Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: p76u8/Q6lZv7wzEXR0l25C9vxrAGMvOQogwhQzBVQ+o=
Subject key identifier: 2E:D2:E7:05:FC:0C:40:F9:F6:3F:7E:4E:BE:7B:C9:BD:47:56:1A:57
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019D25F1F69697CF47790570D4A6DEE4D4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 1289
Signing time: Wed 25 Mar 2026 17:01:47 +0000
Manifest this update: Wed 25 Mar 2026 17:01:47 +0000
Manifest next update: Thu 26 Mar 2026 17:01:47 +0000
Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: Hei6NaI0dTaIm2HpSZncZ1M4KQjnYONY0pai0khGe+M=)
4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f6:96:97:cf:47:79:05:70:d4:a6:de:e4:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Mar 25 17:01:47 2026 GMT
Not After : Mar 26 17:01:47 2026 GMT
Subject: CN=2ed2e705fc0c40f9f63f7e4ebe7bc9bd47561a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:17:91:32:b6:63:6f:c1:e8:b5:65:0b:29:
da:28:2b:54:46:49:b2:28:6e:b4:d8:7d:12:85:15:
b0:83:6e:f3:60:02:bf:be:ed:18:ea:40:df:41:20:
e3:89:3c:e3:7b:bc:be:4f:67:9d:08:a5:75:c8:c2:
91:0c:19:fc:da:3f:8e:f7:a2:9a:60:56:21:f8:0b:
e2:34:09:56:57:e9:01:38:2e:01:02:3c:a1:38:0b:
fd:7f:99:56:fc:f7:c8:08:e3:07:51:14:03:e1:63:
7d:4f:ba:6a:fb:d4:91:53:75:52:3b:df:79:e2:7f:
3e:8b:c4:a9:d4:d2:7b:cc:4f:fe:44:b0:e7:f8:49:
f3:31:fc:7c:79:d1:14:23:a0:b4:9f:85:7b:86:8b:
c3:5f:0a:61:bc:5b:9d:25:86:8d:94:ee:48:6c:4d:
07:de:be:21:50:bd:c9:c9:9f:a2:f7:49:d6:87:96:
5f:59:37:90:16:6b:47:bc:d8:f5:09:97:72:05:e6:
8a:d2:50:02:ca:7a:05:d1:a9:11:bc:90:26:22:7a:
9f:3e:c8:ae:4c:19:b1:9d:fb:5a:89:16:5b:61:ab:
7b:98:b1:21:54:44:8f:23:eb:7e:59:e5:c2:58:7c:
39:91:88:17:44:f4:2c:2a:3e:2c:b5:42:34:0e:b6:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:E7:05:FC:0C:40:F9:F6:3F:7E:4E:BE:7B:C9:BD:47:56:1A:57
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f6:89:77:14:16:db:6e:32:ab:1a:84:7b:d0:62:fa:e8:c6:
55:84:ba:f9:d5:f7:22:25:5a:36:9e:7c:84:64:db:68:b9:e5:
ea:41:9a:d7:41:15:5b:05:29:df:46:92:4f:a0:0e:75:a6:77:
fa:35:f6:70:97:a6:27:a9:f8:c6:62:1b:03:f9:4d:73:b0:0a:
f1:5c:3b:15:8a:1c:b9:76:3e:aa:79:99:c7:39:65:e0:d0:64:
57:d6:92:38:09:6c:7a:69:77:a3:4d:b3:8c:e5:e1:b8:81:ee:
e0:bb:6d:57:a7:39:9e:a7:11:63:7b:49:0a:03:98:15:92:87:
4b:26:7d:83:42:4e:21:73:f9:10:85:fb:ac:0b:a0:81:21:77:
07:df:18:a6:ca:33:50:0b:6b:75:78:d2:c1:66:28:e1:ec:f8:
c8:2e:db:b3:74:4c:db:7d:e3:5d:b5:89:90:9f:ab:df:2d:a1:
18:44:98:80:f7:5d:c0:d5:d6:53:43:12:29:33:2b:ac:d9:69:
99:3b:6d:3d:da:af:68:a2:32:ec:12:05:07:d9:81:0c:a2:b0:
cb:b9:98:3a:7b:c4:e2:f6:04:ea:5e:cb:b5:33:4d:2f:68:3a:
f8:3a:71:22:10:29:9a:fd:1a:3a:8a:c3:84:3f:d5:40:00:05:
b3:73:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:51 2026 by rpki-client