Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
File: FQo3NJOhCsuvMf30RWF6YsTUb88.mft (raw, json)
Hash identifier: bYTL7fcsQPn2FWfpPAsdzplFDed3Fgfra7oWE6g3pHQ=
Subject key identifier: 79:EC:79:0A:3B:14:D5:61:B5:EE:20:E7:F0:E8:4D:64:A9:BA:B9:48
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 019D9C63466031C2F43D768D2F1867AD760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 17:00:44 +0000
Manifest this update: Fri 17 Apr 2026 17:00:44 +0000
Manifest next update: Sat 18 Apr 2026 17:00:44 +0000
Files and hashes: 1: FQo3NJOhCsuvMf30RWF6YsTUb88.crl (hash: P4Eawpf87PMKNxDJsse/gIYnThO13aFOkVT9jPUQYto=)
2: sJ-_Jswaoq22XpYWMBXCNUf0ooQ.roa (hash: XUjTFcYk7iuRwGLtHc2xalVLS5lHNB0fofvZ8DgQ5GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:46:60:31:c2:f4:3d:76:8d:2f:18:67:ad:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Apr 17 17:00:44 2026 GMT
Not After : Apr 18 17:00:44 2026 GMT
Subject: CN=79ec790a3b14d561b5ee20e7f0e84d64a9bab948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:09:6e:96:be:0b:88:f1:3b:47:72:0f:1d:
24:94:06:55:f9:53:d4:d8:80:19:cc:ea:20:43:c1:
81:cb:83:72:81:60:9b:66:64:3c:4a:cb:01:c2:f5:
a8:ad:1b:97:66:bc:7e:a5:88:20:aa:50:aa:5f:df:
f1:4b:a2:f4:49:16:02:b5:e5:72:a3:61:bb:da:0c:
cb:28:8d:fb:fd:82:12:0a:29:73:22:b0:9b:9e:1f:
01:39:3c:b5:64:86:fa:9c:c1:80:ff:71:db:1e:15:
fd:68:fe:b2:22:79:99:86:2e:0b:98:0f:47:f0:82:
b6:61:a3:ae:69:cd:86:24:cc:b0:e3:45:1b:96:ae:
64:e2:5b:e5:85:f8:6e:55:6b:a8:48:84:30:f1:b0:
35:16:96:8e:54:2e:c7:9b:a6:c2:25:c3:2d:7c:b0:
0c:45:ef:56:7b:da:d0:1c:24:a6:2c:5e:2c:d3:4d:
72:c1:48:2a:36:80:ed:3c:6b:4d:cb:52:54:5a:d3:
62:6f:15:ba:5c:d0:a0:1e:0b:51:97:de:c7:34:5f:
19:1c:f0:6f:73:63:d8:2d:d4:2d:7e:40:9a:64:aa:
94:90:b7:1e:f8:bc:aa:cf:4f:57:5b:c1:91:e4:cf:
f9:f5:66:a7:89:cb:df:ea:c0:1a:82:71:d0:fa:28:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:79:0A:3B:14:D5:61:B5:EE:20:E7:F0:E8:4D:64:A9:BA:B9:48
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:81:48:55:50:a7:f9:35:2c:dc:95:ec:9e:f3:3f:bc:bc:58:
d6:cb:5f:71:77:21:6e:be:2d:a2:46:28:f1:7b:80:75:dc:19:
45:59:3f:60:fb:fb:48:05:8a:81:d5:46:34:89:e7:9a:90:dc:
a1:6b:7a:d8:03:c9:37:0e:20:be:db:4a:30:41:6d:10:99:93:
a3:b1:3e:fd:b1:d9:52:6f:36:43:39:c1:42:46:f9:c2:89:f1:
f5:dd:10:ad:94:13:ce:47:15:20:96:fc:dd:18:65:8f:6c:ed:
d7:d2:17:79:35:6b:00:b6:e8:dd:ef:aa:dd:c1:24:4b:cc:7a:
3c:ab:0c:d6:b1:fc:31:e6:0a:bc:cb:57:82:1c:4c:4d:4a:a9:
5b:e0:78:5f:3f:05:ed:29:dc:1f:af:2e:9d:c2:ad:61:08:0b:
94:44:b6:0d:c4:af:2f:52:a7:12:c8:ab:b8:b7:26:74:72:35:
34:3a:32:63:09:a9:dd:2e:24:e7:fc:7d:cd:7f:2e:5f:19:c6:
da:6f:97:69:d0:18:13:fe:05:21:a1:f8:4b:5a:65:14:e8:5a:
eb:a3:51:c3:6e:fd:1a:20:d4:28:cc:88:98:64:e1:ab:46:99:
78:64:c5:b0:1f:35:51:39:c9:68:74:52:a2:4c:80:2f:20:80:
da:f7:a7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY0ZgMcL0PXaNLxhnrXYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGEzNzM0OTNhMTBhY2JhZjMxZmRmNDQ1NjE3YTYyYzRk
NDZmY2YwHhcNMjYwNDE3MTcwMDQ0WhcNMjYwNDE4MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg3OWVjNzkwYTNiMTRkNTYxYjVlZTIwZTdmMGU4NGQ2NGE5YmFiOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgwJbpa+C4jxO0dyDx0klAZV+VPU
2IAZzOogQ8GBy4NygWCbZmQ8SssBwvWorRuXZrx+pYggqlCqX9/xS6L0SRYCteVy
o2G72gzLKI37/YISCilzIrCbnh8BOTy1ZIb6nMGA/3HbHhX9aP6yInmZhi4LmA9H
8IK2YaOuac2GJMyw40Ublq5k4lvlhfhuVWuoSIQw8bA1FpaOVC7Hm6bCJcMtfLAM
Re9We9rQHCSmLF4s001ywUgqNoDtPGtNy1JUWtNibxW6XNCgHgtRl97HNF8ZHPBv
c2PYLdQtfkCaZKqUkLce+Lyqz09XW8GR5M/59Wanicvf6sAagnHQ+ig8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnseQo7FNVhte4g5/DoTWSpurlIMB8GA1UdIwQY
MBaAFBUKNzSToQrLrzH99EVhemLE1G/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNDllZDEtNDJkMi00MzA2LTk5YWEt
MDViODllZjk5MmRmLzEvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hNDllZDEtNDJkMi00MzA2LTk5YWEtMDViODllZjk5MmRm
LzEvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioFIVVCn
+TUs3JXsnvM/vLxY1stfcXchbr4tokYo8XuAddwZRVk/YPv7SAWKgdVGNInnmpDc
oWt62APJNw4gvttKMEFtEJmTo7E+/bHZUm82QznBQkb5wonx9d0QrZQTzkcVIJb8
3Rhlj2zt19IXeTVrALbo3e+q3cEkS8x6PKsM1rH8MeYKvMtXghxMTUqpW+B4Xz8F
7SncH68uncKtYQgLlES2DcSvL1KnEsiruLcmdHI1NDoyYwmp3S4k5/x9zX8uXxnG
2m+XadAYE/4FIaH4S1plFOha66NRw279GiDUKMyImGThq0aZeGTFsB81UTnJaHRS
okyALyCA2venfA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:57 2026 by rpki-client