Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier: yaM8HZDJ8gdR3tFVxVXp3dm+7/RRRixXyCh4W8qIUGc=
Subject key identifier: 02:88:FF:A7:4C:23:E6:1F:F9:EA:B8:52:60:65:41:98:92:0F:17:57
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial: 019CAAC66529B84335565E1ADE728FC409AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number: 0B32
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: jIs+y9N+PNl4c5CERttbLSXtYI6auidAtDz+oOBN59c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:65:29:b8:43:35:56:5e:1a:de:72:8f:c4:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=0288ffa74c23e61ff9eab85260654198920f1757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:1f:bc:7d:d5:19:b2:c3:30:d0:f7:3f:6b:
ce:09:58:af:ea:1a:08:4e:0b:9e:e5:15:8a:5a:22:
db:5c:68:d7:58:86:6b:2e:29:ea:84:53:9a:39:43:
cc:37:b2:2c:43:94:b7:df:c9:be:95:8b:a3:7f:ae:
ab:54:d5:7c:86:ab:4e:a9:4c:71:a0:80:ad:b5:19:
4b:c8:b8:59:64:0d:1f:74:5c:0c:d2:c9:e0:a6:82:
ef:a7:9c:0f:4f:06:1f:01:ed:27:86:8e:88:7c:6e:
81:7a:d2:da:84:9c:27:a4:7d:9c:3a:02:3d:c5:9f:
29:f4:e3:44:8c:fb:53:53:a0:f9:56:2c:fc:47:cf:
c3:46:68:ae:d4:1a:27:49:42:85:ba:91:bb:53:f6:
c0:42:3a:7f:ac:b0:83:96:bc:d7:7c:3f:9b:d0:8c:
c5:6c:91:ca:90:e1:a9:c5:34:91:c4:8d:01:77:e3:
9c:d7:08:fa:fe:81:5e:22:f3:f6:79:65:50:55:36:
2d:bb:bc:bb:08:fe:e7:47:28:73:20:c7:f7:ec:0f:
4a:e9:0b:13:93:da:72:e7:c7:b1:d9:5b:48:20:d0:
f3:29:28:1f:32:ee:84:25:00:8b:91:91:52:e3:c3:
8c:6c:1e:2c:1b:41:6b:68:58:1f:a3:70:0a:05:30:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:FF:A7:4C:23:E6:1F:F9:EA:B8:52:60:65:41:98:92:0F:17:57
X509v3 Authority Key Identifier:
keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8c:9c:4c:6a:9b:ce:9a:ac:9d:7b:5f:b4:42:4f:e8:a6:f4:
01:7d:12:bc:72:eb:f1:29:60:77:fb:ca:55:65:7a:2d:2b:95:
c4:9b:9c:bd:65:ee:75:06:c2:cc:c7:4f:15:b6:81:08:3d:28:
87:00:5d:e7:eb:b5:48:8d:50:89:31:91:9f:91:89:e4:b7:fb:
f8:8b:bb:5d:31:87:fe:b6:38:b2:e7:79:bc:a3:ca:4f:53:6d:
59:c7:eb:98:04:fd:12:26:25:fa:57:26:25:dc:5c:13:34:ac:
b2:44:dd:30:47:c3:8f:0a:09:1b:8e:34:f8:c7:07:67:b6:42:
18:ec:a5:d9:db:c3:c0:0a:e9:72:74:c8:dd:e0:35:b8:07:d6:
50:8f:3d:d2:7d:ed:08:24:36:69:23:ec:6e:80:75:b2:d7:50:
b2:7b:42:91:1a:f1:f2:0d:36:1d:d0:25:c7:22:29:68:45:0a:
2e:d7:57:68:36:a2:c2:20:93:c8:f1:a9:6c:cf:0e:c0:bf:96:
d2:8b:89:ad:f6:0a:7e:aa:0b:03:50:34:38:9b:b1:37:0b:25:
94:1d:5c:c9:67:1e:c8:52:2f:98:77:f0:f1:d7:ab:ae:23:52:
21:ad:5c:0b:5d:b7:29:44:92:a9:1f:d4:3f:02:84:10:e8:76:
ce:55:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:28 2026 by rpki-client