Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: bV74KavFsZSIpaBNtQ+YA//t4H2ueOj5x7SYQ8c4qaU=
Subject key identifier: 87:C9:6A:33:71:69:AD:A7:C2:25:2E:39:55:1A:7F:EF:65:E5:93:10
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 019CABA1F9D3DB5E5BE228D7BC9068BB3CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 0587
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: 6aLCeyGce8Xz+1LXW08aBKR6GOrHypr/P/1hA2WlaoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f9:d3:db:5e:5b:e2:28:d7:bc:90:68:bb:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=87c96a337169ada7c2252e39551a7fef65e59310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:7a:e0:d9:5b:17:ae:38:f3:8a:6f:5e:1d:
f0:fb:4c:42:b5:48:72:09:c6:8c:0c:df:b5:a9:3c:
53:76:d5:e0:92:af:a7:4b:59:4a:a4:f7:0b:78:c0:
1f:0a:80:3a:79:9a:b4:14:d9:ee:84:db:71:46:d3:
f4:fb:84:60:77:ec:93:d3:1b:2b:66:38:06:a0:44:
99:f8:0c:2d:b5:4f:33:d3:2c:9f:c8:74:e5:b7:7a:
50:e7:dc:b8:68:81:6d:2d:75:f0:20:26:1f:73:e0:
f7:cd:7d:7c:52:65:52:4b:9e:5a:76:fd:a5:29:aa:
e9:a5:e2:56:fd:52:0f:b1:c5:9c:bb:1d:d2:b1:62:
88:9c:bf:70:08:09:49:29:54:54:69:c4:87:5d:2b:
7b:c9:27:e4:4e:1f:f1:9b:64:f4:46:81:99:47:a8:
66:2e:c7:66:be:83:30:12:f5:cd:5a:98:e9:94:3d:
8c:b9:18:3b:98:cc:0b:6b:82:f9:23:61:e6:2f:7d:
ec:3e:d6:0a:ae:6f:8a:6b:83:f2:d0:de:11:9a:b7:
34:6c:6f:c7:91:c6:7b:68:a9:39:9c:5b:8b:0d:3d:
f3:36:2d:fe:77:b8:17:ce:01:0a:f5:9a:39:c0:39:
0d:0f:63:5d:db:64:b4:de:12:25:02:ad:50:d3:42:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:6A:33:71:69:AD:A7:C2:25:2E:39:55:1A:7F:EF:65:E5:93:10
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:05:8b:35:c7:86:d5:8f:ec:35:ae:d4:ae:68:ee:3a:d6:
95:ae:e0:75:13:7e:3f:e4:09:a9:11:ba:09:12:8e:2f:84:df:
2d:ad:7b:06:51:e1:ad:49:fa:47:96:52:7a:0b:18:e6:bc:6b:
d6:ca:1d:33:3d:b9:2e:a7:78:59:3f:ba:c3:ca:9e:38:70:3b:
f7:df:fd:e2:1a:e7:26:81:88:81:43:9c:2c:05:3f:08:43:50:
74:c7:54:74:74:8e:08:be:5d:51:08:1d:04:79:e4:47:fe:48:
1a:7b:4a:94:7e:b2:07:00:3a:60:1b:12:ca:fb:47:2b:ea:ad:
0b:b2:55:00:86:53:1d:cd:83:27:60:17:c5:ab:8a:61:c6:6a:
4b:62:7d:cf:29:76:1e:6a:0f:86:d5:e4:a9:9f:54:db:98:4a:
4d:ae:79:df:ca:82:f8:80:36:5a:75:24:06:99:8b:75:88:19:
b4:01:e9:c1:4b:20:13:9a:bc:6f:0d:a3:e1:48:36:24:4f:07:
d8:84:2c:f1:cb:10:6b:25:63:22:2a:ca:eb:32:1b:18:de:5b:
b0:89:43:2b:62:24:a5:a6:6c:81:d2:22:f8:a0:77:13:62:da:
ae:cb:3f:c4:d5:d0:ad:2d:dc:9e:6b:2c:a5:58:fc:d6:1b:5c:
f9:51:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:40 2026 by rpki-client