Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: RfRF1fjjW58xYMc+IOcbvcDpqbCXIyxQl9B3hEctE1M=
Subject key identifier: 90:B5:F0:FD:7C:2A:FC:B6:2D:50:45:33:F4:D4:D5:E9:01:23:90:4B
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019D284E1C8B9934C44F55F16898CC351141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 115E
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: aVC9ZZ8hSI4PctuW41TLXldLGJ+hctdHFdSxeoq4+GI=)
2: VYt88J2micc3RjkOiAbgbsahES8.roa (hash: Zo8tOxRpop/qL57ADwlkJqC3DjP20BCdR/VwhP6MEb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1c:8b:99:34:c4:4f:55:f1:68:98:cc:35:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=90b5f0fd7c2afcb62d504533f4d4d5e90123904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ad:cc:c6:23:fd:c9:5e:0c:ab:30:dc:db:
47:74:5e:1e:c4:84:29:7e:42:d2:b0:8b:9f:79:28:
8c:c8:cd:a3:3d:ca:75:0c:f8:cd:a7:c6:55:78:ee:
14:ae:18:b7:ea:6d:32:7f:5e:56:b3:54:04:b9:49:
c1:4b:ba:73:45:8e:df:3c:f0:4e:94:52:e4:5d:83:
76:17:b7:02:cf:91:24:2d:f2:41:70:25:01:7a:73:
ba:62:e9:66:be:a9:f2:ae:7c:af:77:be:e2:d0:bc:
2f:d7:ef:d2:7d:5d:30:ca:5d:08:d0:40:02:5d:8c:
d0:80:44:70:5b:5d:3c:3e:f4:ea:79:af:35:fb:2a:
69:4d:25:4d:70:56:c4:91:43:a4:6a:07:bc:0b:02:
2c:29:94:e9:7d:8e:e3:38:07:e6:92:82:93:64:6f:
71:24:85:ed:b4:13:b6:71:21:a0:22:77:f4:d4:db:
68:51:50:35:72:4d:19:26:df:b3:3f:c6:c2:b4:8d:
ae:f5:46:e2:87:72:19:57:97:7e:e1:ac:86:5c:1f:
49:e9:ea:d1:0c:9b:a8:e6:4b:85:a8:55:18:33:6c:
9b:be:9f:bd:65:d0:a3:c7:3b:df:45:e2:32:af:9d:
8d:eb:e7:65:9c:e3:41:9b:b6:57:58:d9:d1:8b:52:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:F0:FD:7C:2A:FC:B6:2D:50:45:33:F4:D4:D5:E9:01:23:90:4B
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:90:de:28:6a:ae:9e:06:8c:6d:9e:86:a8:a5:87:e4:61:
0d:19:fa:4a:45:68:de:7e:e5:24:9f:fe:2e:d9:27:2a:23:be:
14:06:e1:a0:e5:83:42:8c:21:7e:4a:72:07:80:06:87:53:b9:
4c:a9:97:ec:f0:1d:ca:0e:92:ae:ef:bd:e0:94:7a:b5:c6:06:
07:16:22:0f:bc:3e:9f:0b:12:e4:82:74:09:b3:9a:14:26:60:
7e:a2:b8:7a:14:25:da:e3:a7:0d:96:33:6a:df:b9:7c:e8:ed:
85:1c:c4:dd:19:a1:92:a4:ae:50:2b:55:18:9c:3a:8a:df:3f:
1f:54:05:1e:1a:26:8d:de:83:2d:f7:a3:a0:0a:80:3c:10:82:
12:ed:17:46:03:d2:39:c3:07:03:7c:11:96:cb:e0:e8:77:12:
77:cb:b5:4f:7b:ee:26:84:2a:c6:b7:e5:e3:07:5a:cc:e5:b6:
0f:e7:4a:85:a8:a4:41:cb:80:81:20:0b:59:dc:76:9b:dd:1b:
d8:d8:18:9c:b4:b4:b3:1c:88:88:38:f0:c9:a5:b1:43:a6:d9:
d4:90:8e:d8:6d:d9:65:86:d4:01:f3:ad:f4:28:c4:84:94:64:
50:13:d9:5f:d0:26:6f:67:84:aa:7e:77:51:af:79:c7:a3:4f:
f4:a0:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:44 2026 by rpki-client