Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: acU/au14g24GP2mOYVQufVoFZBQtLclyQsgj5Ko8j6E=
Subject key identifier: AC:31:34:3A:5F:CC:56:35:58:5A:7D:AD:34:84:E8:86:73:6F:91:C7
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019CAFEC9975D33343EAF05B673BB845E898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 01B4
Signing time: Mon 02 Mar 2026 19:00:44 +0000
Manifest this update: Mon 02 Mar 2026 19:00:44 +0000
Manifest next update: Tue 03 Mar 2026 19:00:44 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: FHZbYOkYzCCN1dhV5otJRnZTjdxjsY/psNBA7qVB9YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:99:75:d3:33:43:ea:f0:5b:67:3b:b8:45:e8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Mar 2 19:00:44 2026 GMT
Not After : Mar 3 19:00:44 2026 GMT
Subject: CN=ac31343a5fcc5635585a7dad3484e886736f91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:09:22:67:71:a4:95:e7:31:6a:cf:3d:32:
3b:21:f5:f4:f0:e3:e7:23:6e:28:b1:80:17:4a:90:
61:44:d6:87:97:19:db:62:33:32:4e:39:36:c3:af:
ff:5d:a6:61:d5:07:e1:68:bf:3d:32:ac:35:ed:38:
3c:8e:2c:4a:78:a5:1b:b5:c5:d5:5b:ff:38:2d:02:
33:98:6b:93:ec:a2:9c:17:9f:d8:98:f7:40:c4:b3:
77:55:6b:b1:75:24:2d:94:b4:d6:09:70:f9:54:e8:
ed:43:61:b4:6d:2b:59:36:52:54:c2:67:0e:45:b3:
1e:f8:2c:90:9e:a3:1d:62:2e:33:90:16:f4:8d:61:
02:e4:a0:62:62:6b:ed:7a:0c:b8:1d:8a:92:79:1d:
12:dd:2d:71:d6:32:91:f4:39:b6:5b:50:43:1f:33:
ec:38:ba:b8:8a:2c:ab:01:a9:05:fe:33:78:15:9c:
0e:0b:32:c6:74:7c:32:62:cd:4b:1d:dc:c1:c1:4b:
76:70:91:42:5e:93:b2:32:77:0b:6b:10:f0:b9:1d:
38:80:b6:cd:bc:dd:0e:2b:49:aa:b3:e3:79:ea:f9:
ba:fc:98:e2:71:8f:d9:05:fd:e8:14:ae:e9:60:13:
c8:a0:1d:8e:40:30:9f:a8:70:00:13:21:b1:2d:43:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:34:3A:5F:CC:56:35:58:5A:7D:AD:34:84:E8:86:73:6F:91:C7
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5f:72:1f:0f:38:5f:0b:59:82:74:3d:81:d0:ad:20:83:19:
d3:b5:74:10:eb:80:ca:a0:7c:b8:ad:66:14:dd:ff:5c:ec:6e:
a7:60:a6:a1:f4:76:60:78:6d:c5:bf:fc:42:75:9d:d8:04:49:
f8:ff:3f:db:f3:21:3d:af:4e:98:ea:ed:28:3f:7b:50:50:92:
08:bd:85:87:42:ee:9d:2b:26:00:46:b3:b1:09:58:1d:16:5b:
e8:f2:03:06:ee:58:c2:dc:8b:34:7e:00:37:31:5e:91:21:3e:
57:fd:ee:e0:77:1b:40:c1:ec:e5:07:c1:4e:80:68:91:f7:bd:
e6:ce:82:fa:8f:df:60:b5:c2:9f:6a:eb:a1:bf:6f:1a:de:76:
90:a7:90:c6:d7:4b:08:47:f5:21:09:c4:e3:35:6e:9d:95:1e:
e9:ba:40:0f:a2:39:e6:41:99:af:8a:7f:14:91:ce:bb:22:23:
97:92:dd:c7:b4:fb:f4:75:44:d8:bf:59:46:e9:12:e7:14:96:
7c:0f:60:82:1a:d6:bd:db:05:f4:c3:4b:26:23:0f:7f:d8:43:
10:e3:d7:3f:31:13:ea:07:a5:8b:c2:8b:e0:c1:46:dc:73:f8:
58:96:c1:53:9e:e6:e4:b5:9c:a1:48:15:f8:05:96:44:99:a4:
e3:cf:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:15 2026 by rpki-client