Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: iypgjsuUvhhXudw5wzG7UoOcGHx74VX6HrhSvNI6dSg=
Subject key identifier: 9F:0D:E8:3B:59:A7:9B:AA:77:BC:71:2F:85:90:F3:94:CE:AC:10:C9
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019D27A880DE5E639FD072BBCDE146709DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 01F2
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: RIhGq2EmfaoKMukMF4wepTTJ/w7ptRjXR9ejmoYuYIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:80:de:5e:63:9f:d0:72:bb:cd:e1:46:70:9d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=9f0de83b59a79baa77bc712f8590f394ceac10c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:63:0a:76:97:46:2c:c2:bb:77:14:3e:8e:
b1:d1:2f:40:4d:4a:52:a9:ea:f0:c3:8c:f3:a4:9e:
9a:28:52:ab:78:50:5a:b6:86:87:0c:3e:fc:79:b6:
2f:9e:63:33:3a:78:b1:4d:0e:ae:61:ef:3b:2c:ab:
e0:38:f2:a5:08:0e:f2:74:e5:39:db:58:7c:90:0d:
ce:3b:da:b2:bf:13:4d:9b:d3:c8:c1:d4:e1:c3:06:
b0:90:31:2d:c7:d7:7a:15:1b:f8:c9:96:a8:6a:16:
ef:f4:83:05:9d:d9:99:d8:02:99:ab:a3:29:b6:15:
b9:ec:8f:dd:c6:e8:f6:d3:7b:15:12:b8:00:50:bf:
2b:97:9b:e1:9e:c9:9e:27:79:fb:28:51:18:50:f0:
b2:7c:6c:53:06:12:7d:33:e4:cc:b8:58:92:ce:2e:
ee:6f:27:f0:6c:d4:bd:c0:a1:e6:16:68:e9:dd:26:
cb:1d:d1:cc:22:8a:e6:70:30:13:8c:65:83:a2:4b:
0c:a8:63:eb:d5:c2:a6:e4:b8:f5:6c:6a:10:2c:99:
82:01:89:50:69:83:e4:3d:78:96:dd:43:15:81:0a:
97:6d:ac:a1:95:a6:f9:75:c1:57:45:cc:ef:33:f7:
e1:33:46:e5:8e:ae:06:8c:65:97:7e:51:73:0b:2e:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:E8:3B:59:A7:9B:AA:77:BC:71:2F:85:90:F3:94:CE:AC:10:C9
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:46:30:78:b1:1b:db:3e:58:6e:6f:f8:e4:b4:44:e3:cf:6c:
29:d8:a1:0a:a6:de:68:a9:a3:d7:a8:33:99:5e:c6:46:5c:d5:
3f:be:57:b7:d0:02:24:ab:85:7d:1a:07:72:6b:f3:d4:2b:50:
4d:e4:3c:94:80:b7:77:95:f1:0f:a9:3a:94:1b:0c:40:13:14:
49:aa:da:13:9d:7f:d5:35:93:a4:cf:1c:02:ba:f3:69:9b:ca:
4c:c5:2f:76:55:74:2c:0f:54:fa:e3:7c:c9:f2:90:fe:12:0e:
31:51:20:92:67:f1:cb:8b:8a:60:4d:96:27:ea:30:67:39:66:
09:b2:5e:5c:04:c7:f3:32:d3:f1:c3:9b:ab:c0:b6:52:f7:bf:
5c:7a:fd:a4:0c:f7:fe:60:22:15:78:df:bd:bc:c7:33:a4:fd:
55:c6:d1:46:50:de:81:fc:26:36:5b:80:83:cd:d9:73:c4:86:
09:3c:26:db:a9:e7:1f:db:bc:28:6e:60:96:8e:73:11:0e:23:
46:21:e9:6e:75:e4:6e:77:23:c5:9b:d6:9c:b4:55:62:15:29:
d5:fe:5e:61:c7:0e:00:e1:25:59:47:06:4c:b2:56:d1:c0:37:
12:40:44:ca:c1:96:e5:fb:8d:66:c9:e6:a9:7a:d0:4d:22:05:
e3:2c:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:44 2026 by rpki-client