Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: U2X/YH067zbkPZQT3jrcp1vOAxUE1/qWHXHrVfTImhs=
Subject key identifier: 4C:1C:E7:D5:3A:A4:3D:78:87:E3:69:48:F3:DE:D0:D5:A8:4E:34:2B
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019D9962C9FF3C892C71DA8FAC41A979DEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 0A8F
Signing time: Fri 17 Apr 2026 03:01:21 +0000
Manifest this update: Fri 17 Apr 2026 03:01:21 +0000
Manifest next update: Sat 18 Apr 2026 03:01:21 +0000
Files and hashes: 1: BVqqb8lSIphtFXGqi1sz49tXm0E.roa (hash: ccDupErLCJ+UOpMWaTKoluVs74aytETrBSW4WCesOvI=)
2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: fEA50spWlUHu/pou6TU6NgBY53eHX6pBvVebqiZQ1oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c9:ff:3c:89:2c:71:da:8f:ac:41:a9:79:de:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Apr 17 03:01:21 2026 GMT
Not After : Apr 18 03:01:21 2026 GMT
Subject: CN=4c1ce7d53aa43d7887e36948f3ded0d5a84e342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:14:61:b3:5a:bc:4b:82:72:3c:10:d3:82:
90:b6:bc:77:65:6d:b7:d9:6e:3f:c5:72:87:cb:33:
42:24:1b:e4:fd:00:25:60:d9:62:1b:47:bd:3e:32:
72:ce:40:40:97:1f:f9:6b:4d:ef:8e:ba:4d:d0:4b:
7f:2f:6a:35:34:4a:90:bd:bc:da:69:9a:ff:06:3c:
d2:ac:f4:0f:4d:5e:14:ce:c3:9e:2b:dc:6b:54:67:
8b:8f:b3:45:a4:26:db:cc:90:54:63:db:c1:3f:79:
a3:24:0e:f4:27:98:55:f1:f3:44:ec:8f:3a:86:01:
33:e9:26:f8:4f:18:8f:c0:d2:ce:c8:fb:57:4f:7a:
ab:58:d2:62:e1:96:48:2d:21:99:f7:47:2f:57:41:
80:db:76:50:6d:70:6d:6c:1b:3d:28:e4:44:f9:46:
d5:35:74:45:3d:34:b7:f6:ee:da:d6:0a:02:8e:f8:
ed:19:c7:4b:66:f5:89:5c:2a:7f:b6:a2:0f:6d:7d:
2a:2e:5a:43:ec:de:52:86:a3:dd:76:21:f2:9f:c2:
aa:cf:03:58:3f:eb:4f:a4:2c:65:4f:7e:d5:83:0d:
c9:c7:65:92:0e:99:f9:d6:15:6f:dc:b9:4c:d5:a2:
af:f8:ff:f7:77:a4:f7:49:a9:62:16:0b:44:cc:da:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:E7:D5:3A:A4:3D:78:87:E3:69:48:F3:DE:D0:D5:A8:4E:34:2B
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:3b:6d:bd:82:5d:54:e8:02:77:61:b5:5b:6f:2f:e2:35:
b7:23:66:25:eb:d7:f5:e7:a3:e8:e8:97:45:d9:b4:9f:22:68:
4d:cc:71:bb:77:41:ab:fa:ed:02:8d:b0:8d:ef:d7:46:1f:7e:
fb:30:3e:a2:f1:d2:a7:db:9e:a2:45:8a:89:d8:1f:cb:cc:cb:
a1:da:a7:ce:8d:79:45:5e:57:97:b2:09:1d:ef:81:d2:ed:1d:
50:7b:4c:bf:9b:f6:8a:54:e5:dc:23:43:f0:fa:e2:55:ff:ae:
dd:ab:68:c1:53:63:ab:71:af:ad:8c:23:81:16:df:b4:96:cf:
15:22:6b:4a:21:06:c1:4b:a5:98:c7:85:f3:34:08:40:51:a3:
62:c2:fb:5b:8c:03:c0:8d:3f:67:a6:6c:66:e8:36:07:21:e7:
fe:19:f1:e9:80:8f:ed:8f:e0:ea:22:cb:d3:32:21:38:0b:7e:
56:a6:db:0d:87:e1:f8:15:05:e6:10:0b:c2:7c:d8:d7:6f:92:
90:05:6f:ae:f8:35:d9:70:ec:97:c3:b1:f1:f4:8d:9a:2d:34:
86:b3:78:0d:9f:b0:d2:8d:27:05:66:a5:c0:31:18:f5:a0:35:
bc:4f:91:87:13:1e:a0:24:96:36:1d:14:11:cb:29:39:e2:28:
b3:d5:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:08 2026 by rpki-client