Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: 3+BMdVdpadu2MXmn/Bn4DrYkFwfaThhR8QSuo8bEBLM=
Subject key identifier: F6:DF:C0:92:4D:02:A0:76:49:F5:E0:A3:B2:2C:86:82:94:79:DC:08
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019CACB4C535F694C3200C25EE750BF9ED1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0A20
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: UAWnbgovPweYdlmUKTyLGAtddD/t8ZNOdRJLe04af1M=)
2: wzKWY6Wt2mb7gzv6ILxVI9gqBVI.roa (hash: Ih5+NRozSgaecg0vA3twm5kYdnmkAGbTAu9H3wik/xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c5:35:f6:94:c3:20:0c:25:ee:75:0b:f9:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=f6dfc0924d02a07649f5e0a3b22c86829479dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:35:ec:32:9c:f4:c4:10:1d:5e:83:80:86:
72:35:e9:dc:97:86:66:1e:d4:a4:9b:f0:7e:ab:76:
7a:af:57:70:85:45:fd:f8:ff:6c:91:41:71:5d:6c:
4a:02:f8:53:a7:f4:95:b1:32:e7:37:e5:06:48:cc:
36:90:45:62:4e:40:99:12:9c:70:a2:2a:7b:26:ca:
96:3d:d9:c3:6e:7d:d9:a3:fe:20:71:b0:bd:d0:91:
36:1d:ba:08:af:9c:4e:5b:33:7b:ef:1e:22:89:dd:
0d:c7:57:b1:71:5d:a1:f8:86:46:b4:25:81:cb:3b:
ef:b6:2b:ac:cd:14:0d:2b:97:50:69:92:6f:94:30:
ad:0a:c6:9b:df:06:e8:35:2f:57:74:3b:ca:e1:2a:
fb:cd:a1:fa:37:fb:74:24:cc:9e:ce:51:1e:b3:90:
19:be:d0:15:b5:06:b2:70:5d:78:a0:01:48:74:77:
37:03:9e:90:72:a6:7e:2e:6a:74:77:8e:89:66:58:
d0:25:3b:ed:64:98:ee:bb:b0:84:eb:3d:00:e8:85:
76:8d:3b:52:27:7c:ed:39:10:cc:18:04:d8:4a:a6:
3f:04:bf:09:c9:f5:3b:0d:61:ba:db:b5:ce:df:f8:
f8:84:46:bb:1c:1a:c2:b6:94:51:2a:de:7c:04:ea:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:C0:92:4D:02:A0:76:49:F5:E0:A3:B2:2C:86:82:94:79:DC:08
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9b:2f:e4:99:f4:7b:96:4b:56:83:2b:6d:77:8e:dc:c0:c0:
d6:f8:61:d1:19:09:2a:f8:df:4c:f2:59:bb:af:0b:fe:7a:d8:
26:18:ac:8e:73:64:00:57:06:27:31:0b:ef:0e:6c:48:1c:22:
21:1f:c3:c3:b3:91:fe:f1:52:4d:48:62:c5:68:50:36:61:ab:
92:bf:07:47:91:0e:74:53:4c:34:88:67:ae:7c:24:a1:28:c0:
50:df:f9:27:ba:aa:f5:b1:bb:64:f8:94:2e:76:f8:98:7d:58:
11:77:05:26:9b:4b:15:7c:0e:cc:e0:fb:f6:8d:d8:d8:5c:0a:
68:c4:1d:28:09:c8:ce:72:3d:00:7b:66:83:d9:b6:d7:bf:bb:
d1:1e:73:3e:e9:83:2f:38:02:56:ff:2f:05:2f:1b:3b:db:94:
71:94:5f:ed:72:27:7a:1f:38:9b:27:55:54:71:8e:5b:dc:40:
e0:d1:6c:72:dd:b3:a0:56:ec:cc:45:f9:10:a3:b4:41:0b:96:
e6:0c:22:88:9c:72:9b:f7:92:7a:bc:d0:0d:d5:d8:5a:bd:38:
18:6c:97:a5:11:a4:41:14:8a:9d:72:c8:f4:2f:a4:75:40:af:
f9:43:89:39:fb:53:ac:e4:dd:e1:76:3b:22:00:14:2b:ab:02:
3c:88:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:31 2026 by rpki-client