Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: ldaQr24WKph3eK85sPFg66oU3Uw62gA/HSg6z5Bfc+U=
Subject key identifier: B3:36:36:B6:5E:22:5E:8E:94:C6:B4:65:71:CF:F9:49:A2:0E:01:F1
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 019D98F4A0EB07C0C006219F5BDDFD5E4DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0DCA
Signing time: Fri 17 Apr 2026 01:01:01 +0000
Manifest this update: Fri 17 Apr 2026 01:01:01 +0000
Manifest next update: Sat 18 Apr 2026 01:01:01 +0000
Files and hashes: 1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: 5tlhfHR/SbthVwzVDYnmXbN/PF3gWJgpTEW6dt1mk24=)
2: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (hash: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a0:eb:07:c0:c0:06:21:9f:5b:dd:fd:5e:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Apr 17 01:01:01 2026 GMT
Not After : Apr 18 01:01:01 2026 GMT
Subject: CN=b33636b65e225e8e94c6b46571cff949a20e01f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:2e:7c:b9:a3:9f:36:69:52:77:7f:73:ef:
30:48:fc:2c:54:bf:30:53:a1:87:a6:08:44:74:7c:
8e:5b:be:a1:69:75:00:39:55:f5:de:0c:8b:12:28:
c4:46:ce:a4:0f:71:ea:cf:d1:f8:65:ee:89:5e:b1:
db:4c:09:48:e6:33:49:b8:21:9e:6d:06:b3:82:29:
11:a2:5b:0a:48:d9:88:7f:d1:20:03:6c:18:57:f1:
6c:b9:d4:20:7f:55:9f:c3:15:c8:49:28:8c:26:f0:
f7:56:af:e4:6b:ea:33:2b:72:37:a6:b6:42:55:9b:
7e:fb:07:87:3d:f9:8d:78:69:f7:8b:b9:42:ce:b8:
da:87:17:9d:c3:3f:c5:ee:57:be:9a:00:4a:af:fc:
52:a5:0f:f8:a7:9d:52:c3:3e:22:b5:a6:05:a2:fe:
56:38:68:de:9e:fb:3d:08:0c:86:11:dd:15:98:98:
d5:54:59:1c:0d:35:64:e9:d7:ee:ea:cc:cc:5c:61:
2b:f4:ff:8e:86:1b:bc:6f:f4:40:4d:77:aa:37:10:
de:2c:34:4f:10:53:75:5c:1c:3f:47:53:56:63:6c:
f2:d7:b7:2c:e5:55:68:65:2a:a9:5e:10:d6:67:07:
bf:0f:e0:6b:b6:64:7d:8f:f7:ce:44:0a:45:94:5e:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:36:B6:5E:22:5E:8E:94:C6:B4:65:71:CF:F9:49:A2:0E:01:F1
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:f9:38:f2:97:d6:26:16:b1:d2:43:73:04:3d:45:95:74:
46:ae:54:4a:0b:76:32:fa:bd:75:e4:51:f0:2c:c4:b3:bd:25:
06:84:0d:66:17:5e:d5:17:14:78:48:69:0f:3e:ce:71:5c:ec:
c8:bb:53:af:c2:37:3a:a8:6f:4e:80:36:09:a5:5d:21:fd:b0:
75:9c:33:0a:ea:28:3f:04:02:c6:45:74:7d:e9:90:ed:5d:1c:
e2:e5:11:8e:2a:62:cc:5b:7e:fb:a9:33:65:1c:2f:d2:c1:be:
b1:50:a5:f4:ac:02:fb:3a:16:1a:fd:f6:7c:c2:9b:df:40:e4:
5b:cd:47:23:0c:1e:88:73:66:95:32:b4:b6:24:7b:82:d3:18:
a7:67:0f:eb:b1:32:2a:24:6d:5d:6c:ed:7f:52:88:3e:23:dd:
5e:cc:77:81:b2:ba:7d:99:d4:af:0b:25:87:fa:3a:7e:d3:8c:
60:83:c6:35:2a:d0:e5:40:6b:e2:ce:7d:8e:51:35:69:4b:6b:
d9:9c:a8:54:c3:23:89:ce:00:2a:52:b3:69:87:62:25:b0:81:
2c:9c:36:4a:9c:fc:11:95:15:f2:21:ac:0b:0f:df:e9:9c:89:
18:2b:ee:d0:56:03:e6:67:fa:ba:c6:b8:c6:46:80:9f:13:8c:
87:2c:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:41 2026 by rpki-client