Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: LH1fRWzrDrs1bv2zwpPBePLaI5DFUmS0fBx3kM+za3w=
Subject key identifier: 6B:5F:4F:3F:40:9C:4E:2A:B3:2A:FB:17:C4:F9:44:0F:B7:2D:36:6C
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019D984F8731481C0DA11215DE0A03703B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0A9A
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: CuWuV/2Td43MVo0mhGu/2SyjE47ez+CBQSWpPiHIYEo=)
2: wzKWY6Wt2mb7gzv6ILxVI9gqBVI.roa (hash: Ih5+NRozSgaecg0vA3twm5kYdnmkAGbTAu9H3wik/xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:87:31:48:1c:0d:a1:12:15:de:0a:03:70:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=6b5f4f3f409c4e2ab32afb17c4f9440fb72d366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:6d:9f:31:1b:cd:42:11:0a:94:ba:d1:21:
94:a5:18:15:52:8c:02:32:10:f8:74:0f:00:4c:60:
89:ca:8f:11:90:3b:66:86:38:81:18:76:46:9e:fc:
e0:ed:ef:f6:78:bf:e6:6f:51:25:03:1d:fb:76:55:
7a:b5:e8:62:15:3a:ed:ce:ec:70:cf:01:ab:ff:73:
69:6d:50:ec:42:32:cc:4b:23:7c:46:0a:cd:85:f7:
aa:84:67:34:a7:00:6a:da:91:7a:a1:73:b3:3d:57:
eb:44:7e:45:f8:a4:f8:6e:14:fa:99:7b:61:3e:2e:
f5:c4:ad:ad:33:17:9e:c8:37:0a:90:67:8c:ae:34:
b5:86:1b:e7:6a:da:50:66:8b:e3:26:01:f0:0a:30:
1c:6f:5f:f2:da:fd:86:50:ac:08:f9:85:5c:d1:c4:
36:53:6c:63:63:13:d4:c2:5f:1b:02:41:f5:31:53:
fd:16:d6:95:9e:b5:96:87:00:1f:ed:60:0a:89:c2:
b9:70:23:79:7d:00:6e:2c:e7:d9:de:a8:c0:0a:69:
89:18:8b:1f:94:ad:35:d0:04:e6:73:62:7e:2b:cb:
87:15:03:d3:df:00:6d:47:0c:aa:df:dc:33:b8:80:
e3:08:39:1f:b3:9d:88:0f:76:7e:22:93:05:e5:dc:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:4F:3F:40:9C:4E:2A:B3:2A:FB:17:C4:F9:44:0F:B7:2D:36:6C
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:18:37:95:03:aa:6d:a6:a1:65:e0:27:80:38:d6:36:26:2d:
ed:29:98:8c:35:31:1c:fe:e4:98:11:ee:66:14:12:71:b8:36:
d8:d1:9b:ef:0d:a3:3d:af:fb:47:20:09:8f:e9:b5:42:5f:65:
6c:db:83:2c:9b:b3:fb:02:47:08:db:0d:51:0a:e5:56:88:95:
b1:ba:e0:6c:f6:be:a8:85:b5:49:c4:de:d8:80:5f:2a:84:be:
34:b5:a0:76:c1:52:55:b9:cb:60:df:dc:7c:bf:dd:8e:d7:38:
e3:38:d9:02:b4:8a:f2:9b:4a:b7:e7:40:68:b1:d4:16:04:ef:
89:68:a5:68:fe:84:d0:7f:e9:2f:7c:f2:bb:e4:d4:c1:e8:28:
da:db:eb:ea:80:61:d3:55:21:d1:7c:c9:55:63:e4:e6:5d:4e:
64:6f:54:de:77:70:ab:f1:f2:6d:31:4b:9e:c0:b6:36:6b:87:
02:67:25:35:4c:2d:bb:75:ce:0f:2a:6c:9e:12:b3:88:10:8d:
0e:9e:4d:d1:2f:09:1f:40:22:62:d7:7f:84:12:3c:c7:27:83:
87:d0:fd:a9:d2:67:35:4a:39:44:a4:67:ae:8d:02:f6:ff:49:
8b:75:2c:5b:d6:8f:59:82:b7:de:76:8e:e9:fc:91:8c:28:01:
c7:25:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:58 2026 by rpki-client