
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: JRgIaGOEWbPdo20b53AfCedsThL6cz0KzjCfc0gfJXU=
Subject key identifier: 80:8B:60:D5:2F:38:C0:3C:E9:D9:AF:4B:52:23:56:B1:70:72:5E:BF
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019D9962F58EB8BEE7DEF5ABE326CD0E2767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 09E1
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: yls6O2Ufn+GmejPn8wMd4dwWZTdWgkvDtljiw76NHvE=)
2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f5:8e:b8:be:e7:de:f5:ab:e3:26:cd:0e:27:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=808b60d52f38c03ce9d9af4b522356b170725ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:15:a6:11:ba:c6:8b:87:46:d9:df:93:4d:
d0:c2:e6:22:b8:c2:cb:13:ee:d8:a3:1a:ab:09:90:
c7:20:f7:19:a8:1f:db:cc:54:d3:1b:d7:24:d4:f6:
44:19:78:50:2c:d2:40:df:7d:22:7c:26:d9:5b:ca:
1b:dd:83:23:eb:7f:97:70:a2:ae:88:8a:e4:b5:8d:
be:96:56:cb:3c:f0:4c:b6:4f:b4:cf:35:bc:a2:6f:
8d:9f:6e:39:3b:2c:cf:c1:71:d8:79:e4:1c:86:4f:
de:bc:a2:59:d6:c2:dd:7a:49:74:52:56:92:6f:c9:
1a:67:b7:41:3e:81:95:1a:c1:6e:7a:a4:8c:06:fd:
19:c7:69:c5:14:dd:4c:2a:10:e0:11:92:4d:cc:31:
e8:9e:0d:e2:1c:ea:72:ef:c9:ee:90:b3:40:d1:d7:
28:2a:b0:08:2d:b7:ae:44:c2:9b:54:05:21:51:e5:
28:d1:d1:19:a4:17:8b:02:6c:fa:28:f7:ad:52:ee:
ef:d4:1c:cf:39:87:5b:48:76:21:09:c9:df:7e:cf:
ef:cb:d1:eb:95:c3:df:9a:65:03:13:f9:f2:5c:9d:
f2:00:3b:76:42:46:e2:f7:93:07:12:f9:aa:34:90:
e6:ec:4e:ca:90:62:02:21:be:e8:6d:77:1a:b3:e1:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:60:D5:2F:38:C0:3C:E9:D9:AF:4B:52:23:56:B1:70:72:5E:BF
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:83:17:01:c5:00:66:75:02:9d:fd:50:f5:71:16:58:50:c7:
68:a5:5b:38:06:d6:39:43:b8:5e:40:f5:5b:c9:f9:5c:50:bc:
cc:dc:44:da:8f:c5:21:7a:a5:c2:c8:d7:46:23:92:8e:7c:79:
98:7f:27:ce:ea:ac:fd:d8:8f:96:91:70:8f:d4:e4:6f:58:a9:
eb:90:4e:4b:83:6d:56:69:fe:94:fc:20:ef:52:58:4e:e0:b1:
89:3f:80:fb:1c:1d:c7:9f:af:f3:14:b3:e1:d9:de:75:29:7e:
a8:19:45:39:fd:4e:2a:5f:cf:f6:c5:de:f7:02:9b:05:52:0f:
bb:02:8b:86:ea:e4:6f:90:41:04:0c:d0:53:c6:78:be:5f:d3:
62:5e:5a:56:2d:39:c3:df:28:07:82:36:c1:0f:10:f6:bc:25:
14:80:54:8c:93:1e:44:79:cb:cd:2f:1b:6e:25:01:c6:fd:67:
d5:d7:9b:1a:77:13:3d:5a:bf:8b:3e:24:57:78:84:4a:79:39:
88:3b:62:09:fc:45:a6:d4:e2:b0:7c:6d:88:39:be:05:27:8f:
47:f1:6f:18:13:42:29:58:85:e3:16:23:dd:f8:8b:02:37:5f:
c0:03:f1:6e:9f:10:81:a5:8f:63:d9:7b:c0:28:d7:cc:79:3e:
b9:2c:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:01 2026 by rpki-client