
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: xCHErdYVHOUeG7QMRoQGkoGIxK02idDhV2W7BQesxg0=
Subject key identifier: 03:65:E1:A0:3E:72:C5:03:28:A9:01:F5:72:2D:08:8A:58:B0:03:6B
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019EC300041D4738F7F653021109C8E3769F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 02C7
Signing time: Sat 13 Jun 2026 22:00:18 +0000
Manifest this update: Sat 13 Jun 2026 22:00:18 +0000
Manifest next update: Sun 14 Jun 2026 22:00:18 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: OrgzTkTvLb2bXksAiYWprzVPVZO+WuGQgolD4sGDEAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:04:1d:47:38:f7:f6:53:02:11:09:c8:e3:76:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Jun 13 22:00:18 2026 GMT
Not After : Jun 14 22:00:18 2026 GMT
Subject: CN=0365e1a03e72c50328a901f5722d088a58b0036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:16:85:43:68:ca:c0:f4:25:28:9a:7b:5d:
0b:7e:fc:f1:40:19:28:5b:47:cc:92:a5:af:08:c7:
4d:83:9a:59:c5:00:57:91:6f:92:ec:2f:a1:41:0f:
a1:40:b9:50:e0:31:90:e3:6f:ca:94:fc:7e:cb:c2:
be:5b:8c:3e:42:5d:da:eb:17:9e:74:85:e9:45:ba:
e0:1b:42:1c:8c:b2:cc:1d:76:a3:82:cc:32:ad:b4:
63:60:5b:a5:02:04:d4:8c:cf:65:2a:5a:af:a1:c0:
f1:23:3b:8f:26:23:36:0a:14:ba:52:15:15:f3:73:
a2:45:8b:7b:b6:b2:4b:3c:e7:ff:8f:ec:8b:50:31:
73:25:0c:35:f6:a3:2e:63:29:5d:0c:ab:55:cf:15:
9c:aa:b4:85:1f:7e:00:aa:c3:4e:58:21:70:25:3b:
8d:1e:83:95:5e:20:df:e6:aa:c3:8e:33:b0:4c:52:
f7:38:b3:24:28:ec:41:68:84:4b:49:ed:8c:55:8f:
28:ee:ef:12:3b:d6:5f:a1:cd:75:b5:f8:fe:3e:a1:
31:19:1c:90:60:4f:8a:bf:d9:a2:84:b1:7a:18:3a:
fe:fc:18:43:20:6e:52:a3:18:ab:67:73:39:fb:59:
83:23:93:b3:15:fe:8d:c1:9e:56:7e:ac:75:0d:19:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:E1:A0:3E:72:C5:03:28:A9:01:F5:72:2D:08:8A:58:B0:03:6B
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f9:59:71:92:7c:26:11:fa:18:88:91:48:53:ac:79:24:c9:
eb:b5:e9:7c:90:32:78:41:88:55:d6:6f:77:0e:97:6b:f8:ec:
cf:c7:dd:2b:e6:d1:8a:2a:70:29:56:9c:86:25:ab:44:a5:62:
8d:9b:32:da:63:7e:81:92:34:8e:2b:6e:30:0d:88:89:a4:66:
81:00:47:dd:23:7a:d9:87:f1:d1:22:92:82:b5:90:55:0b:50:
f8:0b:be:bc:f7:cd:07:8a:ca:1c:9c:91:5c:33:32:0c:39:86:
b7:48:4e:72:36:4e:98:53:2a:5a:d1:2c:3b:4e:bd:99:d6:3e:
2e:5c:f2:4a:65:b9:ed:ec:f0:c5:c8:f9:19:87:f9:06:e0:82:
39:66:95:f4:56:7d:de:f6:18:ef:e9:2c:64:7a:89:3a:b6:84:
b1:b9:c1:df:38:4d:24:e7:c9:d3:73:f8:1c:9a:b0:f0:5b:db:
22:8a:41:90:78:21:a5:0f:e8:68:2b:0c:97:ba:34:85:d9:98:
35:50:83:a5:b0:73:3d:6b:7b:ab:1e:14:1c:b3:a2:2b:14:04:
b8:5e:5c:1e:5d:e5:2d:90:04:cf:41:24:ab:13:c4:5b:cf:ec:
99:b4:7a:89:fe:f1:6a:ac:77:a0:11:9b:c0:bc:7b:f5:2c:a2:
21:b6:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:20 2026 by rpki-client