Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: Lr3fOoSBht62IW5tO1cguAznBC4OhI6PCYJ6CZpUzls=
Subject key identifier: 4F:17:28:39:F9:AC:7E:C2:00:0C:33:6E:2D:B5:7D:29:4C:00:B2:37
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019DA48B5DADB31D6E3D20EF261714D3DA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 03CE
Signing time: Sun 19 Apr 2026 07:01:29 +0000
Manifest this update: Sun 19 Apr 2026 07:01:29 +0000
Manifest next update: Mon 20 Apr 2026 07:01:29 +0000
Files and hashes: 1: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (hash: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: qp6vTgDvqr8hE6HPKFztVnoXa9p3z2WnWOdUYV/DiW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:5d:ad:b3:1d:6e:3d:20:ef:26:17:14:d3:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Apr 19 07:01:29 2026 GMT
Not After : Apr 20 07:01:29 2026 GMT
Subject: CN=4f172839f9ac7ec2000c336e2db57d294c00b237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:47:60:1b:ae:36:30:98:0e:0f:e7:aa:0f:
37:d4:49:91:cc:31:7f:67:18:3d:f8:77:1e:40:39:
8f:19:96:a9:3d:6d:91:05:86:0f:10:51:b6:f4:a9:
3c:32:13:a8:11:fd:a6:43:42:7f:dd:05:93:e6:29:
05:98:bd:4f:e5:45:67:8c:7b:97:3f:17:ef:f9:09:
70:91:9f:18:69:69:ec:1b:75:bb:4b:92:e2:19:4a:
19:61:c1:21:b0:40:ad:cc:3f:88:10:c4:81:a4:20:
25:52:b9:19:08:19:4e:6f:a4:08:03:c9:3f:9c:2d:
d8:9c:aa:50:51:79:08:32:2c:16:e7:a4:99:57:6e:
cd:c5:dc:72:9a:b0:a7:84:ef:34:60:19:31:7b:49:
5c:23:74:ff:8c:ed:ab:61:66:52:b2:5e:7e:f5:74:
a6:48:3f:68:1a:86:a0:e2:43:f1:20:4d:28:ab:9e:
27:3c:b9:00:71:b6:3c:55:5f:3e:e6:7c:77:48:c6:
74:b4:31:47:2f:c1:1c:90:f4:53:22:65:d5:94:28:
2c:09:96:23:72:a8:05:12:3a:37:c8:38:63:7f:f3:
77:6f:63:77:02:1c:91:95:e9:35:74:62:93:d4:77:
13:9f:e8:b6:e2:9c:37:58:ae:53:7a:d6:17:bd:8f:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:28:39:F9:AC:7E:C2:00:0C:33:6E:2D:B5:7D:29:4C:00:B2:37
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:db:85:b3:b6:29:62:9c:5e:42:02:a3:d2:37:a9:eb:46:
7a:60:f4:87:07:70:85:0b:98:fd:8a:fa:b7:d7:8e:e5:ed:b1:
d6:8e:aa:84:4f:b2:cc:ee:3a:46:7b:ce:d5:8e:9d:b2:84:53:
5c:f8:66:52:32:c0:9b:5e:f8:cd:10:2d:34:83:dd:92:f2:df:
2e:31:6e:ff:c4:a8:d5:e6:b9:83:39:70:84:ea:33:e7:f1:3b:
32:d9:0e:a2:8f:fe:69:c3:7b:f7:50:cf:ac:41:8b:97:64:38:
ed:d9:e1:41:19:95:1c:19:91:a5:c8:7b:a0:da:1f:84:ed:02:
3d:18:64:7d:88:e5:49:99:2b:ca:f8:ee:95:bd:91:ed:df:61:
b0:70:c5:30:c0:62:a4:b8:69:47:70:c2:02:f8:2f:76:eb:36:
95:0c:c9:11:f6:a9:81:51:b0:a7:96:4f:e0:4d:e1:ea:5b:03:
55:09:0f:4c:09:6d:48:50:ad:06:fa:c8:e4:6f:c5:da:63:20:
1f:9b:e9:a7:25:08:2e:ac:0a:6a:a7:8c:fc:f4:82:99:52:29:
d2:86:c7:16:d2:ae:bf:9f:db:63:5d:f0:5c:42:c0:4c:fc:41:
90:f6:71:36:90:93:8f:0e:66:13:fb:0e:3a:d3:56:88:df:bc:
51:49:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:36 2026 by rpki-client