Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: ALLB6FNR2ZFilwGAYovSrLyTsIA+k4ZHNjMDgL6SuhI=
Subject key identifier: 81:6C:A0:C4:98:F1:F7:3F:B5:EB:9C:2B:AD:6C:A1:E7:71:7A:0F:5C
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 019D97E240983CD19ED123F7659F30440B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 20:01:20 +0000
Manifest this update: Thu 16 Apr 2026 20:01:20 +0000
Manifest next update: Fri 17 Apr 2026 20:01:20 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: 9g0sht+J2BT5J+ESsltxzrVIXY6v3lDxv2n04+aSe3g=)
2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:40:98:3c:d1:9e:d1:23:f7:65:9f:30:44:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Apr 16 20:01:20 2026 GMT
Not After : Apr 17 20:01:20 2026 GMT
Subject: CN=816ca0c498f1f73fb5eb9c2bad6ca1e7717a0f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:ad:a7:2c:a5:13:b6:24:fa:da:06:a6:a0:
05:11:4d:d2:74:ca:a5:68:df:46:1b:3a:56:aa:36:
95:4b:63:dd:63:a7:26:88:e3:29:79:d3:d5:ca:f7:
40:c6:bd:ce:f4:27:a8:d4:12:27:ed:73:a6:e9:81:
8f:ba:43:7f:76:e1:66:2d:f7:7c:ec:31:55:f0:dd:
b0:90:c8:c2:e6:5d:b4:83:5d:87:94:8b:c9:5c:40:
02:5a:ce:f0:ed:67:ea:92:ed:c0:1f:dd:a4:6c:c4:
bd:13:56:b6:e7:2f:d1:9c:93:50:24:65:60:56:85:
28:c1:49:6b:32:e4:4e:08:d6:3a:8c:ad:11:dc:f3:
82:18:a0:52:5f:d9:b8:79:0d:d6:3e:51:c3:8e:4d:
a0:1a:cb:91:fb:f7:23:e9:a2:b3:ca:91:14:28:30:
65:b3:14:45:d4:52:b2:a6:89:8f:0e:fc:c3:6e:ae:
78:65:dd:e2:c9:83:f4:90:2c:70:a6:e4:9a:74:00:
14:20:81:4d:17:4e:76:76:0c:82:d2:bf:48:f7:9f:
cf:cb:98:3f:2a:33:9d:94:8d:71:3d:04:e6:23:85:
2e:2e:02:db:50:b8:05:f4:5a:85:da:91:f1:83:9b:
3c:7d:16:31:f9:a5:da:f5:3c:03:32:67:8c:3d:36:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:A0:C4:98:F1:F7:3F:B5:EB:9C:2B:AD:6C:A1:E7:71:7A:0F:5C
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:ac:d5:ec:c3:2d:25:06:06:85:da:b2:7a:b4:2d:7b:b0:
a1:c9:e9:28:68:f5:2d:82:88:28:46:d1:6c:ff:79:55:d4:36:
84:d3:f4:dd:48:f6:40:28:31:42:87:8e:fb:cb:10:50:33:ae:
53:60:4e:3c:83:06:26:a9:91:77:c6:a1:13:e3:a0:d1:0e:8b:
e6:28:d3:15:75:2c:73:aa:cc:0d:e4:20:8f:2a:92:8a:14:32:
7c:3f:2a:75:c8:21:21:f1:4c:f0:f3:cf:db:23:18:f1:39:a5:
9e:18:5c:17:32:3e:cc:55:c6:86:e5:7e:94:bb:f3:77:26:93:
c3:ac:3b:c1:3f:12:91:ae:94:c4:61:4d:0b:9b:45:5c:f8:fc:
7a:b3:77:79:ec:63:2e:9c:3e:35:ed:24:34:ca:5b:85:28:9e:
52:fb:43:95:4b:5e:18:96:ef:23:97:fa:39:52:dc:40:08:5b:
59:1d:9d:61:60:bf:00:03:69:1d:46:5a:65:26:34:fa:02:c8:
f5:0e:b8:b9:71:59:56:ee:b8:67:06:8b:4d:fd:06:d0:6c:c2:
73:99:71:2c:02:6e:21:5e:56:63:0c:7b:33:84:a1:be:d1:3b:
5b:02:f5:0f:b7:86:ee:76:8f:45:ba:8e:66:8a:7e:c8:28:29:
a4:ab:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:14:39 2026 by rpki-client