Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: I1Nk8E9gU7uAWNLeZOW0zjY8kh53Ea9VLHV+ks0dL/U=
Subject key identifier: 3F:67:CA:5A:FD:11:90:9A:D7:AC:3C:07:D4:5B:FD:3B:9E:AA:14:89
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019CAC46DB57B12ED80928ED799A653FDF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 1zlLUrmw7AghqUej0f9GeaxByYJczqpDuZGDHBea/Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:db:57:b1:2e:d8:09:28:ed:79:9a:65:3f:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=3f67ca5afd11909ad7ac3c07d45bfd3b9eaa1489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:c1:70:e4:08:12:cf:b6:4a:a5:d5:8a:ab:
1f:24:f7:81:c9:2c:c6:7c:b2:58:a9:18:c8:68:5e:
db:1e:a1:21:11:07:5c:0b:22:9e:56:1a:ef:ef:e2:
ca:5b:d4:a4:7a:db:46:5a:52:cc:46:29:8d:c8:83:
5e:c2:9f:74:36:11:6b:b5:16:30:79:43:fc:6a:07:
6a:dc:3e:97:dc:4a:32:a1:37:67:3f:3e:29:fe:33:
b6:dd:ca:aa:cd:b4:63:24:23:c2:80:43:e8:e0:51:
3d:ea:44:8a:03:70:e5:4e:c0:f9:9d:5a:98:7d:e7:
76:2b:e2:75:41:ce:44:63:00:5e:48:cd:b0:29:9d:
55:6e:e2:50:c2:a3:94:4f:5f:e3:07:5c:a0:19:93:
ea:6c:d7:18:16:8e:5d:05:12:d0:7b:d2:22:33:3e:
f3:80:c3:db:a6:d9:0c:77:de:fe:36:82:10:78:b6:
82:fe:07:39:c8:d8:8e:1a:4f:00:83:f5:de:b1:7d:
6c:8c:e5:0c:ec:11:fa:a8:81:19:76:3f:f1:5e:e2:
36:b4:7b:6e:a3:b9:3f:18:9b:d6:39:7c:e3:ab:2e:
f1:0b:b1:2b:42:c5:a7:da:e0:14:ea:f4:50:33:fb:
aa:10:d0:7b:32:97:7f:6b:cc:f8:85:11:d0:5d:01:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:CA:5A:FD:11:90:9A:D7:AC:3C:07:D4:5B:FD:3B:9E:AA:14:89
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:89:b2:88:c2:1d:f9:fe:92:eb:07:4e:7d:39:16:b6:3d:06:
29:da:9f:1f:08:4e:5a:23:e9:4f:98:cb:c3:d3:7d:b3:5b:67:
88:d4:7f:f0:d2:64:e6:b6:a1:44:e4:93:d7:62:5a:c0:d7:6f:
8f:06:4b:06:82:60:2c:1b:6c:ed:de:18:7c:e7:dc:c1:7d:3d:
a9:3e:02:f0:e4:0a:8a:20:ee:d2:48:6f:bd:82:45:8c:ea:9a:
bf:26:20:dc:21:7a:41:81:64:b0:ac:1a:95:2b:d6:2c:35:84:
01:a0:bd:e1:b8:72:a9:61:33:4f:19:4c:fb:77:1f:06:fb:2b:
d3:cf:83:4c:b4:c4:49:73:6e:7a:6e:6f:b9:84:3e:a3:33:9f:
76:43:9f:b0:0a:08:bc:d8:cb:ec:ee:04:6b:b4:5b:ac:61:1d:
64:0f:b2:3a:f1:66:86:45:2f:5d:ae:1b:d4:04:10:7a:d6:01:
60:7d:cd:e4:77:9c:87:b7:93:d5:3c:65:ac:14:e6:dd:6d:a1:
44:f9:36:a2:cd:eb:10:87:f7:e9:be:e4:5e:29:77:c5:8f:5e:
59:c5:45:f0:cd:22:1f:6e:ac:a5:96:34:0f:1d:9f:f8:e4:8a:
1f:b8:5e:c9:cc:4e:5e:d9:e4:b3:df:03:60:07:ae:ac:b0:c0:
6f:ab:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:10 2026 by rpki-client