Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: 5ZAY1BMiv8c5pIHFB4jwpJh79PNJ50zX8sLECuR07hk=
Subject key identifier: 1D:EC:0D:D9:03:C5:32:3E:0E:FD:48:46:9F:5B:47:69:50:46:F4:3C
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 019D284D714D1D46619816F3ADB76798F503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 05FF
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: bPUzxYBJe+MpamAthk3kwgZjALL8bDmW0JfmM4sL6NA=)
2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:71:4d:1d:46:61:98:16:f3:ad:b7:67:98:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=1dec0dd903c5323e0efd48469f5b47695046f43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:1d:b3:d1:cc:93:48:2c:1c:02:ca:d1:fb:
a1:30:68:61:4b:64:e8:1e:07:a6:a5:46:7a:bc:d7:
d6:72:a5:ad:ec:47:5a:dc:d5:df:b2:0a:ae:bd:89:
4e:f8:1c:20:26:d7:64:8e:b8:77:c1:63:86:18:18:
f5:1e:ad:b1:40:29:41:cf:f6:5e:99:c2:7d:a1:2b:
16:59:86:7f:65:a2:ae:d7:58:8e:b5:8d:fc:bd:84:
3b:e7:50:fd:a0:2d:b4:87:77:b0:d8:8f:ee:8e:8b:
70:66:94:04:9e:bb:12:7a:d5:26:5f:52:6e:11:c2:
44:66:36:4e:09:18:47:0e:05:bd:ed:9a:92:37:73:
47:92:3b:b0:26:5b:6f:f5:6e:9c:a9:95:34:d8:d0:
cd:90:e0:37:0b:28:d9:f1:59:d5:2f:ac:e8:44:5c:
34:05:d4:a4:24:50:09:71:54:16:1d:9d:47:cb:b0:
84:9f:07:b1:c9:5a:89:28:00:20:ec:b0:6d:1f:f4:
be:e9:f5:1d:3e:26:b6:6b:f7:0b:50:ad:fe:ca:b8:
08:d1:24:e2:24:7c:53:33:46:f2:9e:a6:87:9a:bf:
1c:d3:db:99:8d:8f:de:23:53:dc:09:d4:83:dd:0f:
b3:4e:34:00:e7:93:8d:e1:e4:f5:44:f4:65:fc:0d:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:0D:D9:03:C5:32:3E:0E:FD:48:46:9F:5B:47:69:50:46:F4:3C
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7c:34:68:aa:42:65:da:fd:58:8f:55:13:03:c0:f0:5d:d1:
d4:af:80:e3:d9:0a:fc:17:dd:b9:a0:17:d0:94:82:47:62:25:
93:48:bb:c5:9e:5c:51:bd:30:26:02:80:f1:ea:ce:d3:ee:85:
4f:0f:aa:5f:92:20:de:78:b3:ce:17:5e:80:03:c0:e8:79:2d:
8d:43:3e:c5:6c:3a:40:d2:a0:5a:c4:f6:e8:a9:fd:c2:45:68:
12:f0:ca:3d:d1:10:fc:59:bb:a4:a7:c1:3e:77:a8:92:10:01:
d5:a0:15:25:d4:39:53:8f:21:25:3f:30:69:81:39:83:c5:9f:
23:f0:13:7d:d6:64:5b:aa:8a:25:95:fa:75:67:87:c6:8c:7b:
6c:91:cf:e8:76:4e:81:84:ca:aa:55:45:29:1b:b7:b5:1b:ce:
fd:4e:c7:ca:99:fd:86:76:64:a8:8a:8b:f4:04:59:47:3f:cc:
eb:c6:a2:e9:dd:a8:cd:4f:2b:b8:47:57:30:2a:2d:0a:88:f7:
26:b1:1b:d4:c0:ea:98:9f:27:23:d7:80:b8:fc:13:45:bd:f5:
08:ca:21:53:bc:d4:d3:bd:6e:a7:90:e9:d9:30:4f:17:87:fb:
b1:06:d3:c6:13:19:b6:9d:5a:7b:c1:17:2f:87:01:8c:65:6d:
6d:1d:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:04 2026 by rpki-client