Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: f/b0WbldiqFYphFl517JM6TgF4M63V4XwalE/gUkGzk=
Subject key identifier: 0B:66:95:36:47:61:1A:47:2B:26:52:C6:8D:D7:4B:45:EE:F7:73:A2
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019E1EDA6D39976AD642FF5B06C445A1B543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 0272
Signing time: Wed 13 May 2026 01:01:31 +0000
Manifest this update: Wed 13 May 2026 01:01:31 +0000
Manifest next update: Thu 14 May 2026 01:01:31 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: SnZClKPb390rzrexa0PB3RxjYV6mGPxCP4bhAo1B0Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:6d:39:97:6a:d6:42:ff:5b:06:c4:45:a1:b5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: May 13 01:01:31 2026 GMT
Not After : May 14 01:01:31 2026 GMT
Subject: CN=0b66953647611a472b2652c68dd74b45eef773a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:09:e3:33:05:5b:8c:09:fc:fa:16:76:be:
ed:59:51:49:0e:70:fb:13:02:25:32:41:08:e1:90:
7c:6f:e5:4e:69:ad:27:b0:10:d3:df:f9:57:bd:1d:
2e:9e:b2:c9:01:1f:6a:02:e2:7a:c0:3e:dd:89:0a:
c0:1d:26:72:95:3f:d8:dc:6c:4b:56:70:34:cd:ff:
6c:da:7b:fb:b7:7c:a4:12:24:1b:8a:af:03:bb:9c:
4f:c8:68:d7:69:88:04:98:1e:8a:7b:01:dc:e5:a9:
0f:87:94:20:7c:a2:7e:9a:88:91:97:4b:a6:03:e2:
47:4f:20:d6:52:e2:76:57:58:d9:b0:fa:fe:84:84:
3c:c1:e5:d0:9a:2a:9d:9c:c3:37:c5:76:cc:98:18:
ec:87:90:53:7c:5e:f7:4e:85:12:8a:bf:37:7e:e0:
71:f5:04:8d:78:a2:dd:66:a0:38:e0:02:85:50:99:
f6:8b:a3:03:cb:3b:ed:a3:89:b2:12:42:ea:1e:ad:
b3:e3:4c:78:33:4f:28:34:13:8e:96:58:09:07:ef:
2b:d8:36:e6:0a:ce:09:c3:b0:1c:a4:c6:b3:3d:f7:
1d:83:c3:f8:15:16:b7:15:e4:b7:b3:b8:8c:b1:48:
51:c0:e5:ea:5d:31:78:a4:88:4e:34:40:64:76:6f:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:95:36:47:61:1A:47:2B:26:52:C6:8D:D7:4B:45:EE:F7:73:A2
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:28:d6:e7:b3:b8:ea:2a:7c:4c:e8:e9:f0:12:4a:94:43:
c2:e9:c4:c6:b6:bf:7b:48:77:ad:96:e3:47:c9:5c:01:a6:f4:
2c:87:09:62:c4:58:f7:80:0b:71:6b:09:16:8a:42:24:ad:12:
3a:25:6e:a6:f2:c9:ed:cd:19:51:06:fe:8e:b4:c4:ce:0d:34:
58:99:75:4c:11:df:4c:ec:ce:38:e6:6f:6e:ba:25:6a:f1:51:
bf:55:1b:af:34:ed:71:de:6c:3f:2c:90:e3:9b:49:c4:ed:71:
af:7b:ae:6f:70:82:50:e3:67:45:bc:ac:f2:45:c7:fc:04:10:
b1:e6:05:dc:d4:24:50:9b:12:d1:1e:d3:8b:bf:fb:45:99:d7:
ec:2a:ce:a7:b9:c9:3d:cf:97:d6:5c:9f:88:83:98:42:76:24:
65:a0:0f:eb:8f:fa:f9:53:6a:4e:4c:68:2d:d0:4d:4c:4d:13:
38:fb:6a:d2:c6:19:67:8e:fc:92:f1:c7:98:71:09:82:47:8c:
1c:7b:c3:c9:77:99:c1:20:3b:c3:50:d1:04:88:0d:96:6c:e8:
9a:b4:83:49:31:64:23:a8:0c:f2:21:42:02:4c:54:de:3c:6c:
27:bd:0a:05:85:d0:82:24:39:1b:f5:ad:5f:a3:9c:6c:3a:bb:
45:16:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:30 2026 by rpki-client