Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: 6lp6IKbQMjZzvVSqlMe5D+mC5QN9NAiEqBHtFA8nNuY=
Subject key identifier: 08:8A:3C:CF:CE:44:BE:D5:6C:55:A8:7C:0D:61:AA:EE:F6:42:67:12
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019DA30B198D1EE51A02FD2095FC7614F4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0DFC
Signing time: Sun 19 Apr 2026 00:01:46 +0000
Manifest this update: Sun 19 Apr 2026 00:01:46 +0000
Manifest next update: Mon 20 Apr 2026 00:01:46 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: 2wmq9t2ErvsdzDX9gPKqvZkCFKiwK1Wepp7rQ9zARDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0b:19:8d:1e:e5:1a:02:fd:20:95:fc:76:14:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Apr 19 00:01:46 2026 GMT
Not After : Apr 20 00:01:46 2026 GMT
Subject: CN=088a3ccfce44bed56c55a87c0d61aaeef6426712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:c6:83:67:c4:bc:5a:bf:5d:7d:76:a3:08:
b4:bf:3e:15:6c:37:76:c3:1d:e0:91:aa:d9:b7:01:
9e:95:6f:fd:ca:13:70:f2:0f:21:bb:03:b4:62:c8:
ca:f4:f6:32:b8:00:06:da:9a:0d:3c:a1:11:11:54:
ff:22:27:3a:77:f2:4f:0d:a9:f8:1c:18:91:45:dd:
12:d9:74:4f:60:07:70:da:ea:b7:e6:f1:2a:87:8e:
ef:c1:af:31:5a:68:d7:1a:06:64:42:f1:02:d2:1b:
df:19:49:25:0b:c1:6d:a8:1b:8d:9f:e5:96:d6:62:
c9:2c:bd:77:e5:46:e3:17:5d:d7:bc:08:a8:27:bf:
02:67:e9:c1:49:82:51:a1:52:8b:48:9b:6e:2d:94:
dd:db:28:be:69:73:4c:c7:e5:2a:11:15:41:c9:16:
4f:2f:29:35:5e:10:2f:f1:ee:29:f8:97:ce:32:02:
51:16:8d:f0:e4:8b:9f:f8:5e:f8:2c:f0:6f:cd:84:
61:5e:9d:fe:eb:ee:7e:9e:d0:cf:80:98:91:30:f6:
9a:c6:76:21:b1:36:7f:53:c3:11:d0:29:7e:35:17:
ce:f3:46:ca:f4:ac:41:e6:5b:06:ad:e7:21:d1:85:
48:2f:50:ac:46:41:be:59:6b:b6:c3:93:c5:a0:e3:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:3C:CF:CE:44:BE:D5:6C:55:A8:7C:0D:61:AA:EE:F6:42:67:12
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:ea:a4:21:c6:b0:41:84:34:62:9b:ce:67:93:8d:94:80:
9e:ab:c9:a1:d3:e5:ef:94:d0:61:c7:e3:19:76:26:ce:8b:d1:
31:2e:1d:df:85:79:1f:d9:99:77:29:e7:e5:c6:52:8a:0d:75:
ee:7e:89:23:60:4c:72:ae:f5:84:4e:21:84:af:af:fd:76:96:
e5:b5:ad:54:a1:59:f5:f7:33:83:77:db:88:5e:cc:3b:c0:9c:
8b:ae:92:58:a6:f2:d7:52:24:53:d1:eb:f4:8c:a0:2e:56:61:
33:55:26:e8:d1:20:29:48:12:5f:7d:c1:68:99:85:3c:98:64:
a8:a0:5e:3a:9a:6a:1a:11:ed:09:47:fd:78:fe:d4:ec:70:fb:
e7:00:99:4b:9c:5a:53:a7:36:8b:7c:14:a5:61:47:87:70:6f:
ac:24:a4:e2:f0:38:26:61:80:83:50:9f:b2:aa:b0:2d:ac:82:
05:7a:6d:c5:dd:df:65:13:22:49:d5:06:64:2a:34:ac:9f:9e:
08:93:c3:14:ba:58:20:a3:a4:ec:cd:08:6b:b3:a6:99:21:d3:
a4:b8:8a:05:1a:f3:79:3c:5c:6b:4d:c5:44:9e:5a:bf:38:ed:
95:1a:08:a5:d6:2d:57:a9:95:2f:72:ac:16:8f:50:3c:5e:33:
69:c6:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:54 2026 by rpki-client