Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File: F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier: n+7tV7VTRrUZgtqpdGyNOGDMiBvzO+skDkQ9OfswijM=
Subject key identifier: 7C:0B:31:23:6C:6C:87:96:E8:13:7A:47:3A:78:65:63:24:4E:10:B7
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 019D2A3B6365C26C117F0FBE6CB74D68139A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number: 175A
Signing time: Thu 26 Mar 2026 13:00:28 +0000
Manifest this update: Thu 26 Mar 2026 13:00:28 +0000
Manifest next update: Fri 27 Mar 2026 13:00:28 +0000
Files and hashes: 1: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: EqdAj5NIzXCYamxAf5cIGf9iqQ9/jmaWpp8VRxlHzEg=)
2: T8x0xAy4_PhKVTNAIYlfZtMXvu0.roa (hash: s67CBRuK7ZUjTCXXYr43zzJxgIRbOGZjxmpnRxJkzf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:63:65:c2:6c:11:7f:0f:be:6c:b7:4d:68:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: Mar 26 13:00:28 2026 GMT
Not After : Mar 27 13:00:28 2026 GMT
Subject: CN=7c0b31236c6c8796e8137a473a786563244e10b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:f7:40:99:4a:97:e4:dc:00:43:b9:5e:26:
c5:9c:11:2b:fa:98:8f:a2:db:bf:64:d1:33:53:67:
0a:1f:08:9e:57:4d:ef:cd:e6:fa:06:5f:90:79:5d:
2c:3d:98:a7:c6:87:dc:3f:d5:ec:d5:be:8c:fa:27:
b7:a4:d4:ad:9c:38:0e:ad:75:a5:70:82:0e:c7:bc:
cb:60:f3:4f:04:ed:db:86:6c:ea:af:f4:6b:1b:0c:
fa:93:87:a9:c2:52:b0:a1:ce:41:31:38:03:ad:34:
e4:3b:05:80:82:ee:07:e5:92:85:d5:1c:f0:03:ad:
92:9e:37:f6:6f:af:11:94:67:b2:45:ea:39:88:fb:
a8:2c:79:99:95:59:22:b7:b0:0b:6e:fb:70:4a:1b:
3e:ac:1d:5d:2d:1e:62:c2:22:f5:c0:0e:61:b6:09:
37:10:15:c2:48:c5:42:39:8d:ed:f5:93:af:4d:47:
fc:c0:ed:5b:73:27:64:57:9f:dd:db:9e:58:8e:a9:
84:78:04:c4:5a:22:a6:c1:5f:f2:53:d0:e7:80:fe:
eb:87:33:fb:8c:63:ed:9a:c0:f4:6b:bd:ac:23:1d:
26:09:fa:7d:15:1e:09:2e:95:41:79:9a:ec:b3:8e:
89:02:82:fa:47:1c:e6:d7:83:12:a5:7d:c8:c6:d8:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:31:23:6C:6C:87:96:E8:13:7A:47:3A:78:65:63:24:4E:10:B7
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:ae:4c:04:c0:7a:3e:a4:ee:13:25:7f:52:49:52:be:99:
a9:c4:0d:40:e8:51:ae:d9:be:27:c8:2c:56:bb:97:d0:11:1c:
7f:a5:2e:47:8e:5e:37:d7:ff:d8:0c:c8:02:b9:7f:69:aa:a6:
ec:1d:28:63:7b:38:18:49:ee:6a:5b:05:fd:40:2b:4f:90:64:
a9:a5:0a:7b:d5:53:b4:64:6b:2c:97:ea:7d:93:ea:9c:2a:33:
4e:c2:3c:93:40:ed:34:ce:5a:a4:dd:74:73:fd:c9:cb:c8:60:
91:63:b6:9a:7b:fe:40:e4:6c:89:de:52:6c:8d:9b:0f:b1:59:
4e:9e:f6:22:5b:f2:cf:1c:9b:56:da:b7:23:bc:e3:bd:9c:5f:
ab:d3:ef:50:26:59:1a:0b:67:fe:8f:4c:01:d6:71:fd:8f:a3:
c1:5a:c4:84:a2:c6:2d:06:41:84:1d:52:26:a8:ee:96:de:24:
bb:b2:28:1d:cd:43:41:dd:13:bb:99:a4:7d:30:c8:72:6e:01:
87:27:4e:3c:80:4b:c2:ed:e6:83:06:af:0c:d9:a1:e9:36:e1:
04:89:8d:97:9a:80:fc:de:9b:d9:12:17:18:23:f7:88:61:a5:
93:ab:75:d3:f5:75:41:ea:bf:5b:fb:5a:57:42:06:2a:a6:11:
b2:e0:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:47 2026 by rpki-client