Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: wmMp4VomBbcP1knSTuqHME2iNb7H92YQIhKilRiyNPc=
Subject key identifier: 4E:C7:25:4D:D2:E0:47:CF:C5:72:AE:51:63:4B:88:7D:1C:CA:FA:01
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019D2B853DB28A0DAE68786284B6A3FA08ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 19:00:45 +0000
Manifest this update: Thu 26 Mar 2026 19:00:45 +0000
Manifest next update: Fri 27 Mar 2026 19:00:45 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: jhlr2ryr513ITKVlPqA19jLpCBI0hWitQ3DgujI636o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:3d:b2:8a:0d:ae:68:78:62:84:b6:a3:fa:08:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Mar 26 19:00:45 2026 GMT
Not After : Mar 27 19:00:45 2026 GMT
Subject: CN=4ec7254dd2e047cfc572ae51634b887d1ccafa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:a5:a6:0b:73:56:35:55:e1:e3:7e:2b:c4:
60:de:0b:09:02:2b:5b:66:ee:ce:68:cd:c2:b9:a8:
4a:d4:26:50:c2:9a:f9:b7:4d:0b:c7:07:fd:7c:01:
d3:f0:02:72:50:0a:f6:49:07:4a:65:71:b1:5f:9b:
8f:ee:e8:f5:f8:ea:c7:10:d1:11:32:0c:e4:48:b6:
09:85:c4:62:02:a4:97:45:ea:68:09:1a:8e:9d:83:
02:96:3c:24:52:00:b1:fc:84:08:43:59:ec:ea:3e:
6d:bf:5f:4f:64:4c:66:71:8a:f1:27:ae:cd:90:29:
45:bb:da:7a:fe:33:f8:f2:15:04:89:3f:57:1a:d2:
2d:e1:bc:19:b2:2c:e0:f5:83:2f:30:d2:d6:65:01:
2e:ea:ef:0b:4f:e7:f8:12:e8:d4:76:da:cf:68:51:
46:35:59:a2:0d:ec:10:66:9f:a9:ab:0d:cd:5f:dc:
ae:ad:91:c1:64:54:38:e6:5c:cb:49:6b:d9:c5:00:
4e:9c:af:72:6c:ea:1d:0d:e4:e1:49:44:7d:9c:e5:
c5:a7:ff:53:ce:cd:d8:87:a1:dc:90:24:dd:79:7b:
19:17:68:35:6d:c6:fd:23:84:2e:70:6f:fd:a0:1c:
36:95:ea:87:67:0b:ef:5b:bf:9b:69:44:2e:2f:d3:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:25:4D:D2:E0:47:CF:C5:72:AE:51:63:4B:88:7D:1C:CA:FA:01
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:71:7b:2f:2d:90:3c:03:da:d5:af:dc:2c:ec:48:91:e1:b8:
56:13:ca:47:5f:c7:5e:50:91:ac:2d:e1:99:d9:ec:45:58:62:
80:56:9a:c5:41:d0:57:dd:3c:5d:c3:08:ff:2c:45:98:0f:21:
ee:00:00:5b:b3:36:16:10:41:45:0b:92:b7:a2:14:87:63:1b:
6c:3a:67:e8:b4:d4:6f:10:06:18:e5:e3:a1:c9:ee:53:88:6e:
4d:57:19:6d:8f:13:ec:de:a0:ae:43:0e:6d:ec:e3:4e:57:f1:
b3:6a:3c:7b:96:6c:b7:b9:41:5a:fa:b1:41:2c:6f:2a:83:db:
d7:c0:81:64:3b:07:6d:38:ff:b1:7e:2c:18:a4:1e:92:dc:7f:
9a:5c:22:81:ba:f0:b7:05:8a:b8:78:71:62:e9:87:8a:9f:67:
a5:5a:d1:9c:78:8b:80:71:04:e6:9a:c3:42:2e:e6:f1:a3:8b:
f7:8a:d7:9d:22:df:66:08:ff:a3:a3:b5:3b:26:98:c3:71:60:
74:c1:bf:f8:52:90:d0:04:db:bd:3b:4e:6a:4a:c0:f4:15:5e:
2a:d5:67:64:42:11:6c:52:26:1b:f9:33:e0:75:44:8d:20:1a:
85:f6:a3:dc:0b:d1:83:15:b6:d5:60:16:0f:e4:25:e5:cd:28:
a0:45:f0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhT2yig2uaHhihLaj+gjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjYwMjVkOTM5ZTBjN2IxY2Y0NmMwMjE5ZWNmYTI1YTE5
NTM4MjUwHhcNMjYwMzI2MTkwMDQ1WhcNMjYwMzI3MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZWM3MjU0ZGQyZTA0N2NmYzU3MmFlNTE2MzRiODg3ZDFjY2FmYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1OlpgtzVjVV4eN+K8Rg3gsJAitb
Zu7OaM3CuahK1CZQwpr5t00Lxwf9fAHT8AJyUAr2SQdKZXGxX5uP7uj1+OrHENER
MgzkSLYJhcRiAqSXRepoCRqOnYMCljwkUgCx/IQIQ1ns6j5tv19PZExmcYrxJ67N
kClFu9p6/jP48hUEiT9XGtIt4bwZsizg9YMvMNLWZQEu6u8LT+f4EujUdtrPaFFG
NVmiDewQZp+pqw3NX9yurZHBZFQ45lzLSWvZxQBOnK9ybOodDeThSUR9nOXFp/9T
zs3Yh6HckCTdeXsZF2g1bcb9I4QucG/9oBw2leqHZwvvW7+baUQuL9NgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7HJU3S4EfPxXKuUWNLiH0cyvoBMB8GA1UdIwQY
MBaAFBdmAl2Tngx7HPRsAhns+iWhlTglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1Yjct
ZTI4MzUyZTc5ZjdkLzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1YjctZTI4MzUyZTc5Zjdk
LzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3F7Ly2Q
PAPa1a/cLOxIkeG4VhPKR1/HXlCRrC3hmdnsRVhigFaaxUHQV908XcMI/yxFmA8h
7gAAW7M2FhBBRQuSt6IUh2MbbDpn6LTUbxAGGOXjocnuU4huTVcZbY8T7N6grkMO
bezjTlfxs2o8e5Zst7lBWvqxQSxvKoPb18CBZDsHbTj/sX4sGKQektx/mlwigbrw
twWKuHhxYumHip9npVrRnHiLgHEE5prDQi7m8aOL94rXnSLfZgj/o6O1OyaYw3Fg
dMG/+FKQ0ATbvTtOakrA9BVeKtVnZEIRbFImG/kz4HVEjSAahfaj3AvRgxW21WAW
D+Ql5c0ooEXwmQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:19:45 2026 by rpki-client