Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: IKRBOlOhIIPkHtALYgoaTHtFD73kwnoZMRMXwkt5Yh0=
Subject key identifier: 85:EE:9C:1A:B9:8B:22:A5:D2:BE:80:87:A8:A8:EB:D2:2B:69:C2:FE
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019D27DF8BBB8ED7769FE78958AEE9FFD0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 079D
Signing time: Thu 26 Mar 2026 02:00:54 +0000
Manifest this update: Thu 26 Mar 2026 02:00:54 +0000
Manifest next update: Fri 27 Mar 2026 02:00:54 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: Yhx/Tycb3nmufqps4XigJflG0K8ZpzO55hfmaqMxB5g=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8b:bb:8e:d7:76:9f:e7:89:58:ae:e9:ff:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Mar 26 02:00:54 2026 GMT
Not After : Mar 27 02:00:54 2026 GMT
Subject: CN=85ee9c1ab98b22a5d2be8087a8a8ebd22b69c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:6c:e2:60:6b:df:b6:c7:03:64:42:84:e1:
13:0d:ba:c6:f3:1e:65:e3:13:1e:11:5c:82:d8:3f:
75:33:af:81:9f:99:39:09:16:21:cf:ca:6e:0d:a5:
82:9b:b3:da:03:5c:dc:1a:5f:66:b0:f6:19:60:34:
ef:7c:e1:11:2b:59:91:13:26:e9:3d:a1:a1:8d:42:
85:57:f3:7b:c0:eb:de:51:69:b0:bd:7a:30:02:64:
cc:61:3f:d6:fa:ef:e4:42:69:d2:14:3c:28:60:42:
02:be:a3:e7:83:76:de:ff:dd:2b:51:82:bd:7b:18:
d2:56:8c:5c:41:53:a1:ed:b0:3a:3e:b1:50:78:8a:
12:ad:ba:58:ed:35:16:b0:de:4a:dc:d6:7a:e8:94:
6c:00:53:ca:d2:e7:f2:07:06:72:41:f8:54:d1:dd:
89:cd:54:57:a6:a1:19:cf:e5:03:f7:6a:14:8d:69:
e7:5d:3c:af:54:9f:8b:15:d3:de:33:0a:07:2d:9c:
84:f7:a4:eb:2d:de:ab:fa:cf:f3:17:60:59:fd:3f:
cd:3a:b0:0f:4d:47:75:74:c5:8b:cc:d2:77:4d:e8:
57:5c:c0:70:4b:03:ba:9b:a6:82:b0:70:f6:2b:98:
87:39:cb:9f:6e:76:a5:c7:83:26:6a:7d:a3:2e:c0:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:9C:1A:B9:8B:22:A5:D2:BE:80:87:A8:A8:EB:D2:2B:69:C2:FE
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:65:da:c0:de:2e:64:ae:0f:f9:e0:54:07:14:db:c5:c8:bc:
cd:ec:0c:aa:b7:23:ef:a9:50:16:c6:23:3a:d0:76:1c:ae:7b:
0e:4a:b6:7a:99:86:1c:9a:d6:e6:28:12:9b:4f:60:73:02:51:
08:72:1a:22:ec:4a:22:11:01:2b:95:fc:ea:7b:36:75:43:d5:
0a:ad:54:83:67:88:d6:41:7b:b4:de:75:e9:4b:7f:e0:e8:89:
e8:ba:63:65:f3:ef:69:45:22:fd:6c:79:54:8b:00:bb:fb:ac:
e4:07:2d:4b:c9:68:1e:a7:89:30:33:5a:a2:83:70:f5:5e:1e:
e4:39:37:d0:9e:01:c6:2e:f5:7a:58:e2:22:4e:53:fc:12:3a:
58:ba:2f:b5:e9:9a:3b:af:fa:9d:da:77:c7:11:64:52:e2:d2:
37:14:c4:f0:16:f6:12:75:18:42:8a:15:45:03:31:de:a7:7a:
9d:96:ac:32:08:64:e2:62:06:f4:05:69:74:6a:95:cb:d3:d7:
12:09:df:a3:1e:f9:bd:63:d0:2f:1e:93:27:0c:a9:0b:2b:71:
6d:fc:5f:bb:d6:55:a5:b1:b6:df:b7:a1:61:a1:6e:3a:13:95:
2c:13:4f:fa:be:59:f0:b1:c2:d0:9f:a7:e0:2c:a4:fa:c1:72:
1d:01:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:01 2026 by rpki-client