Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: 4STykm3chyyPOMz9Mm/VH8/m7EFpEppEtvPibCUM9Tw=
Subject key identifier: 35:1D:BF:32:05:97:95:A7:FE:1D:3F:9B:2A:AC:F6:DD:F1:9C:9B:03
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019DA2D380111D3C696567BE1269F7EBAF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 07FC
Signing time: Sat 18 Apr 2026 23:01:02 +0000
Manifest this update: Sat 18 Apr 2026 23:01:02 +0000
Manifest next update: Sun 19 Apr 2026 23:01:02 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: 9PfkxXOqLiI+4OVxOs2LDRsJkECNRfYKlPZGaoQPHUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:80:11:1d:3c:69:65:67:be:12:69:f7:eb:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Apr 18 23:01:02 2026 GMT
Not After : Apr 19 23:01:02 2026 GMT
Subject: CN=351dbf32059795a7fe1d3f9b2aacf6ddf19c9b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:88:b3:cf:e1:67:9a:3d:5f:66:6a:b6:6d:
d3:0b:3a:73:bc:ec:3b:14:07:ad:dc:30:9b:81:24:
28:9f:0f:6d:83:e6:f7:05:2c:26:c7:e4:81:ad:3e:
95:31:f5:dd:eb:9d:7c:94:67:fe:66:13:fd:e2:51:
ed:a9:61:62:d2:d1:ea:b0:4e:b5:a7:28:d5:ed:42:
8f:33:ec:85:0d:5c:4b:d4:39:26:91:f2:ac:a8:cd:
d0:42:1c:8f:dc:1f:55:11:12:bd:90:78:6a:72:b3:
df:97:c3:bb:5b:09:60:15:9a:92:7d:00:60:fd:43:
9a:40:02:4d:04:f6:34:ca:00:13:52:3d:63:f0:b8:
0c:89:11:ef:24:ab:2c:f5:cb:d2:42:77:ee:f8:27:
01:4e:de:e7:f5:17:10:b2:c1:f5:ec:6d:3d:3c:65:
c7:b8:c4:42:8b:fb:ba:fe:d6:90:24:65:61:70:91:
dd:94:c8:cf:53:13:e9:56:ac:c7:45:61:47:9c:74:
76:53:9d:d9:50:57:c5:dc:11:3d:0f:18:8c:ac:17:
b1:13:6b:97:03:08:a1:0c:c6:fd:e3:db:13:6b:37:
45:25:78:8b:8b:65:3f:db:a3:52:a7:81:e5:41:46:
6e:79:01:ad:e8:23:fa:cb:92:ef:15:ea:52:4e:51:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:BF:32:05:97:95:A7:FE:1D:3F:9B:2A:AC:F6:DD:F1:9C:9B:03
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:be:eb:ea:00:4b:17:c9:01:17:e4:65:90:6b:0f:57:4d:
f4:17:bc:74:f9:dc:58:45:77:2d:5d:3f:d1:e6:d4:8f:87:82:
c3:0e:da:39:d6:d7:a1:a0:02:06:8a:d7:c4:e3:2d:36:69:aa:
b6:64:02:29:63:42:78:4d:b5:c3:73:c2:b4:fe:f6:85:ef:e3:
66:3d:c2:b3:f0:89:49:53:cf:0d:f0:62:b1:fe:04:f1:b5:8e:
56:c6:e0:fd:b6:28:e8:41:f9:fb:c9:53:f5:df:65:17:60:58:
4a:80:ac:ee:67:a6:ce:b8:7e:e6:1b:bd:5f:6f:4d:be:94:2e:
2c:10:d1:00:9d:b9:33:9e:a6:11:5e:b8:a3:df:bc:e3:00:47:
c7:17:92:54:e2:06:bd:4b:53:9f:3a:11:ad:9b:36:5d:c9:77:
3f:cc:64:05:73:ad:43:88:f1:5e:fb:31:ed:27:5d:c0:d2:a6:
1a:2b:01:fa:8e:28:c6:e1:55:c8:3d:4c:d3:f7:b1:2a:b8:52:
85:90:da:21:30:08:03:3b:5c:30:f6:83:0e:40:cb:23:17:73:
bb:6e:93:71:02:9e:3d:c8:c3:f1:b5:16:11:70:6c:03:fb:d0:
6a:56:73:0f:0c:ea:06:3a:6b:02:fc:1f:93:90:99:3c:8e:d1:
c6:21:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:00 2026 by rpki-client