Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
File: FK__4H7yluyM0lK8sgiLG6qPur0.mft (raw, json)
Hash identifier: aqbNmZhxltXbHKLfNXOORP4zERBHJ0zELE34O3Ipyqg=
Subject key identifier: 1F:3E:47:25:C8:0F:A4:B9:74:2B:F9:70:76:4E:BD:26:02:4C:AA:01
Authority key identifier: 14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
Certificate issuer: /CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Certificate serial: 019D9C2C44B359BB8562E3936F3E713301EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
Manifest number: 3B
Signing time: Fri 17 Apr 2026 16:00:39 +0000
Manifest this update: Fri 17 Apr 2026 16:00:39 +0000
Manifest next update: Sat 18 Apr 2026 16:00:39 +0000
Files and hashes: 1: FK__4H7yluyM0lK8sgiLG6qPur0.crl (hash: f/es+OcPfXIRhGq2w+R3b5k2Xw7OWKeemlYFDdgpGF8=)
2: QpgRqR4ONpEAldJV9RdLVieuB30.roa (hash: O7WrNb/BN4tdedokbnfczoEsP+osybSj8/C29gRLRWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:44:b3:59:bb:85:62:e3:93:6f:3e:71:33:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Validity
Not Before: Apr 17 16:00:39 2026 GMT
Not After : Apr 18 16:00:39 2026 GMT
Subject: CN=1f3e4725c80fa4b9742bf970764ebd26024caa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:d9:fe:bf:cd:b7:99:2e:3e:03:f1:d1:90:
18:e5:9e:44:dc:ca:04:6d:6e:0d:82:2a:ab:23:a1:
e3:46:69:30:7b:a6:7a:f2:cd:71:6d:a4:b4:75:52:
e9:00:bb:19:51:af:68:a1:19:07:d2:9f:ad:79:90:
07:40:03:52:1d:e2:eb:52:8f:21:61:53:c1:ab:53:
2e:47:5f:e3:29:bf:6c:1e:ab:5a:ba:3f:f0:b1:c4:
7e:07:23:83:d4:1f:16:f1:ce:30:f8:c9:70:4a:a8:
4a:a1:3e:e9:1c:68:5b:b5:e7:14:3c:67:3e:2f:31:
df:03:1f:9f:d5:9e:ff:24:20:bf:81:49:89:2b:fe:
52:fb:ad:d3:fc:42:68:c6:08:c7:de:0e:23:8d:53:
53:a4:ee:71:3f:6c:e3:5e:40:fa:fa:87:45:71:59:
9b:c5:b7:e9:cc:11:16:d7:89:d9:15:7d:7a:a4:83:
bb:fc:2e:50:7d:47:33:6f:90:83:d9:76:f9:e2:14:
7e:c5:8b:5c:00:ec:5c:80:37:00:93:df:b6:cf:11:
81:0a:7a:a5:31:9c:76:8a:8e:80:d4:7f:43:90:99:
d3:ad:db:c6:a0:fa:cd:92:8b:c0:2f:54:88:89:23:
e0:07:b6:aa:fa:35:2d:4a:b2:b6:b5:7a:ba:8b:3d:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:47:25:C8:0F:A4:B9:74:2B:F9:70:76:4E:BD:26:02:4C:AA:01
X509v3 Authority Key Identifier:
keyid:14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:2a:26:d0:88:08:bc:0a:08:4d:1e:c4:f1:eb:b2:da:06:
d3:56:9c:25:de:2c:9c:f2:f4:d5:1c:97:ac:1d:e9:f3:69:a1:
7f:f1:45:4e:51:03:5f:91:1f:37:26:ee:21:95:66:a0:7b:3b:
23:93:96:fa:81:62:19:a8:3f:13:46:7f:b8:c7:34:11:f8:0a:
3e:fd:58:b0:53:2e:e2:b3:fc:bd:5c:e0:cd:ba:fc:7b:70:dd:
c0:c3:2d:4a:4d:90:e5:c6:01:10:d4:24:9b:3f:9c:ef:a0:93:
35:c3:56:c2:78:8d:9a:59:0d:c6:d0:c7:41:f5:9d:dc:46:df:
92:c2:3c:97:75:66:a1:3d:d5:a6:ce:52:d9:78:75:c5:72:6f:
a9:94:a4:e9:00:8d:d1:0b:f9:69:64:63:95:9b:71:2b:6e:1f:
0d:fd:0e:fa:21:9a:f8:32:2d:bd:77:d3:b3:d1:12:63:52:2b:
ae:68:5d:e7:60:26:fc:b4:dc:86:a5:2e:42:6c:65:09:2b:74:
a5:a5:7a:86:3e:0f:68:12:61:1d:d0:cd:c7:bd:d7:38:77:d0:
a7:5b:f2:65:76:e1:9b:8b:75:f6:7a:71:1b:7b:00:be:d8:b6:
1a:09:bc:6e:85:10:8e:59:09:c2:e9:8d:7d:e5:c5:71:26:96:
6c:3b:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:17 2026 by rpki-client