Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: f+a0c7RE5zFshaKxnSFDhq9sKYy90bISPbrfCRgEN/4=
Subject key identifier: 7C:80:F2:F4:D9:CF:CB:3A:56:75:21:7B:77:AF:8E:34:44:7B:39:EB
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 019CABD95503CBD8C00A5BF6871E13332A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 0702
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: J4B7oh65JAGh5edd4/joiwJw/bwP2f/fpjeLVN3HMJ0=)
2: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (hash: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:55:03:cb:d8:c0:0a:5b:f6:87:1e:13:33:2a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=7c80f2f4d9cfcb3a5675217b77af8e34447b39eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:42:f5:4f:7f:69:d0:2c:dc:52:20:d6:4c:
91:ca:c9:71:d3:be:3c:89:3f:88:4a:32:c4:27:65:
ba:97:6e:21:d7:36:34:2f:a4:5c:62:b9:9b:d3:59:
d5:b4:88:40:3f:68:d6:ac:e7:88:a4:ad:48:b3:88:
52:7a:39:d3:6c:12:65:8c:c7:9a:43:a2:45:b0:3e:
f9:dc:c8:60:27:96:35:7e:4d:94:9e:1e:ea:42:73:
48:3a:b3:66:f9:16:dc:5b:5b:04:2a:db:3b:c2:15:
ef:23:40:be:d6:30:2f:fb:c3:e8:d7:ff:2c:4c:6f:
37:15:9e:74:4d:e0:2c:a6:11:c3:09:10:c4:05:84:
47:dc:eb:5e:47:52:e6:75:73:f9:e5:13:1d:a6:ce:
a2:fa:5c:35:f6:e5:e0:a4:c1:e9:cb:4b:d8:65:f7:
14:10:e6:f3:35:cb:ba:27:9f:8f:b4:f2:e1:34:98:
b1:78:ba:0d:4e:a1:ac:cd:bb:b1:81:70:51:7b:5b:
b0:9f:53:a5:49:1b:36:96:ef:e0:f7:db:41:1b:96:
33:09:e7:87:4a:8b:88:fb:5e:bd:1b:b5:35:75:e0:
e2:62:fa:13:04:bd:a7:da:83:7d:a0:72:0c:e2:e5:
50:85:ed:60:a6:03:c1:c4:c5:b2:4d:7f:8d:0d:aa:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:F2:F4:D9:CF:CB:3A:56:75:21:7B:77:AF:8E:34:44:7B:39:EB
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:4a:ad:20:28:29:e7:a9:8d:67:85:b0:d3:f3:64:68:1a:
69:61:b9:f9:cb:c2:1a:c1:9b:9a:99:0a:00:8b:20:9f:5b:bd:
2b:eb:04:49:99:55:23:b4:fe:f2:2d:9c:03:bb:00:d7:ca:2b:
ac:ae:4e:77:be:83:6d:f8:ef:4c:91:17:17:e1:2a:06:77:70:
5f:44:13:3a:df:92:3e:22:c0:7c:ff:9c:d5:68:25:4b:24:c8:
b9:ec:8c:bd:3a:e8:b5:c2:2f:89:2a:a5:79:1a:5a:8a:31:90:
3a:9e:ed:55:af:de:57:5e:6c:95:62:68:cb:c7:67:8c:39:53:
18:56:90:96:4e:c3:83:6a:1f:c5:0e:ed:9d:db:a0:df:19:b3:
c2:6a:b7:e5:ce:e3:bc:2b:36:cf:4d:82:61:56:a3:8a:3e:64:
66:23:2d:81:42:37:ba:a7:19:45:23:cf:97:71:aa:6b:a2:43:
25:6f:5a:57:f3:46:cf:4c:22:59:fc:6e:48:87:52:a6:f4:93:
a4:67:67:6b:06:19:16:43:71:f4:12:09:7b:69:68:4c:c6:6c:
d6:ae:e5:00:dd:67:3b:3f:b8:a2:8a:05:07:9c:d8:5b:fa:95:
04:59:50:5e:b4:54:aa:b6:64:4e:75:25:c5:4e:2b:b8:80:fa:
25:f3:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:23 2026 by rpki-client