Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier: 2siltFORoW0HIsrEAALybfakTE5hLN5dPrO4s69pU2E=
Subject key identifier: 60:95:26:D3:14:06:31:41:84:D1:79:04:71:32:3F:9C:81:80:A2:21
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial: 019D296110B9B975B155675CD2BE336EF5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: yZrPYUYoZPZ3/BO9xRa0nuJP/ELlqCYOMLUe397ZET8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:10:b9:b9:75:b1:55:67:5c:d2:be:33:6e:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=609526d31406314184d1790471323f9c8180a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:29:87:72:ff:20:c7:cf:ee:33:2b:d7:16:
b9:f3:06:c8:45:77:7b:ca:ae:39:ad:fd:06:5b:8c:
8a:49:4e:cc:65:5d:04:2d:49:42:92:41:f3:83:27:
99:17:7e:06:38:44:66:65:f7:2a:71:36:9c:38:1d:
c3:87:ed:1e:93:fc:4d:ce:2c:f6:e0:fb:ac:03:6a:
39:91:51:04:3f:8f:2e:01:5d:e0:ff:97:40:6d:0b:
fb:cc:cb:fe:b8:cb:87:b6:0d:98:eb:93:26:1b:82:
96:e6:1c:3d:73:de:af:87:aa:18:be:a2:1a:dc:b3:
03:a7:62:e0:64:5d:6d:26:63:43:89:84:dc:48:44:
75:40:ef:bf:c4:df:9d:04:b1:36:5b:9c:65:59:16:
1f:dc:53:ed:78:79:22:50:3a:63:f6:e8:78:07:93:
e9:d1:2f:85:27:00:a6:45:3c:9a:0a:e9:91:87:c3:
e9:a4:c0:29:0f:5c:72:87:bf:ae:a1:99:12:0a:5e:
12:5c:18:ec:18:bd:b9:f5:00:d8:8b:31:0b:70:e3:
65:03:80:83:3b:75:ba:a4:6d:de:03:50:6c:70:00:
4b:d9:77:14:0a:05:87:f5:90:26:c2:89:60:76:44:
95:28:6d:34:7a:96:55:d2:fd:8e:9d:0d:ac:7a:25:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:26:D3:14:06:31:41:84:D1:79:04:71:32:3F:9C:81:80:A2:21
X509v3 Authority Key Identifier:
keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:b9:a3:cf:d9:74:da:56:48:10:26:1c:b1:39:29:f2:24:
2d:8e:2e:65:de:60:c9:4f:b7:a2:86:3b:d2:d8:ec:18:b9:3d:
e9:6d:d9:1e:ff:1d:e5:da:c5:08:1e:1a:4d:95:70:87:19:51:
04:f4:4c:0a:3b:ce:b2:d4:c5:80:0a:e3:8d:a1:ce:d2:c4:ed:
96:cf:6a:ea:8d:fe:d2:04:60:d4:06:53:e8:80:d5:df:04:43:
28:67:40:15:74:80:67:d0:42:5c:d2:56:a1:34:24:69:55:b5:
e7:d8:ab:0e:62:1e:5e:46:29:c3:2d:6f:71:58:bf:a4:f5:2d:
10:e5:23:91:b9:2d:ca:8d:c4:7c:1e:b7:de:de:0e:f6:8c:08:
ec:c8:a9:2c:fc:07:7f:ee:46:48:09:04:24:1a:37:a7:2a:cd:
5e:fa:be:b3:d9:77:3d:71:7d:74:bb:ea:dd:71:1e:5c:92:aa:
2e:cf:aa:ec:c8:02:6c:29:e9:55:0d:c3:82:0e:1a:b8:65:3c:
b7:76:77:c6:e8:44:3f:27:a5:67:02:37:0a:85:3b:d6:2f:f6:
be:ae:c0:35:4d:53:e4:9e:95:2e:53:e6:52:db:c4:b3:75:ca:
49:05:94:1c:3a:6a:e3:bd:6f:67:5a:86:95:8c:7e:d5:9e:13:
51:13:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:54 2026 by rpki-client