Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier: jUaj8yYjWtvQg3/wtbuLuWXHX41r93x/dQkj33fmloo=
Subject key identifier: 5F:20:BE:1F:88:C1:CE:3C:F8:D1:E1:13:FB:43:3C:AA:78:17:7D:2F
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 019CAB6B16788E11D8B459F1DC1052AF7D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number: 0AC0
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: 1-2UtBiTjHsLQddCqGP3gVri-xW0.roa (hash: DJE2DUvAsy++YyvCOr1N7VjrxiOrJBdKXmpjw8gEGfk=)
2: 3Syacw0kA1-ynTLjhAFHVC60Ux8.roa (hash: U3SW2ZOoHktaoXakRfEn1+6KwZhVhuD7PQXG5yVZEPA=)
3: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: x1d+TNJKDM/stcZVJx8aE2VfcoNhh2jbtfalD5SqRf8=)
4: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (hash: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:78:8e:11:d8:b4:59:f1:dc:10:52:af:7d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=5f20be1f88c1ce3cf8d1e113fb433caa78177d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:8b:6d:c8:3a:52:51:f8:85:41:63:59:b5:
fb:fd:96:16:9a:16:11:4b:92:76:78:62:cb:26:8a:
d6:ed:2c:c6:94:04:0f:47:ca:12:1c:83:d3:1e:63:
77:c2:b2:a7:e5:99:44:33:54:da:bd:80:f6:aa:90:
03:6f:1c:b4:7d:6f:89:29:7a:cc:ee:95:7c:69:22:
e2:d6:01:4a:1a:b8:5d:0d:c6:1b:37:25:dd:1a:5f:
2e:79:69:b1:10:d6:c7:ec:8f:46:61:ea:49:37:c9:
2a:65:c4:0d:a4:d9:37:7d:d5:39:b5:18:f7:0e:8c:
d9:c1:d6:83:a7:22:0f:9d:15:54:d4:06:11:a7:ef:
f8:bf:28:92:b3:61:1b:63:13:57:a0:5d:22:22:68:
90:ca:de:ee:8d:a2:ce:90:0e:18:92:94:50:4e:0c:
b4:69:84:6a:af:da:54:d1:c0:e6:ad:82:69:61:4b:
14:b3:ce:be:e3:12:d9:ce:f6:96:84:5b:00:22:a8:
e3:a5:cc:1d:62:b2:ee:ab:ec:d4:c9:4c:0b:c9:f9:
5d:3b:e0:7d:d6:51:3c:73:e6:16:bd:65:72:3a:55:
2f:86:be:6e:85:64:f6:86:4c:3c:18:95:f1:6a:ee:
0f:e3:bb:f0:14:b6:56:48:27:0b:51:43:0a:0b:a7:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:BE:1F:88:C1:CE:3C:F8:D1:E1:13:FB:43:3C:AA:78:17:7D:2F
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2a:9c:f9:ad:3e:4d:75:6b:fc:bb:5b:45:2c:b7:d5:03:d3:
ed:9c:fc:fa:19:de:9a:8e:49:10:d3:07:79:25:a3:22:73:e0:
4f:69:c4:b5:2b:d3:3b:ad:a5:87:9f:1b:37:a7:af:03:c9:d7:
b2:08:9b:c8:6c:95:06:0b:f6:6f:2c:49:fa:ef:f1:7e:f5:e8:
77:e4:ed:00:78:fa:93:5d:0e:e3:c2:e8:78:cb:a6:54:6a:13:
8a:2d:dd:af:76:4d:f4:fc:ee:04:1e:ea:4b:27:0d:04:2f:4f:
31:f9:d5:46:28:9d:b4:14:a2:fd:76:57:3e:76:78:bf:8c:f8:
c6:b1:33:ed:2d:f1:14:9f:82:96:b0:23:e5:b7:66:05:1d:76:
2b:99:13:c4:97:c0:6d:e2:fc:95:dd:a5:d1:3b:6e:c1:68:68:
56:16:a5:67:2e:15:3e:96:1c:8e:4c:1e:75:cf:c5:d5:d4:aa:
98:aa:3b:ab:35:d3:50:56:d9:60:43:75:dd:db:c4:16:87:8f:
8a:a5:e9:61:bf:b4:3a:c5:fe:42:be:f1:12:cc:04:76:74:b8:
7c:32:22:85:7d:3d:79:ba:0b:f4:e6:ca:63:0d:27:6e:da:f3:
0d:d9:54:03:dd:22:d1:44:7e:7d:67:e9:00:0c:16:60:27:bf:
f9:04:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:35 2026 by rpki-client