Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
File: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft (raw, json)
Hash identifier: Ep3T9E+65RuNyfIAGBMmJMFgTh1m28uGN05HCVpCfIo=
Subject key identifier: 87:D2:4A:4C:54:30:14:38:C4:0F:32:E0:D1:BD:D7:6C:8C:C4:18:76
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: 019D27725255915C976B98BE6C7B3406F999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
Manifest number: 1187
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: HVKPekSAYfYBLKctsLZVoL7Mj5E.roa (hash: tb5jaPHY9V+hpeGkHok+mvgC1VTbFiJt9yjOUi6BH+8=)
2: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl (hash: S7Io3AUEIkFky0aiOJI8Xe88Xi/evIjag+8vd21EmIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:52:55:91:5c:97:6b:98:be:6c:7b:34:06:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=87d24a4c54301438c40f32e0d1bdd76c8cc41876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:50:d0:a3:96:c5:bb:32:3c:18:40:e8:ba:
cd:da:02:a2:ce:c9:11:ab:df:64:ef:96:0d:39:04:
d9:00:22:b8:7a:f0:6f:0e:f3:16:a5:a4:21:ee:49:
95:c9:7c:3c:82:ca:49:42:6f:48:44:15:28:84:d4:
ca:56:77:ac:9b:47:2e:d4:0b:76:8b:ab:36:29:72:
93:79:c8:b8:fd:f5:45:fd:df:8d:bf:f0:d6:7a:ab:
7d:5e:e2:69:2c:ad:6b:a4:c2:7c:aa:b3:d3:bb:3f:
6d:cf:b6:dd:cf:29:0a:0b:57:e2:0c:d5:00:51:92:
47:5f:3e:c1:7a:f8:9d:3f:e0:6c:48:95:62:72:e1:
57:e7:25:1f:91:71:06:38:94:36:4f:5f:66:2b:7e:
1e:c6:c2:ec:63:bb:4b:bc:33:2a:9b:a1:bf:79:73:
0b:bc:2e:a6:ec:67:ec:d6:ef:f4:6e:ab:e6:ce:42:
b6:2a:b4:76:8c:84:5c:90:a2:2e:cd:6d:30:70:db:
24:3c:55:13:b1:bd:d5:09:b4:86:ef:c7:65:29:83:
c5:87:86:1d:73:61:5d:23:1c:82:e4:c2:07:1e:6b:
dd:2e:43:c2:1d:61:08:bb:0e:2f:e6:c8:e1:58:39:
28:db:ad:e2:d4:f1:e7:65:da:41:06:1b:ba:09:3d:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D2:4A:4C:54:30:14:38:C4:0F:32:E0:D1:BD:D7:6C:8C:C4:18:76
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8e:07:d1:57:e3:0e:35:99:69:56:3e:c0:f7:4b:9f:77:bb:
d9:36:79:da:41:78:a2:91:8c:0d:10:38:05:7c:37:64:e1:23:
e7:bc:99:17:05:73:4c:c2:9d:19:94:b5:a4:73:99:cd:b2:e7:
cb:64:f1:f0:89:7b:76:43:c2:5f:e4:91:e4:16:5e:4f:5c:d4:
a5:83:5f:85:aa:9d:19:12:c4:5b:6f:07:9d:ab:71:70:76:93:
67:73:bf:eb:02:d9:b9:16:3e:e7:f3:7e:65:3a:9e:b0:41:69:
26:d0:92:4f:b0:43:b4:eb:f3:86:1a:81:11:de:7f:c0:cd:6a:
08:0d:25:e5:dd:2f:8a:d9:86:25:f2:14:ca:71:dc:7d:0c:c2:
c2:36:73:22:c0:f2:2b:d0:fd:c7:8e:f9:44:b3:df:b6:a7:f0:
2d:35:35:b6:52:c3:cc:02:cb:57:2c:f8:61:ac:d8:63:17:ad:
67:d3:27:4d:fd:55:8c:b1:ea:28:97:8e:10:86:9b:d6:6b:6f:
56:bb:16:7c:43:12:7f:7d:a7:29:cf:e1:5d:6c:f4:23:91:be:
2d:b2:53:80:6a:80:75:eb:c1:68:88:63:fc:b7:1a:91:54:4f:
48:b8:77:e2:22:79:61:8b:7b:62:34:84:3c:0a:ca:e5:51:c8:
cf:66:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:12 2026 by rpki-client