Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: /cTj7YwC/sZV0bv7Jy547jSnT+rGsR6g7O+N+VG4cig=
Subject key identifier: 30:60:90:71:F2:EC:1E:48:D8:6E:D4:4D:85:28:CD:9D:AB:85:03:C7
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019CABD9ADB86EB27CD5F2B6A99B2AD51550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: 28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa (hash: CSosAC0RkIivRtuzYTWYojYmIhFl5s25SMxfOZ9APWQ=)
2: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: gAPEri6QJuVX7ikr6cG1XkkSFJinK62CNn2obR51SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ad:b8:6e:b2:7c:d5:f2:b6:a9:9b:2a:d5:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=30609071f2ec1e48d86ed44d8528cd9dab8503c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:3d:a2:70:5d:db:61:ad:cb:81:5b:f8:51:
95:c1:77:49:1f:3d:67:e3:96:73:21:83:ad:27:e0:
ac:95:6e:c7:1e:9b:26:73:ac:e3:66:75:8e:cd:47:
40:b9:c8:1c:54:9c:f5:d7:95:2c:79:5a:66:8c:e6:
01:67:71:08:7c:31:10:5f:dc:3a:73:7f:c1:84:4b:
b9:19:af:97:6d:f5:6b:ef:a5:7f:e1:fd:f7:b6:c9:
6f:b5:9f:7b:23:84:4c:c9:81:86:e1:08:57:06:a6:
98:bc:2b:ff:2b:ee:cb:fb:11:08:93:9a:73:8b:34:
24:0a:8a:39:1e:62:e4:b5:c8:36:77:f2:c0:8c:e5:
f4:89:22:2d:e6:e0:0e:c6:5c:de:26:16:86:08:f5:
bc:33:43:95:9d:2e:52:94:1e:3b:82:65:25:79:19:
ad:eb:b6:a4:8d:9a:59:5e:f6:21:9b:a9:b9:aa:27:
50:6a:db:67:35:87:3b:16:5f:fa:c6:e2:3d:55:d8:
3b:fa:5f:0d:cd:df:25:f1:d2:bb:c0:58:c0:63:14:
95:73:59:49:81:d7:06:0e:df:21:2a:61:d3:93:e9:
7b:e8:8a:ca:b4:35:31:68:b0:d7:75:33:c4:88:17:
75:04:f5:5a:59:0d:86:3a:96:21:04:82:22:e4:4e:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:90:71:F2:EC:1E:48:D8:6E:D4:4D:85:28:CD:9D:AB:85:03:C7
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:55:05:c2:ab:c8:03:6a:a2:6c:62:b3:82:77:02:ad:f0:
a3:3d:8a:d2:27:5a:ad:d6:af:0a:62:df:e6:86:67:2f:f2:2c:
1e:4e:15:b7:b0:ff:11:3f:d7:a3:64:14:22:58:7d:d1:51:6a:
e9:10:2c:cf:89:e2:ee:0c:f1:14:8e:64:05:ad:9e:22:e1:23:
44:7c:e3:a8:2b:ad:6e:3c:90:9d:c7:90:d8:09:2f:16:48:23:
9c:9c:b9:ce:af:ae:1b:3f:b1:43:d1:6b:27:e9:9b:80:1e:b0:
67:61:26:14:bc:2e:c9:01:d3:a1:11:b2:0d:1e:a2:85:bc:bb:
b6:d8:a2:8b:5d:3e:c0:cc:22:88:57:0d:bb:0d:dd:b4:1d:0a:
0f:18:d4:54:b1:e8:ea:8a:91:2f:cb:21:0e:a5:c9:03:1d:c4:
8f:14:4a:b9:64:1a:cb:5e:41:c2:da:bb:3a:90:9b:84:2d:b4:
54:8c:0d:fc:dc:5a:14:85:33:99:11:06:9c:fa:34:48:4a:a7:
eb:0f:f2:7c:20:6f:b9:93:ef:33:90:e8:4c:0a:35:9d:13:37:
be:df:51:b4:bb:c4:57:2d:ee:df:88:23:eb:f9:6d:6e:0b:63:
27:aa:23:8b:84:2d:b3:4d:1f:0a:10:cb:a6:cd:01:a5:01:ab:
f4:4c:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:40 2026 by rpki-client