Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier: +p4fE/Qxr+Jv+Yu1rCaUiyWFcdRBKdwv1vn1r2Yyshg=
Subject key identifier: EA:52:9B:63:B2:56:66:9B:EA:17:71:B9:61:E5:8C:8E:0B:5A:EF:DE
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 01A0F3B18759BC7EA4A16F6111873D45FBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number: 0408
Signing time: Wed 30 Sep 2026 19:01:33 +0000
Manifest this update: Wed 30 Sep 2026 19:01:33 +0000
Manifest next update: Thu 01 Oct 2026 19:01:33 +0000
Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: a+vKQXnt/yeoAcxw96DUWFD8ZGZy+gjChU/gMGWioyw=)
2: pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa (hash: 25kq67NwiLZpvtq/lLKi0cW1juljgXPpgbg4/hkoeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:87:59:bc:7e:a4:a1:6f:61:11:87:3d:45:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Sep 30 19:01:33 2026 GMT
Not After : Oct 1 19:01:33 2026 GMT
Subject: CN=ea529b63b256669bea1771b961e58c8e0b5aefde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:c2:28:57:46:c1:f1:c3:45:0a:cf:b7:f5:
7e:ec:a2:d7:ad:50:4e:3c:40:a3:39:c3:96:cc:b3:
af:19:59:cc:d6:e7:d9:5f:6f:c0:81:54:c5:c7:5e:
b1:8b:00:ef:f8:46:fa:1a:03:8f:44:3e:f4:cf:de:
47:73:34:1f:77:90:c8:3b:3e:06:8d:d3:fb:de:d0:
e7:02:6d:1d:df:fe:a2:f4:68:9a:41:87:10:a5:24:
9f:f1:cf:e9:7c:86:80:b5:6f:fc:95:92:fb:0d:f4:
c4:32:8a:c3:11:b1:db:52:6b:53:14:f5:fb:df:59:
f7:4a:0a:25:f6:c1:2d:64:d5:80:36:45:93:da:a6:
af:bc:4b:20:cd:0a:ae:b2:6b:8e:83:83:69:0f:3a:
64:56:64:b7:89:0a:c5:fd:af:b3:5e:02:84:99:3f:
39:1c:34:c9:8e:13:60:aa:ac:57:bd:56:56:e6:92:
06:d2:41:3b:3a:69:72:c0:2d:f0:a9:ad:8b:ac:ce:
db:01:bc:0b:7f:6e:df:fd:83:f1:4e:de:b8:42:53:
28:f4:9b:90:46:29:7d:e6:bf:43:38:15:d6:70:f2:
98:69:f9:f6:1d:c2:24:0b:6b:1f:30:6c:1b:f7:5e:
c2:a3:61:44:44:0e:72:71:f8:27:91:1b:39:d5:6e:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:52:9B:63:B2:56:66:9B:EA:17:71:B9:61:E5:8C:8E:0B:5A:EF:DE
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:53:af:58:0a:36:55:1f:61:88:a8:20:f0:e3:d1:d1:e2:
7f:5e:9b:fb:57:9a:61:97:df:9a:64:d7:f9:dc:98:2c:de:96:
24:84:8f:d9:d6:65:55:5d:bf:ee:a4:4c:4d:85:2b:49:ba:a9:
be:23:10:01:04:1c:b4:42:7d:ab:f9:20:0f:9d:78:37:3a:04:
0c:98:c6:d1:72:8c:64:d6:a6:bf:c7:ab:85:20:4d:c8:1a:94:
3c:c0:16:c7:b7:e1:36:78:12:23:00:db:75:b2:b6:3c:7f:45:
93:6c:d1:18:d5:fa:03:94:ae:1c:51:51:e1:f5:32:5e:c5:e8:
ed:95:c6:1c:26:18:49:e6:f9:6d:eb:2e:6e:7a:50:42:1f:67:
07:12:f4:18:03:96:fc:6c:32:2a:ae:4e:25:14:97:0e:3d:01:
e8:d7:cc:36:76:1b:83:9f:bb:a3:7a:d4:ff:63:5f:87:18:74:
5c:ad:4d:8b:81:9d:a2:36:5d:a3:b9:4e:00:aa:25:34:2d:78:
eb:df:bb:fb:2a:91:7d:e3:09:76:fc:a0:7a:0b:fa:1d:a3:b3:
20:0f:e4:6c:a8:c2:71:38:50:bb:6d:71:d3:cc:c2:24:57:9e:
90:e5:97:75:40:ad:94:e1:e0:de:33:9b:3e:2e:e6:3f:7a:7b:
e5:60:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 23:40:24 2026 by rpki-client