Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: YSfKRr3JviI77/VJZnJZojesl2vocG/Md87pd/PXvXM=
Subject key identifier: FC:91:84:98:DC:08:9D:C9:54:A0:0A:07:17:EC:93:D3:F7:3B:C8:F5
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019D26CD666070255E5A64BC4F6723658020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 171E
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: 4ggS2ONBMXsUTTGG8dmc8AUu8Lg.roa (hash: q2SWd9oKEi+bPBkWTJWv3RcDMHC3g4eWB/JrEjpX2iE=)
2: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: h1jAjt8uU67pZYbu3blvkN49P2Ce5ZQmQ/F2Az0vLRk=)
3: YieV5IhtBfHhR0OlHv2vUYM5r_4.roa (hash: 8fgRrOxEwtIdvMj2bohx3wRypSi8a7Y8Q0IaEcHrHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:66:60:70:25:5e:5a:64:bc:4f:67:23:65:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=fc918498dc089dc954a00a0717ec93d3f73bc8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:1d:0c:a9:69:61:0d:0f:cb:e5:73:cb:a3:
df:98:98:90:08:f7:b6:f5:31:f1:70:6e:37:8d:a3:
0f:e9:9b:5e:fb:fd:ff:74:88:72:48:f6:d3:bb:a6:
9a:b1:5e:53:b8:c7:f4:8d:d9:87:67:6b:cb:35:57:
6d:bc:88:00:6f:10:a3:30:36:84:14:73:f9:2b:98:
41:3d:3e:1a:ce:fa:cb:77:d2:a4:82:50:e1:36:96:
3b:d5:2a:16:d2:6e:ee:69:22:df:28:e9:a1:51:eb:
1d:54:b7:7c:85:3d:37:2c:32:e1:a7:26:c7:61:f0:
ba:85:6a:16:1d:01:6a:8f:a2:65:61:b9:1c:c7:fc:
93:e6:53:bc:7d:cf:a2:df:c8:ca:60:6e:8e:5b:c8:
d4:50:61:d0:5b:da:b6:08:fb:4f:99:07:88:50:4a:
51:50:fc:89:a3:18:25:bc:ce:09:77:32:25:5a:3e:
2e:7d:a1:95:f3:db:8b:f4:4b:14:47:c9:d2:17:81:
ec:86:cd:9d:18:bf:ea:df:48:bd:74:37:02:50:7d:
b8:3a:63:9e:48:6d:c5:3f:f2:70:2e:f1:2a:39:21:
86:11:9e:1f:c3:18:97:fc:9f:de:0e:2a:97:e0:70:
3c:bc:18:5f:9e:8a:ff:81:20:0c:73:ab:02:a3:8e:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:84:98:DC:08:9D:C9:54:A0:0A:07:17:EC:93:D3:F7:3B:C8:F5
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:0c:c0:0b:66:88:1a:25:6d:08:fb:aa:91:fc:24:ad:9a:
7d:a2:09:62:22:df:cf:81:6a:16:f2:48:4f:f6:b3:49:4e:d1:
b6:45:3b:6b:41:a6:42:da:86:24:3d:69:9c:db:8e:46:2a:26:
bc:4f:cf:7e:c0:13:a2:e7:fa:fe:97:2b:ae:66:ea:6c:17:10:
50:c9:23:e0:1c:e2:0a:a2:01:1c:e0:fe:6f:5f:b7:e5:da:cd:
ba:71:52:f1:05:da:6d:9e:c9:a3:ca:a4:fb:ea:69:ec:b7:4a:
e2:e9:21:f8:21:c6:6d:42:7c:27:50:ce:4a:91:84:97:42:eb:
86:0e:9e:cb:60:d7:64:89:c8:a4:c2:72:37:ca:d1:40:3e:01:
bf:4b:3f:ae:24:92:40:70:5b:f5:40:c8:c9:18:fa:2e:ab:1d:
fd:3f:c7:c7:d7:8e:e0:30:0a:ed:6c:e0:f9:e7:76:82:c4:a3:
bd:2c:fe:9b:59:ec:92:ab:39:64:ad:c5:1f:8e:15:41:9e:5b:
a3:ac:b2:7c:d5:ca:01:90:21:91:4a:43:ad:31:80:1a:f6:fc:
c7:37:bd:c6:5d:3f:bc:31:6a:34:da:e5:de:20:bb:1e:81:d4:
b6:84:a4:0b:7f:1a:40:3e:74:c6:1d:18:06:7e:41:73:45:62:
59:ac:e3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzWZgcCVeWmS8T2cjZYAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjYwMzI1MjEwMTI4WhcNMjYwMzI2MjEwMTI4WjAzMTEwLwYDVQQD
EyhmYzkxODQ5OGRjMDg5ZGM5NTRhMDBhMDcxN2VjOTNkM2Y3M2JjOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A8dDKlpYQ0Py+Vzy6PfmJiQCPe2
9THxcG43jaMP6Zte+/3/dIhySPbTu6aasV5TuMf0jdmHZ2vLNVdtvIgAbxCjMDaE
FHP5K5hBPT4azvrLd9KkglDhNpY71SoW0m7uaSLfKOmhUesdVLd8hT03LDLhpybH
YfC6hWoWHQFqj6JlYbkcx/yT5lO8fc+i38jKYG6OW8jUUGHQW9q2CPtPmQeIUEpR
UPyJoxglvM4JdzIlWj4ufaGV89uL9EsUR8nSF4Hshs2dGL/q30i9dDcCUH24OmOe
SG3FP/JwLvEqOSGGEZ4fwxiX/J/eDiqX4HA8vBhfnor/gSAMc6sCo47uYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyRhJjcCJ3JVKAKBxfsk9P3O8j1MB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPIMwAtm
iBolbQj7qpH8JK2afaIJYiLfz4FqFvJIT/azSU7RtkU7a0GmQtqGJD1pnNuORiom
vE/PfsATouf6/pcrrmbqbBcQUMkj4BziCqIBHOD+b1+35drNunFS8QXabZ7Jo8qk
++pp7LdK4ukh+CHGbUJ8J1DOSpGEl0Lrhg6ey2DXZInIpMJyN8rRQD4Bv0s/riSS
QHBb9UDIyRj6Lqsd/T/Hx9eO4DAK7Wzg+ed2gsSjvSz+m1nskqs5ZK3FH44VQZ5b
o6yyfNXKAZAhkUpDrTGAGvb8xze9xl0/vDFqNNrl3iC7HoHUtoSkC38aQD50xh0Y
Bn5Bc0ViWazjbA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:29 2026 by rpki-client