Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: hh2j0j5K+mUTMY8+U1VFWDkSfb1PXNugR0dswy9LrtQ=
Subject key identifier: 37:A0:38:9A:EE:EF:12:C4:EA:71:66:08:A2:E3:63:F3:88:C9:C7:F9
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 019D99D0C764EABD8E4C82C62122A6D8C979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0FCF
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: wTkQTVwRPLeH271DLdqgwD/mZNwi6IrP8UNrqhhjCrI=)
2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c7:64:ea:bd:8e:4c:82:c6:21:22:a6:d8:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=37a0389aeeef12c4ea716608a2e363f388c9c7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:4f:27:9b:94:72:53:eb:55:6f:1f:39:74:
e9:69:3d:cb:3b:9b:76:99:af:76:ed:1b:f2:4b:a9:
f6:a2:5a:ce:48:05:8f:63:bb:49:b0:c8:f7:d7:57:
57:4d:83:88:cb:64:03:82:de:00:6f:6e:c8:92:32:
a8:71:f3:9a:87:a8:03:06:21:c5:84:9d:70:85:2a:
a0:e2:1e:95:8b:52:99:69:df:a3:44:54:b9:2c:b0:
ce:05:fe:76:82:0b:33:96:fb:6a:a5:99:e8:ff:9b:
87:2f:b3:c2:df:2a:e6:bb:b9:d9:9d:7c:67:e8:5b:
ad:53:3f:b0:01:6f:18:6c:ab:bb:d3:4d:b2:25:e4:
6e:a2:9e:93:4e:38:0e:be:d1:cd:80:e3:92:ed:c9:
d7:64:07:f3:0a:36:8a:bb:14:41:d3:cb:d9:cd:04:
51:e4:88:78:69:3e:c5:07:fe:ef:a6:18:6b:d3:d3:
55:56:c9:60:7a:0a:6a:8e:28:67:60:3b:b7:d0:a4:
63:6b:d8:f1:f9:ab:ce:89:4f:28:a4:35:3b:25:47:
e9:cf:09:f4:d2:66:cb:88:fa:78:96:c5:19:fe:a6:
ec:1a:53:9a:da:04:19:ef:e3:c8:ff:05:02:89:d0:
1f:a4:d8:64:7f:92:ae:87:2c:0c:1d:e3:38:6c:09:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:38:9A:EE:EF:12:C4:EA:71:66:08:A2:E3:63:F3:88:C9:C7:F9
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:8a:4f:d7:f8:b7:ae:b6:b9:28:03:13:6c:b0:98:44:c0:
4d:8e:ae:48:29:8b:82:bf:ed:18:c6:15:6c:8c:57:c5:1a:ff:
85:c0:9b:85:2f:9a:dc:d1:c9:e3:75:13:ba:1a:65:0b:05:56:
87:c0:fc:45:28:12:ad:75:ab:74:e6:e7:86:3f:9c:26:89:3f:
e9:60:2a:d1:4d:6d:57:22:a8:f7:67:27:f5:f4:61:f1:65:e4:
7f:be:e6:9a:27:5b:e7:6c:0e:81:d8:c8:2a:3c:9f:2f:93:10:
0a:f1:6f:39:19:f9:20:33:da:7c:f9:ca:e0:06:40:e0:06:3c:
de:f0:0b:cd:85:67:3c:96:1e:92:6f:66:28:b9:dc:39:70:1a:
4a:00:09:be:62:d7:1d:aa:3c:de:cc:df:cc:2e:cd:a1:d3:55:
3a:c1:26:2d:cd:ab:cd:c6:a0:47:69:15:39:b9:ba:4c:02:87:
e1:f1:0c:71:2c:a0:c7:5a:43:df:09:2e:e4:80:8b:5d:8c:7a:
18:09:64:a2:c9:27:6b:80:36:8d:29:1b:75:5e:b6:34:38:d2:
73:26:c2:13:6b:fa:7a:d7:d0:05:27:a5:06:90:7f:67:3b:ee:
75:69:02:45:ca:36:b6:50:c6:02:5e:24:08:54:81:e3:27:8c:
06:a6:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:55 2026 by rpki-client