Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: safxlY+Ai9t+WlEq7l9ch76vdq4dNjeu50ZvmQ80dr4=
Subject key identifier: 4F:69:41:7E:23:7A:39:D8:3C:66:12:48:E0:A0:A1:2C:6C:68:B8:CB
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019D99997DD71D12A203AFC9AC192D7C6C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: xIx1yYKFWgT5ogk2Dl/0ZF+wkh1lp2q2We9Xu7+p/pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7d:d7:1d:12:a2:03:af:c9:ac:19:2d:7c:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=4f69417e237a39d83c661248e0a0a12c6c68b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:5e:7f:be:85:f6:6d:e5:94:b6:15:df:c5:
87:fc:f6:cd:68:73:a0:bc:ca:c2:b3:c3:36:d1:f8:
8e:cc:82:eb:be:49:ba:6f:2c:51:46:74:df:7c:14:
38:15:17:54:67:c2:0b:63:d9:ee:4d:7f:a6:b8:25:
1e:98:16:ef:31:e5:74:cb:4b:bb:34:61:26:b2:05:
88:bf:fb:e3:c8:cb:6a:77:57:e4:79:46:34:25:27:
f4:d2:34:2b:ae:a7:95:af:7d:a0:c0:0b:a5:02:a9:
51:74:b1:75:f8:dc:87:51:37:92:47:b4:25:b4:ba:
8a:e7:1b:ab:2b:a1:2d:1b:90:52:7c:a5:d3:22:ac:
a4:34:d8:55:27:ae:5e:11:06:96:0b:9b:46:2c:de:
4c:63:15:2a:e5:8c:73:25:51:8e:df:f7:5f:0e:5e:
23:fb:4e:2e:97:aa:fa:1b:63:c7:7d:dd:da:22:b0:
3f:91:b7:89:31:93:a7:4e:2a:a4:d4:61:0f:ff:f8:
9d:4c:54:f8:aa:56:c4:be:13:df:9f:09:78:13:8b:
f0:78:af:b0:19:82:a5:0f:be:26:8a:71:86:a9:d3:
ea:4e:d1:57:8f:6a:2c:29:e3:2e:0b:d5:11:dd:83:
50:92:79:5b:7c:a1:6f:ee:84:55:c2:40:65:5f:98:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:41:7E:23:7A:39:D8:3C:66:12:48:E0:A0:A1:2C:6C:68:B8:CB
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:f2:3b:17:7d:e4:a9:46:c4:49:66:e2:0b:59:f3:30:f8:
5d:51:c6:d0:04:33:4f:25:22:7d:c5:16:a8:47:c4:7f:9a:41:
ca:96:7b:e7:cc:63:b7:19:0b:07:7d:94:0e:b1:b2:f6:56:4c:
f9:1c:fb:31:d4:34:19:2f:c3:54:29:10:79:63:5a:be:78:5d:
72:df:43:ec:cd:56:23:86:a8:36:8e:b2:7f:2e:cb:6b:98:76:
82:f8:54:b0:dd:29:92:a3:82:01:cb:ca:9f:a8:49:3b:72:4c:
3c:dc:73:c3:5f:36:0f:1c:b4:dd:64:8b:eb:88:96:6a:f5:d7:
4f:ce:4f:fa:6a:b3:ac:fb:0f:ab:0f:f3:e9:cf:77:59:1f:78:
08:87:2b:b3:bf:35:07:8a:96:a2:36:c5:63:b2:1f:97:54:80:
8a:6e:e3:09:88:83:f5:34:47:10:7b:85:c8:de:65:bf:78:90:
12:7d:c3:e6:5d:4e:c9:d7:3e:d5:52:99:17:91:ef:38:58:c3:
b3:af:60:be:3b:93:92:6c:3e:6f:6e:c3:8a:f0:e8:0c:4e:d5:
6c:6f:5a:dd:04:b8:63:55:b0:6f:62:f9:d8:c9:a4:1b:51:8b:
c2:35:82:41:48:31:81:3b:a0:cb:39:eb:65:e0:1b:99:b2:48:
1c:26:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:23 2026 by rpki-client