Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: jmHuApRjnNb1PQ4o/6//wheH5+LXTjpQMdYSfVxwmgE=
Subject key identifier: 34:12:13:FF:5A:19:00:59:4C:19:02:85:BB:4F:A8:24:65:0C:74:EB
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019CAA585BAA4F2E412403A546A4DEEAC935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 141D
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: RXLljNjW8BjfEON8XCR/REljdLdF2JbH22hGTZK0VuU=)
2: l6hhFXm91_1hUHfqAiTC3reWmvc.roa (hash: g7ZHYlhYjCzwKg6ri+src+vOXxkbh94Rt78zZvtYmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5b:aa:4f:2e:41:24:03:a5:46:a4:de:ea:c9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=341213ff5a1900594c190285bb4fa824650c74eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:c7:84:93:43:5b:70:98:3f:3d:ec:bf:17:
74:4f:a7:3c:71:be:7f:33:03:cd:1d:ec:dc:2a:50:
c0:6f:5b:2f:e8:bc:8c:a6:d1:5a:b9:1a:97:2e:27:
bc:a2:84:97:70:98:43:d0:d8:be:b9:60:f9:80:17:
37:df:61:00:1a:d7:13:9f:1f:d8:bf:f9:e7:b3:ec:
a0:83:83:88:66:01:c1:a5:9e:1b:cf:68:e5:68:c8:
90:07:a9:ad:14:32:e7:3b:75:59:91:7d:53:a3:f0:
33:cb:1e:01:75:90:d0:5e:e9:3f:97:9a:6f:cb:22:
9a:73:6d:36:51:44:77:ac:00:94:7a:0e:f0:ea:74:
e3:72:25:c9:50:e4:6d:38:86:db:79:0c:bb:26:92:
e5:60:82:d8:33:18:a8:20:26:ff:bc:43:3e:b3:fa:
fe:1b:f2:6c:b9:c9:5c:52:d0:95:cb:87:58:3f:94:
2a:9f:cc:de:b0:20:e4:89:2b:8f:15:c7:10:88:23:
48:2b:7c:29:29:92:09:58:a2:00:e1:f1:2e:a7:bc:
17:06:44:9b:18:04:45:45:ef:d2:06:11:93:85:d7:
e1:00:10:1c:0e:f8:b3:2b:53:df:56:59:51:46:fd:
34:0f:09:b6:a8:ef:e6:8e:3b:80:e8:21:11:d1:f4:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:13:FF:5A:19:00:59:4C:19:02:85:BB:4F:A8:24:65:0C:74:EB
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:db:f5:47:66:8f:8e:2c:f5:44:72:a1:94:9d:8e:65:97:
45:07:27:e1:50:30:cb:8d:72:dc:d2:42:f2:ae:85:03:07:8e:
b4:e3:50:3a:0a:7a:b6:c1:cd:fa:58:9f:80:3a:f1:11:0b:70:
34:a2:c0:d3:20:6e:12:3c:26:e3:a2:61:cb:d6:59:57:c5:f8:
f7:bc:39:59:ab:f1:b6:7c:f7:15:59:b3:65:6c:59:02:fc:34:
b4:06:e1:42:ca:e9:70:30:0a:0e:0f:92:16:5a:ab:c3:21:a2:
66:c0:2f:4f:5c:ee:2f:ba:31:40:0f:c4:2b:5a:18:6a:6f:ab:
cf:5a:28:a7:67:19:41:ca:87:6e:a1:06:54:fa:4f:f9:a8:5a:
df:0d:4f:12:03:73:3f:17:23:92:1b:68:c7:f8:cd:20:d9:de:
90:5b:3e:8b:58:30:68:6f:15:47:a4:0c:b6:dd:e8:30:48:88:
94:68:ee:7a:0f:24:cc:e7:d9:b8:6d:d7:1e:c5:ef:cd:e8:48:
79:62:95:1e:db:b5:10:7f:13:29:68:81:70:fe:c7:c5:eb:53:
92:d7:02:44:49:51:ab:d8:54:70:62:0f:30:6b:15:51:4e:31:
f4:a5:7e:0a:b1:43:11:e1:ff:ac:ae:1b:cc:cf:fd:34:97:90:
ec:27:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:23 2026 by rpki-client