Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier: e18E7Ax4099RRri65BfgF2B/7DtOGjXookO2Vk8+PhM=
Subject key identifier: 8B:C5:C6:AD:D6:37:F8:62:E7:20:51:0D:DB:B1:67:A1:C3:E1:43:BB
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 01A0CFA4CF5916832E7E50D117D5DD3B1E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 19:01:19 +0000
Manifest this update: Wed 23 Sep 2026 19:01:19 +0000
Manifest next update: Thu 24 Sep 2026 19:01:19 +0000
Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: X0w4tEnIRPHOnw8TVct4hCICZdMHzZQR15FpsPfsso0=)
2: HUhbdTnE7t8fJLoxOZjIs_jPf-I.roa (hash: 0OTZgUH+NcfxFrfPCUIKiHj+PPgGKtMorANusm4HHuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:cf:59:16:83:2e:7e:50:d1:17:d5:dd:3b:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Sep 23 19:01:19 2026 GMT
Not After : Sep 24 19:01:19 2026 GMT
Subject: CN=8bc5c6add637f862e720510ddbb167a1c3e143bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:70:3e:96:26:bf:a6:e8:f3:9e:91:1f:6d:
2f:8d:f4:65:d0:67:23:b1:94:59:17:21:50:3c:18:
81:01:ba:90:73:2b:86:50:fc:c4:01:8d:cd:15:23:
aa:31:6d:65:3d:d6:c6:d6:f2:be:d9:7d:a2:66:b3:
1d:1e:d5:70:41:c8:7c:15:de:05:d4:3c:80:da:87:
16:e4:76:a3:37:ba:bd:5b:a7:c6:af:fc:0d:2d:f8:
88:24:69:45:04:13:3d:28:b1:ce:cd:99:78:59:a3:
9b:60:a2:ab:ad:4e:b2:5f:53:45:67:a7:60:45:78:
e7:1f:60:9a:69:7d:5f:74:8e:ea:93:bc:6a:22:2e:
d7:83:ba:4f:5c:8c:79:05:62:1e:c0:bf:25:ce:3a:
5c:4a:cd:76:e1:36:5e:5f:fc:30:ba:8e:4b:26:56:
f1:27:48:d0:67:d9:ae:b6:9b:a2:0a:23:f8:cf:9a:
75:d5:01:3c:cf:32:08:fb:7e:f6:93:6d:99:e2:69:
de:9e:23:01:8c:f7:a0:b3:63:c1:6c:77:9c:64:aa:
73:b5:cb:dd:cf:ba:03:a9:1a:fa:b8:8e:35:df:ce:
a6:6b:07:b9:34:31:25:d6:06:d4:ac:74:62:58:1c:
ee:e6:c7:4c:e7:83:ac:30:b1:25:64:b6:61:2d:0f:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:C6:AD:D6:37:F8:62:E7:20:51:0D:DB:B1:67:A1:C3:E1:43:BB
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:b4:bb:b3:c1:a7:bf:bb:90:86:08:71:f7:d2:0b:a6:14:
d9:e5:e8:a4:32:d0:16:01:92:bf:d6:73:d1:00:e6:06:a2:92:
c0:44:85:cc:6a:1a:15:c2:c0:bc:22:b3:c3:82:ac:a3:44:b6:
39:99:96:54:1c:a6:0c:83:4c:3e:a5:f8:59:e5:50:79:9b:db:
29:8b:b8:5e:41:62:ab:0f:97:51:9c:30:16:ec:2d:fd:d4:5d:
11:4c:80:47:b0:cf:2d:e5:d3:65:da:50:74:f2:a7:a5:01:9f:
08:f7:98:2d:45:12:1a:f3:1d:2a:82:52:dd:f5:36:e4:a5:9a:
e7:b2:a2:62:c5:35:55:15:11:14:d5:81:e6:c2:69:08:ae:7c:
c5:8a:c5:48:ef:de:d1:d0:6e:99:5b:c6:2f:b3:40:6e:c0:7b:
59:ee:34:20:1b:1a:c7:4c:1e:91:75:e2:2b:06:d6:b9:0e:7d:
59:7e:e8:e7:7f:de:cb:fe:ce:b4:00:18:3d:5a:9b:64:e0:d6:
a8:a4:f5:14:53:1d:bd:57:13:0c:85:ce:36:05:f2:53:ce:c1:
0c:49:00:c3:7e:1e:f9:d9:9d:67:67:a5:2f:34:dd:17:a8:5a:
bf:50:4c:55:e4:e2:b0:43:50:81:ac:f8:05:f8:59:17:29:98:
10:eb:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:26:30 2026 by rpki-client