Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File: F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier: c+30PzmF9iZJfZLyQWoJhzQAYs41rq3lgkd0iVEKqBk=
Subject key identifier: B7:68:9F:FC:24:05:15:35:C2:CC:CD:9F:D6:87:E7:A2:B1:AB:F3:B6
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer: /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial: 019D284DAD83A7C98065BA128C0A7845560F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number: 029F
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: nBG3x0hCD67fwCYAnsSyY87Ae5eSzswqIOjJAvqSpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ad:83:a7:c9:80:65:ba:12:8c:0a:78:45:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=b7689ffc24051535c2cccd9fd687e7a2b1abf3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:4c:21:34:03:ad:bf:86:4f:c7:ea:65:8f:
64:a5:41:f1:f9:1b:81:50:1a:0d:7f:2e:e2:99:8a:
56:97:1b:39:33:2e:42:90:69:22:05:18:db:f5:e7:
5e:bb:74:38:0d:b9:98:4e:da:e2:70:3e:cb:f4:88:
06:13:1c:a2:31:a3:43:75:e1:9d:6f:1f:15:5b:15:
10:25:c7:7f:f1:e8:d2:ce:d0:71:8a:5b:91:c5:1b:
16:1c:15:ef:0b:5b:6c:01:95:8e:97:3e:ed:fb:45:
04:51:96:32:78:c8:d6:66:a5:63:ac:cf:18:5f:9d:
e6:4f:98:a5:27:aa:a5:5a:c1:5d:f9:6b:a8:76:47:
68:d7:cf:c2:dd:73:cb:68:b7:7d:6a:e8:97:40:fd:
16:14:d0:0d:00:27:e7:be:34:2d:a6:a1:49:b5:fa:
69:44:a8:0a:29:ea:a2:92:00:cc:7f:de:e8:6c:1e:
a9:f0:ec:d4:6f:88:64:de:5f:ad:ff:1d:c1:1a:27:
2e:bc:b2:98:ca:8a:3d:aa:8b:45:7c:55:72:88:34:
b0:d8:5a:f2:9d:69:dd:a5:7d:82:c2:01:10:80:69:
6d:80:40:3f:ff:e0:75:f3:80:11:cc:36:7c:cf:fc:
5e:07:d1:70:b4:b9:48:1f:70:8c:d7:43:11:bf:24:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:9F:FC:24:05:15:35:C2:CC:CD:9F:D6:87:E7:A2:B1:AB:F3:B6
X509v3 Authority Key Identifier:
keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:6b:7c:f1:9f:af:58:94:d4:7f:c8:c3:ed:65:85:de:b4:
08:3d:64:24:b2:27:c5:96:b6:d9:d9:6c:4c:c8:b5:82:3a:e2:
db:f7:73:cb:90:17:4c:46:7e:c4:c1:20:e7:f0:3e:b9:a4:90:
1f:f3:7c:10:5e:ac:5e:9e:3b:b5:6d:a2:d7:73:e3:ce:30:19:
90:8c:13:5a:22:4e:b7:12:91:9a:ea:15:3b:04:89:f4:c3:8b:
66:74:54:ce:4c:c6:6a:bb:b3:f5:ab:ce:e5:02:11:31:2f:48:
fc:56:6c:fa:07:54:46:43:c0:a2:85:c5:de:6a:c7:dd:8e:35:
54:76:20:98:5b:bd:cd:ca:66:65:44:d6:c0:0f:fd:5f:58:a1:
de:eb:b6:4a:ae:8a:70:f0:4b:23:46:a7:26:87:3e:51:91:67:
a3:8a:05:8e:01:71:5b:09:87:de:2d:a0:5a:c2:97:7d:c9:61:
fd:0c:f5:02:63:dc:79:47:8f:bd:65:30:31:dc:e6:8e:0f:e9:
53:d8:26:15:9d:21:3d:c5:22:fd:e7:8a:f7:2f:72:ee:93:3c:
2e:f8:b9:4a:91:88:d8:b1:89:88:65:c1:ee:58:3f:97:5f:01:
11:bf:9e:4a:64:d9:04:c6:b1:2d:a0:79:b4:ad:7b:c9:fa:12:
b1:53:4d:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTa2Dp8mAZboSjAp4RVYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmMxNTA5YTkxNmZlYTc3YTFmZDQwODhhOTlkMGU2MjJk
NjRjM2YwHhcNMjYwMzI2MDQwMTEyWhcNMjYwMzI3MDQwMTEyWjAzMTEwLwYDVQQD
EyhiNzY4OWZmYzI0MDUxNTM1YzJjY2NkOWZkNjg3ZTdhMmIxYWJmM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxypMITQDrb+GT8fqZY9kpUHx+RuB
UBoNfy7imYpWlxs5My5CkGkiBRjb9edeu3Q4DbmYTtricD7L9IgGExyiMaNDdeGd
bx8VWxUQJcd/8ejSztBxiluRxRsWHBXvC1tsAZWOlz7t+0UEUZYyeMjWZqVjrM8Y
X53mT5ilJ6qlWsFd+Wuodkdo18/C3XPLaLd9auiXQP0WFNANACfnvjQtpqFJtfpp
RKgKKeqikgDMf97obB6p8OzUb4hk3l+t/x3BGicuvLKYyoo9qotFfFVyiDSw2Fry
nWndpX2CwgEQgGltgEA//+B184ARzDZ8z/xeB9FwtLlIH3CM10MRvyRurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdon/wkBRU1wszNn9aH56Kxq/O2MB8GA1UdIwQY
MBaAFBdsFQmpFv6neh/UCIqZ0OYi1kw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJ3VkNha1dfcWQ2SDlRSWlwblE1aUxXVEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lYzNjODYtNzVhNi00N2MzLTliZGYt
ODhlZDE4M2Y5YzAzLzEvRjJ3VkNha1dfcWQ2SDlRSWlwblE1aUxXVEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lYzNjODYtNzVhNi00N2MzLTliZGYtODhlZDE4M2Y5YzAz
LzEvRjJ3VkNha1dfcWQ2SDlRSWlwblE1aUxXVEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqJrfPGf
r1iU1H/Iw+1lhd60CD1kJLInxZa22dlsTMi1gjri2/dzy5AXTEZ+xMEg5/A+uaSQ
H/N8EF6sXp47tW2i13PjzjAZkIwTWiJOtxKRmuoVOwSJ9MOLZnRUzkzGaruz9avO
5QIRMS9I/FZs+gdURkPAooXF3mrH3Y41VHYgmFu9zcpmZUTWwA/9X1ih3uu2Sq6K
cPBLI0anJoc+UZFno4oFjgFxWwmH3i2gWsKXfclh/Qz1AmPceUePvWUwMdzmjg/p
U9gmFZ0hPcUi/eeK9y9y7pM8Lvi5SpGI2LGJiGXB7lg/l18BEb+eSmTZBMaxLaB5
tK17yfoSsVNNZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:04 2026 by rpki-client