Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File: F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier: Nt852ssQnNnWFYSTofZ34SxbIPb+7O03Vag85OncKPU=
Subject key identifier: 52:BF:14:C8:E7:91:EB:00:AC:23:A9:FD:72:71:A8:7B:C0:A4:27:6D
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 019D29609E8ACBA8DDFE7BC1FF6C1CEDF8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:30 +0000
Manifest this update: Thu 26 Mar 2026 09:01:30 +0000
Manifest next update: Fri 27 Mar 2026 09:01:30 +0000
Files and hashes: 1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: 9iXyYy47uFflnIAezzugqXDklOxGhGMHxcykjNLeyPI=)
2: aF7v3qADYWY84iDVnBXjUoNs2q0.roa (hash: UTtxRNeTVJA3d2EKc255mid7X/sjTsVlyiz9BWCKyZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9e:8a:cb:a8:dd:fe:7b:c1:ff:6c:1c:ed:f8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Mar 26 09:01:30 2026 GMT
Not After : Mar 27 09:01:30 2026 GMT
Subject: CN=52bf14c8e791eb00ac23a9fd7271a87bc0a4276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:8a:b0:9f:c2:37:71:7a:6f:8d:7b:5d:d9:
a9:3d:9f:27:71:78:64:e5:4e:d4:ed:66:c8:2f:d4:
0a:33:8f:83:bb:41:b1:fe:40:1c:43:29:cf:a9:ed:
8a:88:14:cf:dc:95:c3:de:72:8f:7b:72:4a:12:bf:
f5:e8:5a:10:26:c5:11:dd:39:01:23:f7:0d:e3:b2:
7a:f1:95:84:ba:21:50:aa:4c:16:4c:f4:47:a8:41:
cb:91:8e:6f:69:7e:52:0a:de:d7:94:ec:02:8a:4b:
85:14:59:4c:2a:fa:7a:b4:c0:cc:98:43:7c:24:5b:
d6:65:0a:dc:d0:6c:64:19:f1:69:15:31:1e:36:b3:
d6:6d:ba:f1:c5:eb:71:7f:87:7b:ad:6e:75:92:30:
e6:9f:4c:8b:51:4a:26:3d:aa:a4:ff:bf:3e:a0:2c:
72:94:7a:c0:da:c5:f9:65:4b:6e:b2:b3:d6:36:f3:
10:08:a9:c4:3f:af:6f:ca:b0:59:fe:ce:58:7a:92:
4f:e4:e8:0f:97:c8:f2:bc:05:b8:8e:a1:d9:91:5e:
c4:f6:3f:34:3f:f0:3e:9f:0a:ec:ce:b2:c3:7f:db:
03:84:64:f6:08:24:8e:84:46:f1:37:a5:e0:d8:64:
6a:51:5a:92:e2:a3:c8:e5:06:4b:b1:f5:7b:ba:90:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:14:C8:E7:91:EB:00:AC:23:A9:FD:72:71:A8:7B:C0:A4:27:6D
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:0a:b0:0b:48:73:68:b5:96:25:14:42:16:58:6f:f9:42:
da:90:a0:cb:ae:2b:a0:7a:73:43:60:b5:4b:27:53:2b:69:ef:
ad:93:d9:35:e0:50:cc:a5:86:c3:df:e0:85:14:66:78:29:b0:
fa:e1:81:ba:73:6c:71:58:8d:1b:a3:0e:f3:9f:71:f2:a8:df:
65:56:d4:f4:76:9b:75:b0:3a:45:e8:10:92:db:a4:f2:63:0e:
e9:f6:42:d7:ef:cc:8a:07:ed:c4:47:99:e6:91:82:4c:ce:7a:
02:d7:c2:c4:0b:3e:6e:ed:2a:11:57:cb:78:38:37:d6:a4:6c:
0d:a7:3a:8c:1a:5b:01:11:b5:5e:3f:33:c8:90:78:b5:78:35:
56:55:c3:a1:24:fe:97:91:c0:e8:45:e2:f2:81:f3:0e:78:f8:
15:25:72:91:1b:2b:9f:bb:25:00:f5:bb:d6:ad:07:6b:1a:37:
87:65:26:2f:9f:00:19:b1:d4:51:17:a9:8c:d1:4c:bc:e0:c3:
48:57:96:b9:f2:e2:3d:7f:cc:7b:22:44:a6:a9:a3:de:2d:22:
28:94:69:d1:a7:96:da:3f:04:7c:13:74:32:3d:0d:07:82:a7:
28:b7:6f:61:86:e3:f2:33:18:3a:e5:ae:f4:1e:a4:63:bd:f2:
3f:b3:77:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYJ6Ky6jd/nvB/2wc7fihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm
MGU3ZjMwHhcNMjYwMzI2MDkwMTMwWhcNMjYwMzI3MDkwMTMwWjAzMTEwLwYDVQQD
Eyg1MmJmMTRjOGU3OTFlYjAwYWMyM2E5ZmQ3MjcxYTg3YmMwYTQyNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkmKsJ/CN3F6b417XdmpPZ8ncXhk
5U7U7WbIL9QKM4+Du0Gx/kAcQynPqe2KiBTP3JXD3nKPe3JKEr/16FoQJsUR3TkB
I/cN47J68ZWEuiFQqkwWTPRHqEHLkY5vaX5SCt7XlOwCikuFFFlMKvp6tMDMmEN8
JFvWZQrc0GxkGfFpFTEeNrPWbbrxxetxf4d7rW51kjDmn0yLUUomPaqk/78+oCxy
lHrA2sX5ZUtusrPWNvMQCKnEP69vyrBZ/s5YepJP5OgPl8jyvAW4jqHZkV7E9j80
P/A+nwrszrLDf9sDhGT2CCSOhEbxN6Xg2GRqUVqS4qPI5QZLsfV7upCFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK/FMjnkesArCOp/XJxqHvApCdtMB8GA1UdIwQY
MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt
M2YzOWQ3NjQyNGZiLzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi
LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbUKsAtI
c2i1liUUQhZYb/lC2pCgy64roHpzQ2C1SydTK2nvrZPZNeBQzKWGw9/ghRRmeCmw
+uGBunNscViNG6MO859x8qjfZVbU9HabdbA6RegQktuk8mMO6fZC1+/MigftxEeZ
5pGCTM56AtfCxAs+bu0qEVfLeDg31qRsDac6jBpbARG1Xj8zyJB4tXg1VlXDoST+
l5HA6EXi8oHzDnj4FSVykRsrn7slAPW71q0Haxo3h2UmL58AGbHUURepjNFMvODD
SFeWufLiPX/MeyJEpqmj3i0iKJRp0aeW2j8EfBN0Mj0NB4KnKLdvYYbj8jMYOuWu
9B6kY73yP7N3OQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:28 2026 by rpki-client