Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: Wgx3zBmo948zW0LDaO/wXSalQIx8yCjTj8oG9vUHCyM=
Subject key identifier: 7D:1D:D3:BD:E7:7B:BB:55:16:9C:4B:74:3D:DC:1D:C8:EB:C1:11:F1
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 019D26288D29505DB08686DF9F51A3497883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 07E1
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 0mn8YmaU6UED9GvSSLEgV9es3tq3xcZwCfX3/B7HQrc=)
2: udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa (hash: XThKptGke2Rt2jt7oAQhE+VAuCr0Qg/2RUNkoKL1FUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8d:29:50:5d:b0:86:86:df:9f:51:a3:49:78:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=7d1dd3bde77bbb55169c4b743ddc1dc8ebc111f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:0c:8e:a7:e7:fc:16:2b:c6:bc:f5:26:cd:
9e:02:03:e4:44:2e:17:34:5f:88:27:d4:fc:1f:a8:
00:9e:4b:b7:c1:9c:e5:37:f2:a2:0b:00:20:0c:85:
bc:80:73:bb:35:c1:f2:b6:42:a9:2e:f0:fd:54:09:
de:14:d1:fc:6a:26:bb:22:4e:89:26:83:0f:47:da:
f4:64:f6:2d:9a:25:4a:0f:a6:39:8f:e9:c6:aa:57:
63:ca:b8:3d:f5:b4:fd:3e:99:96:25:0c:e7:9e:d4:
15:ec:a5:cd:22:41:65:f0:f1:fd:7b:e5:83:59:61:
95:1a:ab:42:65:f1:f4:fe:4a:a1:79:9c:4c:fa:1d:
c3:cf:b4:f0:99:be:37:01:e2:c9:64:de:2d:d8:34:
67:95:d2:c5:a6:d3:d0:65:22:aa:08:07:27:f2:95:
a2:38:33:60:bb:6d:e0:82:a6:f0:52:fd:4c:c1:26:
1c:fe:66:14:22:d8:30:e6:ff:79:d1:85:db:09:9a:
09:68:cf:9c:d6:9f:82:14:1b:7e:00:2f:b8:e9:95:
63:83:d1:3b:f1:53:f1:f6:54:42:05:02:36:8a:31:
44:77:93:5d:76:b7:a2:b7:0d:65:04:f1:a5:c7:e0:
ff:80:f8:1f:b1:aa:09:1c:70:78:64:a6:71:d4:1f:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:D3:BD:E7:7B:BB:55:16:9C:4B:74:3D:DC:1D:C8:EB:C1:11:F1
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:be:19:c8:68:64:ec:6b:ef:04:df:52:a3:12:e8:36:57:49:
bd:23:1d:90:6d:9b:04:73:c0:92:0a:29:7f:56:a3:66:f1:57:
df:a8:12:c6:49:59:40:d2:9b:73:ba:17:33:32:9f:41:9a:a6:
e8:f8:af:8d:4a:6b:f4:a5:56:8f:8b:08:7f:79:39:53:12:c7:
a7:5e:15:ad:2b:f3:01:36:2b:12:d6:ee:ba:17:a6:ff:c4:84:
5d:64:ae:4e:59:dc:8e:34:7d:e3:f8:a4:52:9a:66:64:5e:5c:
e4:bf:e0:2b:62:74:b9:63:9f:7d:be:5a:2d:c4:0c:67:01:c7:
68:73:46:66:70:d8:22:cf:0c:ac:f1:67:79:74:ec:fd:2e:a3:
2b:c7:86:d6:73:53:44:02:57:05:36:8a:ba:0e:7e:65:f9:dd:
80:2c:d4:0f:cd:76:e3:d0:ca:75:d6:04:87:0d:29:ac:9c:9c:
58:94:ab:27:3e:22:a8:ac:84:e6:97:b1:df:d0:3b:e8:37:5b:
3a:b8:4c:18:eb:4f:88:2b:71:9d:cc:fe:dc:40:42:1b:d7:ae:
ac:ad:93:b8:fa:03:e5:5e:38:88:bc:9a:88:44:0a:be:1a:2f:
c0:ec:f4:9c:e2:c8:63:55:cb:ad:c9:39:19:31:26:15:6f:7d:
ab:9f:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:11 2026 by rpki-client