Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier: FXrY5+/ZVAVZSDkJUE3758RzavFnBcfuPWmgJObUkHk=
Subject key identifier: 51:57:76:23:83:23:46:5C:A7:28:99:78:C2:61:83:10:B5:C8:3F:3A
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 019CAB6AFE1E9069CA365C989FD6B90DBE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: BvZ7XhaV9Uy35pujMTGfEZzc+JFyJeHslTXEVMLBXwU=)
2: HUhbdTnE7t8fJLoxOZjIs_jPf-I.roa (hash: 0OTZgUH+NcfxFrfPCUIKiHj+PPgGKtMorANusm4HHuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fe:1e:90:69:ca:36:5c:98:9f:d6:b9:0d:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=515776238323465ca7289978c2618310b5c83f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:ba:1f:45:85:5a:e1:13:56:0c:39:46:69:
05:1f:2d:5a:c8:6f:bf:d9:34:41:48:53:13:e5:95:
aa:e5:3b:74:d3:ea:64:fc:ac:b4:ea:e6:27:e7:74:
b8:0b:64:ff:1a:b8:b2:eb:ac:15:6d:8d:81:56:98:
0b:a5:07:84:ec:a1:b3:c8:b9:34:a5:35:87:b5:ec:
b7:92:8d:3b:e3:14:33:de:26:f4:ef:18:94:4e:2f:
08:67:65:60:d8:83:1a:54:07:0b:33:9f:17:de:b3:
dc:52:42:60:ec:54:a2:c3:b7:0a:a9:fa:9f:f9:ae:
4e:68:a6:30:72:f9:4c:56:ad:10:5a:ee:04:dc:a9:
47:32:c5:2a:56:8d:2d:a6:2f:a6:73:d1:4b:fd:b0:
f9:ea:2a:d9:d6:c1:92:d2:05:30:0f:49:34:a1:7c:
40:29:c8:1a:63:71:9e:66:f9:40:90:1a:7b:cf:8f:
e3:e4:a7:0a:c8:99:8f:ef:3f:2b:fd:58:ed:ea:a9:
71:00:be:78:cc:82:24:f3:6e:1c:54:15:36:cb:0c:
03:55:f2:a9:6f:03:64:77:c5:61:b3:3b:ff:92:b2:
ea:01:05:0d:73:dc:10:33:ff:a2:16:22:d1:85:19:
fd:2e:b2:f5:e2:a9:a6:be:2a:fb:77:81:05:dd:9c:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:76:23:83:23:46:5C:A7:28:99:78:C2:61:83:10:B5:C8:3F:3A
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:65:f5:fd:63:d6:a2:14:44:d4:e6:bd:e9:2e:56:2e:2e:
85:a4:7e:05:70:4a:89:e6:8b:84:87:ab:7b:f8:33:dd:ac:d6:
64:26:8f:3b:98:8b:58:1b:6b:c5:05:37:a3:c3:e7:76:d8:fd:
62:d2:60:d4:13:28:29:29:d4:96:cf:3d:80:6b:a1:8b:b6:81:
69:46:a4:98:aa:4e:21:5b:1e:91:c2:0c:fe:75:5f:e0:d8:39:
07:e4:34:35:57:85:4e:44:d9:30:ff:46:0f:67:bf:ea:2d:7a:
1e:8c:81:fb:95:8b:48:03:de:b2:c2:84:1a:47:1c:b3:95:05:
5a:19:b6:40:f8:8c:eb:7e:c8:0e:f8:4e:79:cb:cb:3f:75:d1:
c7:47:90:45:13:d4:66:39:e0:40:d5:cf:f8:ad:99:8f:d8:1f:
b7:e8:39:70:c3:1b:b2:06:02:40:06:d2:2d:d0:6e:ed:14:d8:
0d:90:fe:a8:1e:d3:0d:f4:29:c2:22:04:77:5e:d9:30:f8:ef:
24:0b:1b:ff:d2:b8:e1:38:56:a9:00:99:79:b6:e0:e1:df:c3:
05:0c:68:b4:55:43:3e:ec:37:5e:7d:5b:fd:39:9a:ac:6e:01:
d2:62:89:df:9f:e7:61:8c:39:3e:35:33:5f:b6:b2:62:2b:dc:
37:cb:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:55 2026 by rpki-client