Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: QK6KTt4d082NdgalR1FBJdi+NUJhskWlGI732cs5xLM=
Subject key identifier: BF:B0:19:A7:DF:16:8C:44:5E:C1:42:5E:D0:1A:3E:37:43:4B:30:8F
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019D27DFE71CDB095A8C45978F4948AA8F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: eVfeKcC2uWozd52l+MeBAg1MTAqdBARvenOTgJGd+gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e7:1c:db:09:5a:8c:45:97:8f:49:48:aa:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=bfb019a7df168c445ec1425ed01a3e37434b308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:20:29:35:58:c0:e5:ad:af:3d:77:95:91:
58:3b:d4:6e:20:98:6c:fd:a5:03:40:5b:ea:b1:4d:
0f:49:ea:0e:24:b2:0c:d4:8e:7e:8b:eb:7a:d1:0d:
b4:7a:ae:00:3c:a4:e1:88:fd:05:c2:05:71:da:b5:
8f:6a:dd:be:7a:d7:ca:45:5a:ed:80:e0:fa:f2:6f:
2e:c7:0e:87:6e:72:18:27:a8:db:50:ae:3f:78:20:
fc:4c:47:7c:82:1a:14:22:5a:b1:c5:cb:e4:60:19:
85:f9:db:3c:1d:9d:9f:79:55:3f:24:e9:2c:97:e0:
f2:12:51:ad:2c:d9:b0:9e:bc:9c:a1:9f:f6:f2:14:
8b:1a:2b:39:da:4b:4a:d9:ae:6b:e2:43:3d:4e:a5:
b2:00:c8:01:f3:f1:20:ab:45:cb:e6:28:ef:24:9a:
b2:86:f7:92:68:f1:58:95:49:54:68:24:74:de:4b:
b4:07:1c:90:70:d1:16:52:74:a3:29:cb:c6:8d:07:
25:65:f2:61:1e:12:7a:88:6e:c1:e7:5e:b0:2b:50:
71:88:5f:0d:c6:f5:13:a7:71:04:c6:a1:65:91:19:
2e:1c:8b:90:24:bd:80:31:17:64:d4:68:7a:32:1a:
2f:0d:e3:bb:b8:4d:8d:a1:53:0c:95:28:de:ae:b0:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:19:A7:DF:16:8C:44:5E:C1:42:5E:D0:1A:3E:37:43:4B:30:8F
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:a3:5c:ef:9b:8d:aa:ab:77:62:17:07:d6:70:b1:af:06:
09:fc:18:66:eb:a6:da:6f:70:a5:2a:ba:52:ff:f3:f3:d6:b3:
a9:c9:a3:c0:b8:e8:96:f3:33:04:f9:15:97:49:05:97:3e:27:
c0:f1:4c:a6:55:ba:7f:a5:fe:fe:1e:9b:6d:55:3c:60:01:3e:
f1:a8:52:27:29:78:a7:07:8e:d9:30:ab:ec:a8:2b:ac:57:4c:
d3:44:8d:7b:01:5b:3b:01:58:32:aa:aa:2b:4d:5b:3b:84:02:
c0:b2:7e:51:73:6b:64:7c:61:89:40:67:7e:e2:81:3a:27:6b:
f8:8e:3c:8a:6b:1d:e7:56:be:80:07:b5:db:6e:bf:55:b3:0d:
a8:6e:11:c8:4f:fb:6e:f8:de:48:1e:9b:30:ab:46:ba:73:1d:
4d:36:93:47:5b:1c:58:ef:33:2f:06:7d:77:31:9e:44:6e:df:
8f:b1:b2:cb:06:87:dc:c0:42:5b:3d:de:b2:2c:30:fd:6a:5f:
2b:9e:36:a2:74:aa:78:e3:aa:90:e5:19:25:e5:cd:52:8a:63:
b8:16:85:35:e4:67:39:a1:64:16:db:d8:78:e5:77:00:82:4c:
d7:d3:e5:82:de:b2:bb:39:4c:02:69:db:ee:52:91:f9:8c:fa:
4a:be:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:55 2026 by rpki-client