Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: hPhjf9kB58KnIL8G+EURhCo/jD586uzsnWZYC7QCwug=
Subject key identifier: 79:48:B1:18:19:80:5F:44:C9:9C:96:E3:B1:32:AA:79:C2:E3:94:B3
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019D27721461B6646F80DCDA23FEDCAD2D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:20 +0000
Manifest this update: Thu 26 Mar 2026 00:01:20 +0000
Manifest next update: Fri 27 Mar 2026 00:01:20 +0000
Files and hashes: 1: 28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa (hash: CSosAC0RkIivRtuzYTWYojYmIhFl5s25SMxfOZ9APWQ=)
2: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: RQXWn5iFzEHN+aB1L6Le22IBIgJ26wNxj/mUmslB19Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:14:61:b6:64:6f:80:dc:da:23:fe:dc:ad:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Mar 26 00:01:20 2026 GMT
Not After : Mar 27 00:01:20 2026 GMT
Subject: CN=7948b11819805f44c99c96e3b132aa79c2e394b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:57:b2:ea:2d:38:42:12:12:47:76:bc:01:
29:a9:ab:d5:6b:65:d2:74:b5:b1:df:38:c6:3b:f8:
46:f9:0d:b5:6f:7a:22:4b:e6:4b:7c:1d:c8:43:c6:
bd:1d:a3:00:f2:11:d6:2b:c2:58:78:90:05:14:b0:
87:c5:84:d9:3a:d7:90:f1:95:27:01:9f:54:9a:2b:
5b:77:62:06:19:21:0e:76:c5:96:5a:d0:55:f8:dd:
51:76:d7:a7:86:22:c5:e3:6c:07:6e:78:64:03:57:
c4:11:11:1a:67:df:07:f5:1c:9f:cd:ed:0c:c1:26:
fe:6e:98:a9:7a:e4:c9:71:17:bc:89:a6:df:09:0f:
84:95:87:c6:15:e9:93:ef:20:34:47:b0:fa:4b:26:
b6:3f:5f:74:32:1d:bf:41:c3:e0:e6:be:bf:81:8a:
f2:04:bf:d4:3c:f6:fe:95:8d:0d:f1:6c:f3:2e:98:
7e:b8:64:0b:d3:e9:5d:45:71:8a:1b:c0:84:c9:6c:
e5:ef:7a:3d:92:a5:06:a1:97:e4:22:fe:06:c7:2d:
94:be:ae:0e:bb:dc:40:e7:5d:08:47:f1:f8:b1:84:
75:01:d4:29:ab:50:ce:0b:fa:90:fa:71:96:8b:35:
e1:5a:7c:d5:96:c4:c2:23:ec:98:54:6a:8c:7d:ba:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:B1:18:19:80:5F:44:C9:9C:96:E3:B1:32:AA:79:C2:E3:94:B3
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:24:5b:5a:bc:f6:f3:31:6f:fd:d4:5b:52:38:0c:f7:d9:
ac:41:f7:a6:ef:72:55:f9:e7:eb:c0:ba:5b:62:ba:f9:10:a1:
02:ff:5b:2d:e9:c3:e2:13:7c:24:ec:ca:45:e9:4c:58:cf:63:
63:6a:7c:90:32:05:1a:9f:33:e5:f5:84:d4:27:b9:05:94:4d:
1e:99:61:e5:d8:a6:75:2d:d0:49:09:84:7c:8c:a1:58:cf:16:
c7:ac:fc:64:30:89:26:d3:f8:57:2b:e0:fd:76:39:8c:52:1f:
ec:2b:76:eb:cf:21:76:aa:66:1b:b0:cb:50:07:4a:c8:72:39:
2b:28:d4:57:f6:c1:d8:77:55:21:dc:3d:59:94:54:81:8c:73:
1c:ae:2a:8f:38:7d:bd:1f:70:a8:cb:d1:f2:10:2b:1a:d2:9f:
8b:1d:38:43:20:94:78:0e:cd:07:5c:c6:a9:d5:54:27:87:f5:
22:b4:0e:ce:d7:23:92:a5:e3:23:2d:8d:a8:3d:de:28:35:07:
f4:da:26:2c:48:a2:23:19:2c:97:4e:58:0a:8f:17:9a:cd:7e:
41:5e:3a:b1:99:b4:d0:95:ab:5e:1d:94:93:7f:16:7e:1a:9c:
41:d3:c8:e5:39:00:08:24:b6:de:0b:f3:4e:a7:b7:cf:34:8e:
d6:6d:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:38 2026 by rpki-client