Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: 3Ue90SbyoR6UZclXAKYQ+DXE0jWALUxX018sewQe9fI=
Subject key identifier: 13:AB:6A:2D:93:9A:6F:62:68:A9:62:B3:A0:34:17:05:40:6A:7C:76
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 019D29CE8D6E12A82FD08AFC5241C959F0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0EB9
Signing time: Thu 26 Mar 2026 11:01:35 +0000
Manifest this update: Thu 26 Mar 2026 11:01:35 +0000
Manifest next update: Fri 27 Mar 2026 11:01:35 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: Sx+BQx/7IClAlOe1Md9PhcWnf6rs8rasmrYtpBrim/s=)
2: IY5stn4uFyzkXhxk9GN4WlXIsnU.roa (hash: PjV6+EPoAnHt7bbW6zTa++1bAvRToNMnmP3SVwfF3kE=)
3: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (hash: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:8d:6e:12:a8:2f:d0:8a:fc:52:41:c9:59:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Mar 26 11:01:35 2026 GMT
Not After : Mar 27 11:01:35 2026 GMT
Subject: CN=13ab6a2d939a6f6268a962b3a0341705406a7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:f5:9b:19:31:28:dc:89:f7:83:36:ef:69:
44:2c:c8:67:2d:45:84:11:d8:89:c8:65:a5:b1:1b:
6f:da:08:f3:59:c5:9b:bd:0b:ae:c5:77:a2:1b:71:
a9:3f:23:e5:fe:06:51:e5:84:7e:e5:f9:d8:59:0d:
12:6d:bf:56:a4:56:ae:6b:db:66:53:0d:5f:ec:5d:
8d:4d:87:b1:0f:34:bc:da:2c:b3:73:05:88:ed:d4:
b6:2e:d5:0d:b5:7e:35:7b:40:ca:5f:a3:68:d1:0f:
32:70:37:53:56:4f:89:c6:9f:23:fe:5d:1d:e4:34:
34:f5:00:d1:f1:37:49:24:83:68:79:2d:9a:69:ad:
4c:e2:50:59:a1:c8:10:80:39:c3:fa:ed:9b:7d:1a:
34:e5:42:72:9d:49:e5:2a:71:58:1f:18:61:46:12:
f8:7c:f7:28:46:76:90:03:5b:16:34:2d:96:e0:24:
6e:4d:a2:a7:41:8b:8e:a0:c6:9b:10:d4:ae:9a:d4:
25:d6:a8:80:27:95:5b:d6:ae:45:b1:47:e6:9f:c2:
da:12:fe:de:53:97:a8:9c:8d:1d:24:1b:18:99:06:
55:21:c9:39:c6:4b:df:19:b7:46:df:bf:aa:4f:ff:
fd:53:06:51:49:1e:1f:25:f3:4b:31:f6:46:c1:61:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:6A:2D:93:9A:6F:62:68:A9:62:B3:A0:34:17:05:40:6A:7C:76
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:83:4d:a2:d9:cc:dd:25:3d:66:37:27:43:f1:d2:0b:6a:8c:
b7:69:ca:99:21:5c:9a:37:71:9a:15:02:d6:ca:54:3b:ae:28:
39:6f:5f:0b:4c:a5:8a:9c:48:9d:27:a0:ad:4d:a5:88:c8:af:
d0:51:b6:b3:bb:40:14:05:16:ee:b0:64:9d:a5:2b:73:ea:24:
68:ec:6d:72:4f:83:b7:72:ff:85:6c:a4:c0:fb:cb:6f:d8:3d:
97:7b:95:b4:01:7a:c5:85:78:eb:44:e9:5a:70:98:e8:b3:79:
89:3b:38:72:ad:41:93:44:83:80:18:f2:b3:79:e2:b1:f5:b5:
1e:68:07:a3:4d:5e:4c:c4:44:06:13:89:3e:1a:b9:ee:3c:36:
99:c6:59:f2:5c:f6:36:a6:31:6a:48:6b:c9:9e:09:c2:1b:60:
88:af:30:96:a5:7c:6a:13:2a:0f:2a:76:04:04:84:ea:be:74:
a5:9d:4e:7f:f4:da:c4:17:8e:84:f0:c3:10:63:c0:0a:21:93:
ae:0d:00:c3:a0:26:58:b9:6c:03:94:e9:74:d0:15:8f:86:af:
44:20:3b:93:c2:70:14:4f:ab:f0:ab:65:61:72:c8:35:d7:93:
9b:6c:95:9a:52:db:1f:1a:ef:c9:0a:d9:95:79:5e:a2:78:25:
92:1e:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:19 2026 by rpki-client