Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: ITsgIaMLG4orHpHYxpvZHaxFXqxZd1nsOCBbriJ//fo=
Subject key identifier: 84:5D:9E:80:66:B1:E5:66:4D:BD:71:48:D1:D9:D7:CD:AD:87:7A:BF
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 019D27A87391317C98578ED0DA12C84FC195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0AED
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: SDcxpEZ9wVU1HXbVnwYg5GLUXRr0ix9x1PDZ0f9oNAw=)
2: ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa (hash: CCPYX7azV0XU3mTS7uui9xIKAvE3rZogRNVuJDuaOG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:73:91:31:7c:98:57:8e:d0:da:12:c8:4f:c1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=845d9e8066b1e5664dbd7148d1d9d7cdad877abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:d3:b6:d6:06:00:a1:93:09:35:98:8c:89:
62:73:ab:76:b4:89:1b:80:1b:86:7d:86:7a:f6:88:
96:10:df:3e:f3:f5:bb:e6:a2:b0:d7:ef:6c:93:f8:
04:8a:cd:10:7f:87:d8:ad:f8:c5:9d:b3:da:9e:73:
90:31:f4:75:bd:5c:e2:da:62:94:7b:3b:66:b2:60:
b1:91:36:1f:74:2a:5b:26:4a:e4:bf:78:5d:16:d7:
5a:23:04:97:7e:e3:32:df:d5:6a:fb:34:40:7d:38:
09:ee:c4:e8:5e:21:a5:dc:40:6e:3c:b6:15:a1:8f:
c6:ae:66:9f:7e:49:41:ca:6b:27:87:dd:59:d0:56:
8a:ee:c0:56:1a:d8:c0:9b:a1:0d:6c:01:2b:de:e4:
c0:d2:13:c6:7b:fa:64:ca:89:93:95:a3:db:df:15:
24:e7:8c:b1:7a:f6:6c:34:1f:ff:b2:c3:0a:79:68:
8e:7c:0d:32:ab:40:f3:72:e8:e7:ff:f8:d5:74:60:
03:6b:28:1a:e2:90:86:3d:a1:a5:b8:67:d9:50:2f:
f3:ff:44:9e:1f:69:b0:de:94:c1:a9:f2:6c:ec:79:
0a:84:4d:b5:62:34:a7:00:16:01:43:08:93:1d:2b:
a5:4b:cf:c1:77:f2:b7:98:53:b5:78:23:37:53:76:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:9E:80:66:B1:E5:66:4D:BD:71:48:D1:D9:D7:CD:AD:87:7A:BF
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:3d:02:1c:32:da:8c:fe:8b:5a:cd:98:34:3b:33:de:84:
88:29:b4:21:06:29:93:04:28:2c:8a:ca:56:79:20:13:0d:ef:
a0:a2:d5:d6:99:69:fb:f1:88:f8:0d:e4:5d:34:08:89:62:4e:
e2:ea:dc:f1:dc:4c:14:d3:db:a3:94:a7:cc:58:00:c5:04:c6:
d3:e1:0b:b9:b3:58:fd:c8:4c:a4:fc:24:06:7a:17:20:a4:64:
da:02:50:cd:45:a0:62:4b:56:4b:c2:4a:b7:71:e6:ce:b5:d9:
ae:ee:bc:8a:14:b7:11:27:ce:dd:e0:81:9b:d3:0a:46:2a:40:
f7:96:f1:5f:37:4e:e1:1f:e6:36:92:34:fe:16:ff:c1:1c:05:
56:bc:cf:49:0f:fd:16:d7:6a:4d:99:e8:29:d9:9a:df:81:64:
c4:f5:6f:97:ce:32:f9:49:3f:4e:e2:e0:d2:10:b7:06:1c:90:
b9:bd:29:64:46:d6:44:e7:8e:b2:c8:0d:60:60:73:5b:e4:5c:
e4:4e:c9:02:fa:24:e2:99:f0:6d:57:96:3a:32:e4:d4:c5:21:
71:14:a0:55:7e:f1:92:41:43:7e:35:09:a7:a4:bf:fc:47:d1:
42:bf:60:d3:c1:87:b3:dc:7b:4d:98:8a:8e:e8:3e:ac:33:4c:
fc:2f:3e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqHORMXyYV47Q2hLIT8GVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0
MzU5NWQwHhcNMjYwMzI2MDEwMDQ0WhcNMjYwMzI3MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg4NDVkOWU4MDY2YjFlNTY2NGRiZDcxNDhkMWQ5ZDdjZGFkODc3YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4XTttYGAKGTCTWYjIlic6t2tIkb
gBuGfYZ69oiWEN8+8/W75qKw1+9sk/gEis0Qf4fYrfjFnbPannOQMfR1vVzi2mKU
eztmsmCxkTYfdCpbJkrkv3hdFtdaIwSXfuMy39Vq+zRAfTgJ7sToXiGl3EBuPLYV
oY/GrmaffklBymsnh91Z0FaK7sBWGtjAm6ENbAEr3uTA0hPGe/pkyomTlaPb3xUk
54yxevZsNB//ssMKeWiOfA0yq0Dzcujn//jVdGADayga4pCGPaGluGfZUC/z/0Se
H2mw3pTBqfJs7HkKhE21YjSnABYBQwiTHSulS8/Bd/K3mFO1eCM3U3ZkWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRdnoBmseVmTb1xSNHZ182th3q/MB8GA1UdIwQY
MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt
YTc1ZjNkZjQ2YWYxLzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx
LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0w9Ahwy
2oz+i1rNmDQ7M96EiCm0IQYpkwQoLIrKVnkgEw3voKLV1plp+/GI+A3kXTQIiWJO
4urc8dxMFNPbo5SnzFgAxQTG0+ELubNY/chMpPwkBnoXIKRk2gJQzUWgYktWS8JK
t3HmzrXZru68ihS3ESfO3eCBm9MKRipA95bxXzdO4R/mNpI0/hb/wRwFVrzPSQ/9
FtdqTZnoKdma34FkxPVvl84y+Uk/TuLg0hC3BhyQub0pZEbWROeOssgNYGBzW+Rc
5E7JAvok4pnwbVeWOjLk1MUhcRSgVX7xkkFDfjUJp6S//EfRQr9g08GHs9x7TZiK
jug+rDNM/C8+/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:51 2026 by rpki-client