Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: lHBnAAHG5Ys9g7HiASb3wmGbROppSoZN8HIwK2Lj6k0=
Subject key identifier: 44:C3:B2:17:53:CE:C2:FD:EB:38:77:40:EC:58:1D:96:C8:AA:B5:D0
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 019D98F43338160397E2FEDBBF11839E7F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 104E
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: 9dzMDh/XkZo9kQmiYet9cFQdh3B0nVLIsODBOIXmADU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:33:38:16:03:97:e2:fe:db:bf:11:83:9e:7f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=44c3b21753cec2fdeb387740ec581d96c8aab5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f2:20:2a:30:74:e7:f3:b0:50:68:30:5b:90:
96:6c:e3:24:71:48:eb:8c:ab:b8:af:24:58:ed:cc:
ab:ad:9f:47:83:f0:54:47:b7:0f:e3:45:ee:e9:4d:
75:8e:f8:5f:5f:fe:72:56:4b:cc:40:49:e7:f2:92:
1e:e4:f6:4d:13:7c:a1:8a:19:22:58:62:17:ae:3a:
f7:b4:30:23:bc:be:6c:d2:6c:21:fc:3c:b9:47:a3:
65:31:62:a4:2a:c1:22:0c:9d:54:1d:c5:25:14:88:
ca:59:a3:06:1c:f9:60:78:f2:38:13:53:84:b1:06:
fe:64:00:37:80:21:4e:c6:2c:1d:5f:96:af:45:02:
35:a0:74:c3:51:34:1b:aa:f7:c8:71:83:87:4d:8c:
df:69:5b:0f:cd:01:83:06:6e:99:07:3a:c4:92:1c:
dd:e0:cc:93:ef:34:e0:3a:4e:79:17:02:09:62:b9:
5f:f5:ca:65:83:78:0b:b9:5e:a7:87:43:bb:2c:f5:
bb:e2:0a:f4:c8:6a:c0:fd:c9:d5:fc:4d:08:1c:e6:
58:de:d4:fa:02:9d:df:3b:5d:24:46:06:0a:80:bf:
6d:4c:8a:72:72:78:2d:91:53:ba:0f:12:85:cf:d6:
24:81:71:9f:de:18:d8:60:64:2a:88:e7:40:f1:1d:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:B2:17:53:CE:C2:FD:EB:38:77:40:EC:58:1D:96:C8:AA:B5:D0
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:7a:4e:7c:9c:01:69:1a:13:0d:98:88:69:90:51:45:b0:
15:ac:f5:b5:7c:69:9b:f3:6f:1b:01:ac:6c:d7:49:d0:1d:07:
09:b4:d9:e5:ac:37:68:39:69:31:68:86:9a:35:0d:ce:69:c3:
08:ed:7c:72:74:7e:bb:59:f3:ea:56:39:2b:e1:f2:a4:8c:4a:
1c:7e:b2:5f:bd:15:90:da:06:63:88:1f:8c:b8:fb:a2:50:bb:
ec:19:9b:91:02:6d:a5:f8:ca:36:8a:c5:a6:be:fd:7d:6e:bc:
93:19:de:9f:79:a5:dd:8e:69:cf:89:45:7a:27:38:89:6c:92:
8e:6c:41:71:63:46:c4:24:24:0a:b0:55:33:1b:48:d3:38:a9:
a8:dc:4b:ea:4a:6d:41:00:e8:86:c9:88:31:02:39:63:4a:84:
15:bd:b0:fd:17:7b:82:d3:bb:9c:57:48:c4:e4:43:6c:81:e3:
e4:e2:ad:3d:33:4b:39:3a:77:43:9e:29:b2:5b:14:d7:27:64:
47:f4:f9:8d:2c:97:51:d3:5b:f6:c1:8f:a4:02:49:c7:c2:8d:
8a:8b:55:e5:b9:4a:bf:0b:bb:b0:fd:90:dc:90:4a:84:f0:de:
6a:7b:3b:27:5a:bc:31:26:bf:06:e0:d7:cd:97:1c:0f:48:28:
1e:0d:72:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9DM4FgOX4v7bvxGDnn+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZmJiNGZiZDkxZjBlYWUzY2MyMmY2YzRlYmI1MGNkODBh
ODhmZDYwHhcNMjYwNDE3MDEwMDMzWhcNMjYwNDE4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg0NGMzYjIxNzUzY2VjMmZkZWIzODc3NDBlYzU4MWQ5NmM4YWFiNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/IgKjB05/OwUGgwW5CWbOMkcUjr
jKu4ryRY7cyrrZ9Hg/BUR7cP40Xu6U11jvhfX/5yVkvMQEnn8pIe5PZNE3yhihki
WGIXrjr3tDAjvL5s0mwh/Dy5R6NlMWKkKsEiDJ1UHcUlFIjKWaMGHPlgePI4E1OE
sQb+ZAA3gCFOxiwdX5avRQI1oHTDUTQbqvfIcYOHTYzfaVsPzQGDBm6ZBzrEkhzd
4MyT7zTgOk55FwIJYrlf9cplg3gLuV6nh0O7LPW74gr0yGrA/cnV/E0IHOZY3tT6
Ap3fO10kRgYKgL9tTIpycngtkVO6DxKFz9YkgXGf3hjYYGQqiOdA8R1tBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETDshdTzsL96zh3QOxYHZbIqrXQMB8GA1UdIwQY
MBaAFH37tPvZHw6uPMIvbE67UM2AqI/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMt
MGQxN2RkYmZlM2I2LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMtMGQxN2RkYmZlM2I2
LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0Z6Tnyc
AWkaEw2YiGmQUUWwFaz1tXxpm/NvGwGsbNdJ0B0HCbTZ5aw3aDlpMWiGmjUNzmnD
CO18cnR+u1nz6lY5K+HypIxKHH6yX70VkNoGY4gfjLj7olC77BmbkQJtpfjKNorF
pr79fW68kxnen3ml3Y5pz4lFeic4iWySjmxBcWNGxCQkCrBVMxtI0zipqNxL6kpt
QQDohsmIMQI5Y0qEFb2w/Rd7gtO7nFdIxORDbIHj5OKtPTNLOTp3Q54pslsU1ydk
R/T5jSyXUdNb9sGPpAJJx8KNiotV5blKvwu7sP2Q3JBKhPDeans7J1q8MSa/BuDX
zZccD0goHg1yvw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:37 2026 by rpki-client