Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: cJSVHG5pPxC2CpwXvgt364I3oFvfR8pCGMaszzkFCQQ=
Subject key identifier: 3B:0E:C6:83:7D:14:16:C3:C2:88:8D:26:4B:AE:EE:54:F8:9D:03:E3
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 019CAA58E238A5EA853D98C636EC87D9DF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: yn1gpQTjhpxEq1UcrZrPoguiaMAzLLZ05XmmKvNg9yA=)
2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e2:38:a5:ea:85:3d:98:c6:36:ec:87:d9:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=3b0ec6837d1416c3c2888d264baeee54f89d03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:95:d6:f1:6c:be:76:13:cc:b3:c6:91:93:
5a:91:17:ee:de:92:18:c5:b5:91:10:3c:ee:d6:1d:
9f:e8:cd:3a:24:9a:d1:6f:fa:04:1c:4a:f1:71:e0:
c8:f4:ed:bb:8c:4d:9b:b5:3d:09:8a:bc:0e:69:6d:
48:68:25:a5:83:63:ff:fd:e2:8e:d2:0a:61:6c:96:
71:16:92:43:bf:cf:84:b0:44:60:f4:66:d6:61:8c:
f8:09:33:9f:ab:60:05:11:c8:24:55:7d:96:c4:92:
8c:36:0c:d6:2d:83:08:f8:5d:31:6d:e6:5e:c7:8f:
79:ff:29:62:7d:44:5e:26:30:08:a2:fe:72:28:db:
61:25:5c:eb:5d:69:db:a0:20:ba:4e:91:84:07:01:
e1:42:f5:0c:23:bb:48:10:ed:93:d3:48:f4:af:59:
74:2c:0a:ef:26:2b:8f:ca:2c:eb:37:ae:86:ff:60:
2d:3a:70:eb:92:cb:25:0c:65:64:ca:28:2d:85:30:
91:ad:c8:e0:d5:a2:be:79:c5:20:fa:01:9c:48:ec:
bd:39:85:2e:63:71:ab:74:2f:6e:82:51:44:ab:41:
af:78:ef:e7:55:98:88:29:d1:6c:1a:54:a7:f0:c3:
59:fc:66:18:82:1e:68:57:01:33:94:41:22:bc:90:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:C6:83:7D:14:16:C3:C2:88:8D:26:4B:AE:EE:54:F8:9D:03:E3
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c2:0c:26:b8:67:64:99:23:57:34:3c:68:d8:4f:a3:37:4b:
88:49:d2:83:0b:39:b4:59:ca:20:97:d6:ac:54:71:4c:c1:3a:
df:02:ef:7d:0d:8a:74:12:e1:e6:38:da:91:17:64:ad:f9:fa:
c9:6a:6e:0a:af:d2:d6:7f:a5:a6:7b:fa:4d:86:2a:28:69:24:
2d:cf:e8:89:bb:30:9c:01:97:08:a6:ef:95:cb:ee:9a:52:53:
5a:b6:34:57:c2:64:29:f4:08:df:ce:a8:d4:bd:b1:b6:d7:95:
ac:2c:0f:73:b3:18:d7:26:62:c4:b0:f4:31:c2:64:0f:27:80:
3d:99:91:7f:51:50:05:aa:03:c3:1a:5f:54:1a:b7:05:7a:70:
f7:9f:10:60:86:30:39:cd:da:6d:da:cd:8f:7d:b4:23:58:c9:
54:31:02:37:4d:2b:0b:69:6f:06:b0:b9:50:b3:a0:9e:23:cf:
17:b9:4d:83:53:e3:0d:f6:4b:f0:25:be:f3:69:1a:40:81:02:
0a:89:59:4d:c6:45:9f:0e:29:77:ce:05:d5:52:48:d4:41:c7:
02:6d:88:f0:1d:14:0a:e0:ef:76:91:29:1e:5a:5e:ea:a9:86:
50:70:61:71:06:0a:3a:55:ee:83:ed:62:0c:71:cf:53:c8:29:
32:5e:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:52 2026 by rpki-client