Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: 7+pRx/23JS81QQ/ceLw7POR12hjPq5eslu9V70T/5vg=
Subject key identifier: 2E:44:F9:BA:70:60:17:9F:64:A4:DB:0C:BC:63:41:B7:FE:A1:2D:F4
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019CAB6B3BE4939AF6A496E89ABA7983049E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: V87ZyWTZ6Ahxpn5+A6rKykzskAfa+uGLSsDwhrimWaE=)
2: tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa (hash: Bf6c0BIpdRCo1yEs4r44JJ+ve3ioKxcHtL7Ll7CrmLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3b:e4:93:9a:f6:a4:96:e8:9a:ba:79:83:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=2e44f9ba7060179f64a4db0cbc6341b7fea12df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:f3:1d:cb:2b:af:1f:74:92:0a:08:c0:81:
03:5a:d2:df:26:e5:14:e6:0e:f0:31:d1:cb:95:61:
36:85:ba:dd:ee:5b:e2:b2:7a:bb:ee:43:bf:87:58:
13:20:f8:14:11:29:cf:fa:b5:73:d3:ce:09:31:21:
9a:35:45:a8:ff:cc:ad:85:b9:25:40:9f:9e:57:f8:
74:04:1e:3d:78:a7:ee:f9:8b:9e:d4:55:9f:3a:7b:
9c:04:74:9e:70:84:7e:e1:c3:d5:3d:92:49:66:8d:
7a:83:fb:4c:fa:d3:fa:88:ef:1e:51:8f:fb:c4:4b:
f3:9c:01:ca:7d:29:6f:31:cf:ad:08:2b:c4:d5:d6:
f5:6e:cf:4d:e2:56:46:b6:51:32:6f:cd:d9:e7:b3:
38:a9:47:0d:64:6c:89:a0:71:2e:10:cf:8e:79:3a:
ec:76:f5:3d:b5:95:6e:3d:b6:ef:35:ce:41:f0:0a:
80:fa:4d:d2:aa:76:4f:86:c1:b0:5b:d5:99:7e:92:
55:b1:c5:27:76:3c:ea:57:c5:f2:e0:17:5e:7d:e4:
f5:f5:08:a5:3f:db:c5:93:f6:6e:f8:00:c7:00:0f:
fb:94:43:ee:02:b5:d1:56:ed:1a:0b:66:53:8d:37:
0a:be:eb:b4:da:c7:63:b0:f5:57:f6:53:5b:63:f5:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:44:F9:BA:70:60:17:9F:64:A4:DB:0C:BC:63:41:B7:FE:A1:2D:F4
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f1:ed:6e:4c:d6:d0:5c:cb:a1:51:2a:ff:16:b1:65:9b:0b:
d3:e1:86:3e:e0:d8:1e:aa:9a:7c:8b:9b:29:c4:3d:e4:1e:07:
b7:c7:19:e6:ff:cf:a3:32:b8:fd:29:8a:7a:e2:d5:91:41:87:
5d:54:4e:57:18:f4:eb:ce:a7:cc:c3:a2:ec:fe:46:59:a6:88:
50:22:e8:94:cc:f2:0c:d9:d9:39:3e:2d:67:14:ca:8f:1b:a7:
5f:5c:f4:78:06:f2:d5:8f:8a:cc:90:4f:6d:2c:b5:a2:21:a9:
d6:e9:09:44:fd:55:98:7b:0e:ae:b3:16:10:f6:cd:86:bd:8c:
e1:16:69:94:5b:ea:48:a9:a7:1f:b0:bb:55:ff:39:38:16:33:
45:f8:82:fc:31:0e:cd:2a:41:9b:7a:b7:45:1d:4d:f4:2a:7a:
c7:d4:7f:50:a0:28:1d:0d:5a:e5:5f:b0:67:d1:c1:45:ae:02:
16:3d:10:8f:07:e9:43:a2:f4:7d:09:e8:85:0e:53:a0:69:fb:
be:03:0d:4e:8a:f8:3a:18:fb:b8:13:10:7e:0c:71:9a:21:1a:
6d:dc:d6:78:f9:bd:73:60:f0:b8:32:81:15:a7:a2:33:3b:20:
d4:16:f3:bb:38:36:1e:f6:67:38:fa:27:01:e8:e8:aa:44:18:
fa:d4:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:28 2026 by rpki-client