Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
File: F_2hoaCf3teimtqgN1JFpM7SPGg.mft (raw, json)
Hash identifier: zI+d03sCjZTGPgF6znYOb/YC7QxHfuHPJYaQvx3yi8c=
Subject key identifier: D3:A9:E0:C4:56:7B:3C:E2:45:2D:D8:70:88:B6:A3:F4:E4:5C:5C:5E
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 019F91A43178ADCE2EF8581761DBCD4EEBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
Manifest number: 0112
Signing time: Fri 24 Jul 2026 01:01:24 +0000
Manifest this update: Fri 24 Jul 2026 01:01:24 +0000
Manifest next update: Sat 25 Jul 2026 01:01:24 +0000
Files and hashes: 1: F_2hoaCf3teimtqgN1JFpM7SPGg.crl (hash: 31Mi7aDbnhWmjxEU9DrnEV4R+eiVouBI6MiDsofVZBc=)
2: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (hash: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=)
3: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (hash: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:31:78:ad:ce:2e:f8:58:17:61:db:cd:4e:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Jul 24 01:01:24 2026 GMT
Not After : Jul 25 01:01:24 2026 GMT
Subject: CN=d3a9e0c4567b3ce2452dd87088b6a3f4e45c5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:f4:6a:2a:bb:75:25:b9:15:96:f0:3a:2f:
8c:9e:a9:3f:c1:ad:24:83:1a:e1:5b:3e:87:8f:72:
ef:f7:f9:9e:bd:d3:38:d4:d3:de:b0:b4:9b:59:34:
3c:07:c5:d1:a8:94:db:b8:16:3c:3f:ad:5a:84:50:
c1:27:d2:22:52:70:c7:8d:43:b1:b7:9a:72:d3:f4:
af:1a:7d:4c:6a:61:c1:f5:dc:04:05:a5:3e:25:19:
3b:bb:bf:20:13:f7:5b:c4:51:a7:57:40:f1:9e:8e:
df:60:3f:10:82:1b:e6:44:68:6b:24:3c:45:cc:14:
6c:8d:df:ba:8f:28:21:f8:7f:94:f7:1c:b1:eb:7f:
99:46:9b:60:21:1d:44:6d:de:16:83:ee:07:95:37:
be:7e:da:ea:8d:f0:df:ac:48:62:00:fd:b7:9d:2f:
24:17:0b:60:c4:c0:01:64:2a:d5:78:66:fa:25:2a:
22:0a:95:4b:ed:21:ed:14:17:05:63:2a:b9:19:48:
32:62:6e:bf:c1:57:d2:ad:a2:b2:53:d6:f6:2d:a2:
f3:9d:1b:23:0f:6d:91:ee:94:f6:0e:cb:ab:be:a1:
b7:d6:42:d8:d0:c8:4e:85:ae:9f:0f:4f:52:0e:75:
a4:fa:32:c8:df:1b:0e:c0:2c:07:a1:f9:90:7b:07:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:E0:C4:56:7B:3C:E2:45:2D:D8:70:88:B6:A3:F4:E4:5C:5C:5E
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:59:90:11:e6:50:39:ec:08:d4:5c:32:f6:3a:20:30:2a:
ca:1e:4f:91:71:db:8a:66:cc:55:6d:2d:14:29:a0:80:b3:c0:
87:7b:9c:29:70:a9:e7:74:e0:d9:7f:ad:11:45:cd:6c:ad:03:
c6:5a:bc:b1:94:b5:a5:7c:21:de:6b:6a:2b:4f:5b:da:4e:07:
23:49:75:96:12:1e:a8:f2:af:13:f8:47:29:3b:f7:e3:fa:9b:
61:00:00:bb:68:a2:53:cf:0a:4a:7b:2d:8d:0e:56:bd:a0:1c:
af:af:c5:9c:3b:77:f5:20:c0:2d:ea:01:dd:44:54:2b:aa:87:
71:64:b1:50:17:5b:a4:47:4c:80:c4:3b:15:3f:ed:81:b9:d3:
79:20:fa:65:90:ca:6a:a4:84:0e:e9:6a:18:5b:15:fe:fe:4c:
07:9f:0d:21:9c:6c:46:86:d2:4e:50:c5:de:4d:30:c4:bf:55:
b5:c7:45:37:76:00:b3:9b:b2:4a:bc:15:c5:41:af:c9:c5:65:
2f:14:c8:6a:a9:cf:4c:cf:bd:c4:7f:e1:5f:a3:45:d7:26:30:
e4:da:01:d1:1b:1b:51:7a:65:e0:de:b9:4e:87:18:ea:3a:e9:
14:93:29:47:e3:49:a0:92:5a:84:90:8e:1c:f2:2b:67:67:ca:
e9:90:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:11 2026 by rpki-client