Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: XC9dUdkWZnyZLorGQbfpLgbM1mJxS0nVLmHMhAIZjuc=
Subject key identifier: 74:87:83:6F:F2:37:33:CF:F2:BD:77:1E:81:AB:1A:20:F5:02:26:38
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 019CADC73FEC037E38E385B4C4A127836B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: ZnqE5fU+SN+FUxMJfe+JhNr7ZrDKJ5CEcE8uyD4LSgA=)
2: efbWzI4vLv7w9yymutpUYEoHmxQ.roa (hash: sVnY8aUse9bK6BiMPQOWMiXwRdNobutAUkIY5Vkz5Cc=)
3: kRf-p4qBBa9Rvu5gFKi-QWl32VU.roa (hash: fVpCGOPHxxPr7Wk2f1pVCS7IR1cjhvdExLaBFxIvrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:3f:ec:03:7e:38:e3:85:b4:c4:a1:27:83:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=7487836ff23733cff2bd771e81ab1a20f5022638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:f1:97:6e:59:c7:aa:8a:5e:49:88:19:ab:
a5:03:ec:9b:cb:34:01:45:da:a1:2e:80:82:af:a1:
ef:73:af:1b:d1:28:d7:c9:21:db:7d:83:12:eb:52:
90:10:45:e9:e9:a5:73:7f:5f:81:ec:36:bc:ac:af:
66:d8:ce:6c:5e:ee:a1:d3:2c:ba:39:5c:10:9f:d6:
fd:7f:51:b1:4e:57:25:49:b5:8a:16:c7:bc:a7:03:
42:e6:fd:b1:4f:7f:c8:a2:7f:08:f0:33:2a:dc:58:
92:66:4c:ef:b8:0f:65:64:e5:41:80:fb:c5:e0:62:
a7:17:63:ce:05:d7:c9:6e:3d:d2:3c:c2:d1:35:c4:
b3:ee:1e:4e:b9:9b:1d:40:e7:29:f8:d7:89:08:36:
10:aa:9e:fb:c8:61:4a:4e:02:1c:a6:b0:b3:9e:ed:
3f:99:a6:a5:0c:5b:06:09:34:b4:3c:e6:3e:40:5f:
fc:b1:08:f2:b9:01:54:ee:cc:29:3e:e1:72:5c:3f:
43:c8:d6:cf:9b:a2:00:1e:ee:ce:8b:b4:cb:65:2a:
4c:bc:14:83:52:56:d9:b1:2d:38:cd:c0:38:ec:83:
46:43:74:51:ee:98:80:5d:37:26:a3:fd:db:41:3d:
89:09:78:d6:2e:3a:74:b8:38:0d:82:e6:22:2b:1d:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:83:6F:F2:37:33:CF:F2:BD:77:1E:81:AB:1A:20:F5:02:26:38
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7b:7d:e3:53:7b:94:42:52:87:4f:91:b8:cc:69:10:a4:95:
66:ff:0a:42:7d:d7:c9:86:82:af:54:8d:ce:ac:4c:22:db:e0:
2e:bf:bd:55:95:a9:ce:31:5b:dd:4b:c3:d4:32:d2:76:cd:3e:
da:08:13:3d:f7:9e:71:74:19:9e:b5:73:79:73:70:b5:36:2a:
4c:41:93:cc:ee:7a:88:c1:15:75:48:c8:95:64:57:ff:85:d1:
36:bc:11:0b:9a:ad:00:6e:0d:7d:69:23:8f:49:9c:e2:21:62:
5f:67:f4:29:d7:53:03:a9:c5:34:56:ee:ca:e5:ff:ae:95:2c:
53:30:a9:f6:30:6d:1a:80:6d:97:28:02:21:f9:36:e3:43:80:
fd:6b:ce:29:0a:cc:d8:84:d5:fd:93:d3:0a:1a:13:bb:28:05:
c2:83:c9:b8:52:37:be:c6:e5:4b:fa:54:10:2b:e2:19:ba:6e:
2e:09:58:c7:2b:e5:1b:03:30:bb:3a:27:2d:91:04:01:3c:11:
3a:61:ba:79:4a:76:07:e5:b5:0c:0e:64:4f:e4:6c:d4:70:0f:
e1:2a:e5:ff:b6:9a:eb:2c:5a:5f:55:eb:6b:ec:45:03:07:24:
23:2d:dd:b4:fb:76:7f:40:3e:d1:61:3b:35:2b:a5:64:36:c9:
37:fd:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:00 2026 by rpki-client