Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: TX1/S/XyKCsBJP4d65xhgIUH7oCXvpjlhBHd5Tn2BuQ=
Subject key identifier: 0F:A6:FB:15:3B:60:75:E5:82:3E:EF:B2:1C:7E:0D:05:F0:72:30:B9
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019CAA21EAFB5A08E430C9E00F61C2AD5D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: J4plfy4WmfvUC1NbqkNxiR8JJJPYQ5RAFOxHdbVS0g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ea:fb:5a:08:e4:30:c9:e0:0f:61:c2:ad:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=0fa6fb153b6075e5823eefb21c7e0d05f07230b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:e6:21:ff:f7:40:ae:82:32:a5:eb:a1:dd:
20:8f:fd:c0:7f:e5:e5:2b:d3:b2:d3:ad:22:62:dd:
c6:54:36:93:42:71:0a:64:5a:ba:3f:ac:a9:bf:5d:
e4:bf:86:d9:80:8b:e5:c2:5d:89:bb:a3:39:1a:cf:
2b:70:f8:92:09:2a:a0:e6:8b:b4:74:0a:da:a8:56:
e6:f1:6c:19:2f:34:86:bd:43:3f:31:9e:65:14:c7:
2e:0e:52:76:79:83:26:0c:9a:b8:33:e5:d3:79:df:
35:96:bf:a2:be:90:dd:df:67:64:a1:7b:52:e9:f9:
6e:a0:94:df:78:f6:ae:a1:88:e1:48:c6:98:9b:84:
54:69:6c:f4:b7:4b:3b:77:91:0b:07:aa:5e:f6:8d:
3f:0b:bc:52:23:3c:16:97:10:8a:9b:b5:89:2e:1c:
44:72:d7:d3:c8:36:94:bc:66:9a:24:b8:3c:18:aa:
bd:f0:db:7f:af:6a:72:a3:ca:97:83:d3:ce:c3:93:
ef:df:a4:37:74:d7:b5:79:45:ee:6e:07:ac:58:63:
c4:3f:3c:f3:96:4c:d0:ad:a6:04:89:80:bf:b5:29:
4d:78:d3:46:6a:0c:69:1e:fa:98:8b:c2:95:f4:ca:
7d:6d:c0:95:01:af:f8:0e:c1:5e:83:5a:bd:46:60:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A6:FB:15:3B:60:75:E5:82:3E:EF:B2:1C:7E:0D:05:F0:72:30:B9
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:c5:02:ca:43:a8:19:ec:58:35:dd:18:df:54:7f:14:a7:
21:ad:fe:16:b6:1b:bb:05:ce:25:26:91:3f:87:2e:ed:02:0a:
8c:ce:72:ab:ab:01:0e:90:06:69:9e:3f:74:72:cd:b1:d1:c7:
60:3d:0f:ee:5f:37:4a:35:30:22:9d:6b:94:76:b3:49:3b:ab:
57:27:de:0b:e8:4b:c9:41:b7:e1:86:f7:7b:2e:5e:ba:ff:91:
2d:9b:9d:b8:e4:02:3b:a7:73:a2:d4:49:09:eb:52:a8:56:c5:
4d:76:90:d9:6a:ba:fa:b6:2d:48:74:24:21:23:e6:f9:f7:ce:
4c:5a:de:40:03:9e:c0:9a:03:ad:b0:53:7b:fa:26:ad:45:de:
61:bb:4c:5e:e5:2f:82:a4:a3:48:9c:62:cd:0e:c4:bb:b4:3f:
1f:6e:75:c3:e1:08:75:4a:8c:5b:ef:8f:bf:fe:b7:42:92:95:
a2:66:5b:1a:ba:32:b2:13:ad:2a:9c:d4:24:dd:ed:64:ec:58:
60:57:fd:26:51:41:7d:ae:a9:55:a2:42:6f:96:3f:4a:a3:c1:
b3:ef:92:63:cb:5f:65:55:59:90:22:5c:1e:96:34:c0:4d:59:
89:1b:c8:e8:60:f7:b0:fd:80:e9:d3:3a:78:cf:77:9b:89:9b:
fe:e6:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:03 2026 by rpki-client