4ac17fd88e5f8fa627e0be711b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:ec:01:c9:75:67:59:07:da:ce:15:39:14:
8f:18:b9:0b:fd:c2:3b:6d:0c:e8:bc:1f:c5:c6:f5:
36:d4:a4:ef:16:92:c6:51:5d:44:c6:7a:b2:f1:08:
f0:51:76:18:86:99:b3:8e:da:e4:d9:c3:22:06:6a:
f9:09:91:4d:4d:57:ff:ac:45:f0:09:8d:bd:81:35:
62:44:07:d2:06:cc:1f:80:49:71:80:12:4b:0b:a8:
47:1d:d2:c4:0d:5c:b2:7a:9a:1e:73:c2:73:c8:c3:
9d:0e:8b:dc:53:29:a1:66:a6:f5:bc:93:ca:b4:d7:
c0:74:cc:cf:01:05:fa:00:ef:3b:9c:eb:dc:7e:56:
cd:32:54:d1:bd:f9:bc:c3:d2:bb:40:00:7e:12:7f:
e1:a1:fc:bc:43:f0:71:de:43:d2:43:57:c6:b8:d3:
9c:4f:56:4a:fe:1f:f4:50:2c:3a:3a:09:72:9d:4b:
fb:28:5d:2f:de:03:9b:23:e7:c6:74:7f:c4:48:4a:
b1:e1:4d:62:49:dc:f3:42:f7:02:fb:46:49:e6:2c:
61:88:4d:00:c6:01:84:df:ae:b5:30:07:a9:38:e4:
c7:5b:43:28:bc:77:67:ce:a0:a5:04:c0:4f:13:58:
f3:61:3d:db:41:65:e3:7c:21:68:88:b3:33:cb:94:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:55:74:62:B4:AC:17:FD:88:E5:F8:FA:62:7E:0B:E7:11:B0:23
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b8:a9:17:68:27:ec:92:77:d7:d1:35:52:86:cd:f4:e1:89:
6c:80:d5:fd:db:37:50:23:57:6b:40:7a:f8:49:7b:c8:80:f5:
56:38:d4:97:32:f0:5f:c7:a0:0a:fa:73:15:29:21:d8:c2:a4:
ee:6c:60:28:c9:36:d2:f6:c5:dc:d5:04:fa:35:07:43:ff:b6:
37:38:3f:b0:9b:03:20:8a:1f:c2:f2:24:02:29:02:87:ac:45:
14:98:63:70:fb:31:03:a0:53:9e:cc:94:ff:d3:ad:45:ff:76:
c2:1e:7f:5e:a2:68:db:a8:7b:84:cc:c4:89:c3:eb:4a:19:4b:
61:fd:4f:c3:62:f3:c1:8a:d9:0f:a2:55:a5:b9:c3:36:00:b0:
0b:99:14:da:51:db:b5:e7:e3:b2:81:5b:65:ca:cd:f5:46:3a:
c6:6e:9a:9f:5c:05:06:da:73:b9:b5:8b:77:f9:aa:73:53:b2:
82:55:e9:53:c1:7f:a1:fc:d7:be:ac:a6:b1:e9:f9:c2:ce:81:
d5:1c:a3:d8:ea:55:81:cb:6f:d5:b0:eb:4a:2c:69:34:81:d8:
b0:9d:3a:5a:7a:00:30:5e:1c:b5:9d:54:3d:c0:ff:35:5c:ab:
24:40:16:5f:d1:77:a2:47:f1:ce:b4:03:7f:8b:6b:9f:62:b5:
c3:46:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:35 2026 by rpki-client