Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: s44Z7cgZdtI+UT5CbNgfp+d+NoY61gn2YPiHW9ul2Y0=
Subject key identifier: C4:E1:F7:F6:01:D1:CB:C3:C2:FC:BF:83:1D:97:3C:9C:8A:9D:4F:42
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019CAED9E5C1DFCB37CB3E3C12C8624F31DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 10A6
Signing time: Mon 02 Mar 2026 14:00:41 +0000
Manifest this update: Mon 02 Mar 2026 14:00:41 +0000
Manifest next update: Tue 03 Mar 2026 14:00:41 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: /Lhc9J/CqzB0/GbxXKknIRcELZ70ICH9zbmtRfFPVho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:e5:c1:df:cb:37:cb:3e:3c:12:c8:62:4f:31:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : Mar 3 14:00:41 2026 GMT
Subject: CN=c4e1f7f601d1cbc3c2fcbf831d973c9c8a9d4f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:27:1d:44:c9:40:f5:3c:05:6e:37:fb:37:
cd:4c:fc:d4:91:dc:c3:ce:8c:d0:55:1e:dc:0f:7c:
f3:c5:1d:dc:d0:80:81:64:49:5c:9c:62:e7:eb:c2:
92:90:a5:c1:17:6e:d1:e6:51:22:36:70:2b:54:fb:
05:7c:df:80:75:85:34:77:36:2f:cb:b9:1a:d6:84:
33:88:db:68:a8:cc:71:e4:a9:a9:58:d4:d4:94:f3:
03:fc:2b:24:ac:cc:9a:f2:57:16:68:ac:98:b6:27:
b6:65:d1:7b:bb:8e:4b:72:b7:cb:91:ab:de:95:89:
4f:16:44:62:a1:72:5a:04:39:16:7b:67:67:3f:53:
90:f5:32:dc:46:be:d9:14:1b:f3:93:c5:30:10:70:
ca:bc:9c:06:fc:b4:7b:3b:f3:de:f5:01:38:59:b1:
28:ce:e4:cf:43:c4:b3:ba:d9:c0:a7:fb:ea:ae:a7:
9a:2a:ef:22:c0:47:3b:0e:af:da:2b:ce:31:3d:bf:
6c:97:6f:06:07:2f:80:51:f6:4e:b8:2c:72:8e:2a:
05:96:d8:40:9b:c6:e8:1d:59:01:87:18:dd:b2:a2:
f8:a4:ee:a7:d0:c4:8e:51:5b:e4:5a:fd:7b:f5:25:
56:81:2f:06:21:50:0a:8a:b4:7d:6f:8c:16:de:78:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:F7:F6:01:D1:CB:C3:C2:FC:BF:83:1D:97:3C:9C:8A:9D:4F:42
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:c7:a0:35:d0:a2:03:c1:76:84:45:f6:0c:4d:62:14:e4:
90:0a:c5:f0:8c:a5:38:ff:60:b8:95:a9:a6:ef:9b:df:78:02:
e2:35:e1:57:86:0e:5d:02:e8:23:a0:38:52:bd:6a:eb:f9:25:
b5:b7:62:ea:94:86:c5:b8:bd:52:dd:97:1f:74:0c:9c:da:a4:
02:f8:a7:c1:14:ca:d8:a6:cc:0d:c5:c5:7e:89:7b:bd:50:15:
65:ff:84:5a:6c:2a:83:c5:f3:9d:7b:7c:06:cb:84:70:e0:df:
cd:6c:3a:1c:0c:20:59:ff:c0:ed:97:42:37:d8:8f:42:4e:36:
f1:84:40:d3:3c:4c:40:82:87:a9:89:31:47:ee:42:7a:2a:76:
e5:2b:27:99:34:b3:a0:e0:b7:d0:e1:b1:99:cf:b2:9e:88:a5:
7f:2d:1f:5f:e8:6f:47:79:4e:03:fc:9c:c7:e8:f7:91:ed:43:
71:fa:77:c9:62:15:12:75:b7:3e:1b:87:b8:4b:20:b1:6f:3e:
6d:02:9d:58:b8:4a:e2:85:7d:88:47:48:3d:cd:8b:a3:39:23:
7f:b3:a6:e8:62:08:21:a6:bb:13:68:49:25:51:85:ff:a3:d9:
24:06:cf:1b:b6:87:f5:64:b4:c5:a6:57:b7:b3:c9:c5:db:ab:
ac:f4:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:30 2026 by rpki-client