Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: Q5xe+a9qlL49F8Zffgny7xt1NBaXo0GZKfRtUzuZpsU=
Subject key identifier: 90:23:BE:D2:BD:AF:05:22:DE:34:78:1B:18:81:C4:7A:C3:97:3C:A9
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 019D2628353235177994B5B0A63C322FDADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 1894
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: czV35dQyBFuhEXt8r9Ft0rYijW0yvUaB/DoIsmovBGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:32:35:17:79:94:b5:b0:a6:3c:32:2f:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=9023bed2bdaf0522de34781b1881c47ac3973ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:6e:65:3f:bb:0a:71:98:2d:4c:18:13:44:
a8:6f:f1:16:c8:a3:e0:2b:b6:75:c9:36:ec:5b:50:
b7:d1:96:25:24:7d:6f:23:77:f9:c9:0e:39:b6:04:
b3:1e:21:8a:5c:d3:44:74:90:a1:2a:2e:da:9d:65:
1b:89:f4:c3:df:da:8f:8c:4e:d3:d6:d1:7d:16:9b:
46:92:e8:45:c2:97:a6:77:96:b1:ed:b7:b2:d2:a7:
09:c4:71:bc:25:12:0f:c0:c3:98:4f:82:cf:5c:47:
e7:cf:6a:d9:67:fd:2f:fc:77:58:18:15:d7:dc:76:
bb:5a:db:93:96:28:e2:2a:66:03:85:cd:7b:01:d6:
87:3c:d0:ee:99:8f:23:fa:6c:1f:d7:51:ba:d1:9a:
f5:7c:36:50:a0:8e:82:e5:d1:8a:7a:f3:e6:32:50:
b1:e8:a6:1a:f8:db:30:33:bf:c4:f1:90:3b:fe:85:
ff:d2:aa:58:02:14:2e:07:7e:37:b6:12:74:82:2a:
32:f8:cf:4a:9c:1f:0a:9f:ce:29:ad:29:44:c2:2c:
57:b2:e3:35:04:50:cd:bd:56:fe:93:41:cf:76:67:
c0:0f:ac:b1:45:19:20:f7:9b:da:aa:95:96:e7:f6:
a6:2c:76:db:00:93:b7:54:ca:19:86:6e:38:2c:bb:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:BE:D2:BD:AF:05:22:DE:34:78:1B:18:81:C4:7A:C3:97:3C:A9
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ae:9a:d2:f4:61:4e:df:79:79:9b:e4:49:ff:ab:35:a0:ed:
ec:6b:0e:e1:d3:f2:a2:ef:a1:c3:ec:76:57:39:63:66:e6:0d:
43:6d:4b:49:4d:d8:d4:ed:c7:14:6c:7c:49:3c:db:4d:26:fe:
36:af:31:d1:7e:cd:52:98:99:71:ad:26:23:6c:fc:7d:78:90:
54:91:ec:8e:10:bd:f0:cc:2d:16:15:43:00:ed:6d:2b:4a:af:
c4:6f:27:2b:a0:bc:b6:3f:5a:f9:18:be:dd:9d:b0:fa:aa:fa:
5b:db:75:76:64:a5:8b:03:3b:7f:ea:0a:83:3f:c3:e4:c5:b0:
a1:4f:b2:0b:52:0c:43:d8:43:f9:59:a0:27:16:66:f6:d2:04:
81:46:25:c9:9e:fe:7f:df:4a:81:c3:90:35:aa:44:5d:9a:ca:
4a:3d:8c:b0:32:34:b1:73:a0:6a:b1:f4:47:aa:21:fd:5c:83:
18:16:4c:b6:d3:73:29:65:7d:66:67:33:24:81:f1:8e:b3:8b:
0e:de:f3:42:d6:b9:6a:41:e8:68:83:9d:2c:6e:3d:b7:da:7d:
fe:03:13:13:4b:a9:fe:6c:2e:a0:6c:f6:84:8b:ed:d3:b6:66:
07:f9:8f:21:f3:be:ad:11:11:f1:f9:16:a4:a9:86:08:c8:cf:
c6:44:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:47 2026 by rpki-client