Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: ChZXpN8Sbfm9jeSPB9lHmYGS7+hFK1PD5yaFoD6sg3o=
Subject key identifier: 12:53:61:41:2C:F3:B5:C7:43:3C:04:FD:96:64:8F:A3:56:32:4E:B3
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01A0D9F168C64EA1BC272ECDD4A3D1088B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 19:01:11 +0000
Manifest this update: Fri 25 Sep 2026 19:01:11 +0000
Manifest next update: Sat 26 Sep 2026 19:01:11 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 6pUwDwClySroVw405RwSFp19K0cGTWJaJckJD8aZ2+0=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:68:c6:4e:a1:bc:27:2e:cd:d4:a3:d1:08:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Sep 25 19:01:11 2026 GMT
Not After : Sep 26 19:01:11 2026 GMT
Subject: CN=125361412cf3b5c7433c04fd96648fa356324eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:ea:46:78:b3:0b:9c:0a:a0:ea:2b:4d:71:
a8:2e:b3:71:b7:60:29:75:ef:38:e4:0c:71:a7:3a:
53:25:cf:e7:85:54:d1:c6:3e:a8:e6:47:4c:b9:24:
eb:08:aa:a3:7a:ab:69:6c:2a:ad:0b:aa:75:61:57:
df:e4:96:1d:9f:0a:86:85:e5:cd:5f:05:88:3b:9b:
da:25:0b:5e:a2:9e:95:e1:8a:9a:07:8d:85:7f:e8:
b2:04:0f:bd:03:fb:7e:19:3a:83:e7:53:77:e3:e7:
7e:4a:f6:34:c8:af:98:f3:e4:55:6f:1b:7d:3a:0b:
1f:e7:e2:97:57:bc:2d:5d:72:5f:d7:f2:95:da:a7:
6d:4f:69:40:b2:f0:df:b2:26:27:30:16:7a:ba:e5:
db:b2:02:0b:60:f2:12:12:3a:f2:62:ae:ad:bc:bb:
84:11:9e:fe:26:14:10:e1:e9:7e:c2:ff:11:ad:ae:
a3:82:fe:28:58:71:1f:86:4a:97:0b:9f:0a:d1:1d:
08:33:ad:d6:f9:f7:c4:19:95:1d:67:e0:e3:df:36:
c4:4b:2c:0f:1c:15:76:73:8b:b0:78:7a:ec:b3:64:
d7:b5:ea:d5:b7:20:25:87:27:7d:ea:73:18:9a:c1:
a1:b9:5a:ed:90:5d:88:a7:91:b7:f8:80:e6:d8:d5:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:61:41:2C:F3:B5:C7:43:3C:04:FD:96:64:8F:A3:56:32:4E:B3
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:26:60:14:0d:72:33:4f:5f:90:c0:01:f6:44:ab:01:1e:84:
2a:be:3f:26:46:29:2d:4c:34:7a:a5:6a:58:ed:8c:a3:93:d6:
7b:2a:0a:e2:4e:d9:ad:6d:3d:5b:e3:db:45:e4:d9:a2:fe:b5:
a3:8a:8a:1f:d5:e4:87:78:ae:91:88:c1:e4:71:7c:97:e6:c1:
66:34:a4:60:af:1b:78:76:c2:c2:64:2a:29:18:fc:f9:82:ec:
83:cf:0f:cf:6f:4a:3c:60:c2:37:e0:99:39:d5:4b:cc:d6:b3:
c0:b1:3c:44:d3:89:50:6b:aa:a8:30:ab:54:c0:6f:76:47:c7:
a8:90:72:30:34:36:3d:fa:43:68:5c:ae:65:82:fb:ec:3c:bd:
68:cd:5e:0d:60:40:a8:85:f7:4d:90:4f:f7:e9:78:8a:68:ef:
0e:6c:2a:1f:56:bb:23:9f:02:b3:fb:63:c9:57:01:0c:5f:b6:
2c:91:23:82:b2:6d:3c:28:d5:58:b6:3f:ec:20:31:43:c3:8f:
a4:44:85:76:24:dd:df:18:23:68:b9:c7:ca:d7:02:ed:33:9d:
fa:3f:f5:34:c3:df:10:8c:fa:09:0e:4a:b4:67:b3:1a:24:04:
0f:ac:99:3b:69:6a:c3:c6:20:35:a6:04:98:0b:49:6f:cc:30:
2e:d9:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:15 2026 by rpki-client