Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: pgTLVNxPq9rhRIDp281cnhsqoVZCjYgZJiK43JYon7I=
Subject key identifier: B0:1D:50:20:55:7F:F2:5C:BF:73:6A:7A:AF:51:BF:34:17:1B:71:67
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019D9D75D22C96A6BF6B3C6DD2D74E01917D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 022F
Signing time: Fri 17 Apr 2026 22:00:37 +0000
Manifest this update: Fri 17 Apr 2026 22:00:37 +0000
Manifest next update: Sat 18 Apr 2026 22:00:37 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: AhxKLdsf0TUTZOf37KY4yP6ZKHvd8Cxkz9RN0rHqhYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:d2:2c:96:a6:bf:6b:3c:6d:d2:d7:4e:01:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Apr 17 22:00:37 2026 GMT
Not After : Apr 18 22:00:37 2026 GMT
Subject: CN=b01d5020557ff25cbf736a7aaf51bf34171b7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:5c:6d:41:ed:f4:97:c0:73:11:3d:34:38:
93:2d:bd:79:8e:f1:ae:c1:5c:05:b8:7e:ef:8c:b7:
19:28:d7:8a:73:13:f2:f9:af:3e:c0:38:af:3b:52:
f1:b0:0c:67:da:07:12:c7:ce:83:20:53:b3:c8:2f:
dc:aa:53:a2:12:9e:aa:16:84:f6:4d:c1:0a:a9:88:
74:44:80:01:71:bb:2e:38:c2:45:ce:42:d0:53:4e:
78:91:49:b2:84:f7:6e:99:59:e1:33:6b:7f:f7:8c:
2d:32:4b:68:3c:36:cc:bf:84:74:4c:a8:6f:ea:3d:
cd:a3:11:d4:03:d2:24:25:f4:3c:e5:c8:70:3b:8e:
9d:de:74:60:6e:91:92:fa:ce:50:27:55:62:85:4f:
ac:0c:3a:08:2a:81:cc:52:93:10:77:a0:fb:ab:50:
6e:ee:37:8b:44:bf:ac:ea:1a:9e:1e:0f:47:02:13:
ed:8a:d5:17:37:65:71:57:07:43:4b:b8:0c:a3:cf:
5a:0e:ad:a0:1f:3c:34:a5:a1:b4:db:8f:5e:58:c1:
27:d4:05:87:3e:05:98:91:83:9c:1a:66:f2:82:15:
b5:ad:74:f4:3b:6d:5c:9c:24:9e:52:cf:25:4a:9e:
ed:a4:ab:f3:6f:b6:d0:4c:27:04:87:f1:2e:db:f0:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:50:20:55:7F:F2:5C:BF:73:6A:7A:AF:51:BF:34:17:1B:71:67
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:d7:38:ee:ed:9c:d0:5c:fd:fd:aa:bc:8b:63:e9:37:c1:
9d:29:d9:53:0a:36:18:37:2e:58:75:db:6f:2d:61:4f:9b:63:
e8:a2:cf:84:b3:71:dc:51:c1:17:1d:97:82:fb:d5:7a:1a:84:
b2:1c:9b:16:69:80:71:ba:dd:bb:be:51:09:f5:f9:fc:ae:9d:
ad:3b:9c:37:6a:1f:95:84:ef:be:78:4f:d8:f4:53:a0:c2:54:
14:14:a0:c9:6c:86:08:7a:cd:a2:e9:9e:d6:de:89:74:17:66:
e1:09:3c:2b:8e:00:76:5f:3b:a1:34:89:7c:ac:11:47:db:a5:
e5:d2:de:97:8f:bf:7c:60:ff:23:43:b8:2b:4d:b8:8d:fd:8c:
2f:bb:5a:a0:c5:1c:81:5a:7c:8e:e5:bc:03:09:28:0b:c7:4d:
a6:6d:7f:84:6b:b8:e9:6f:cc:d9:d4:ef:d6:c7:f3:2b:c0:19:
71:07:42:83:2d:a7:9e:b1:5f:eb:d4:5e:38:01:df:5c:ef:1b:
45:7d:2d:30:73:75:85:d5:71:1a:75:f4:71:79:3b:18:d3:bc:
ed:9a:4f:38:c1:1e:4c:75:1b:ea:f7:ab:26:dc:a4:93:6c:4c:
a1:aa:10:cc:99:7a:12:be:ed:71:22:f5:e8:ac:50:fc:bb:13:
cd:0d:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:31 2026 by rpki-client