Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
File: FVDRC3zIDkmRflpRsdo-clnUhbE.mft (raw, json)
Hash identifier: nfMCTh+N1w5Pgi6RYkGuo7HKrSQEw7Rb7rDLFmURvKw=
Subject key identifier: 1A:22:B8:4A:88:E2:8F:D9:B3:81:F2:AA:39:0A:2C:F7:0E:DE:8B:53
Authority key identifier: 15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
Certificate issuer: /CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Certificate serial: 019DA4F8B1AD8765C2D7E376E2FFEF36F28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
Manifest number: 38
Signing time: Sun 19 Apr 2026 09:00:54 +0000
Manifest this update: Sun 19 Apr 2026 09:00:54 +0000
Manifest next update: Mon 20 Apr 2026 09:00:54 +0000
Files and hashes: 1: FVDRC3zIDkmRflpRsdo-clnUhbE.crl (hash: 8XbHVdS7QojYhNsImvpkSLq0JlZJT7wMfcB2bHSiqqk=)
2: Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa (hash: MRU5e7pRB4AUwsc2cjanJCKk9BsA/Ymmye5RL8bOTC8=)
3: a6x4sdR9rghHdVLAMn80-X_buNk.asa (hash: i54M6h3tMK35/FAaoQ8pWQt9iY2Sll+lX20PEeCdHeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:b1:ad:87:65:c2:d7:e3:76:e2:ff:ef:36:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Validity
Not Before: Apr 19 09:00:54 2026 GMT
Not After : Apr 20 09:00:54 2026 GMT
Subject: CN=1a22b84a88e28fd9b381f2aa390a2cf70ede8b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:31:5c:dc:ab:fa:83:d8:15:45:69:c2:24:
79:fe:4c:90:3f:a0:07:ef:4c:c7:26:f3:f5:73:97:
69:1a:f7:47:1a:1c:30:1d:ab:06:17:e6:c4:8f:9a:
fe:51:09:17:37:01:b4:93:67:18:1c:d8:e5:bc:88:
d7:9f:49:bc:84:e1:c6:6c:94:98:43:b1:75:01:98:
d8:fd:9d:36:f5:f1:95:d0:ba:4e:bc:eb:70:35:c8:
2a:1e:68:9a:d1:b3:39:6b:2d:76:57:07:4d:91:a4:
c0:a6:0e:f2:38:1d:2d:90:81:4a:a2:8e:ac:65:4d:
2f:e1:1d:4c:6c:61:f3:6f:83:89:dd:15:d5:9e:1a:
54:46:ad:f6:69:d6:9d:4a:22:6c:03:cf:33:90:b7:
3d:d6:85:e7:4f:e0:f6:4e:a9:78:b2:d2:bb:a6:c3:
84:76:a8:9e:8e:56:16:92:dd:c0:d6:ae:f8:de:cc:
e6:bb:ce:54:a1:c5:e5:36:20:d4:b0:6e:6d:86:13:
1a:e8:d7:33:5a:61:ba:c3:27:5a:d7:a0:9d:fc:83:
af:a7:29:fb:a2:c7:bf:3f:ae:9e:87:27:61:e8:89:
f3:93:0b:09:d5:2b:0a:12:e2:e0:30:40:c0:15:c5:
2b:c4:b8:bf:72:3f:8c:94:50:ee:66:a8:c9:17:41:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:B8:4A:88:E2:8F:D9:B3:81:F2:AA:39:0A:2C:F7:0E:DE:8B:53
X509v3 Authority Key Identifier:
keyid:15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8d:1e:f5:09:2a:44:45:e3:84:6a:59:4a:2f:39:2b:db:d3:
71:34:c6:a8:d2:78:ce:64:c4:9d:e2:8b:09:c1:89:b2:af:9f:
e8:10:ed:24:3e:15:9f:b5:11:04:be:72:69:bd:8b:9b:f0:64:
7e:f3:25:80:43:dd:c1:52:3c:dd:c2:df:aa:dc:a6:ac:d7:1a:
cd:77:12:06:9b:c0:b5:d1:09:0c:51:80:04:29:61:f8:47:67:
af:2d:62:7f:94:f3:37:c7:cb:a7:94:23:48:5a:ad:2a:0d:f7:
18:29:69:0d:71:ad:e2:66:ee:86:2d:18:35:d1:f3:05:01:6d:
8b:ed:45:1b:43:b5:3e:9c:9a:ee:b2:ec:65:41:98:6a:f4:1b:
7e:f8:d0:b3:0b:7c:58:65:8d:07:af:85:59:c9:3a:38:1f:b5:
f8:15:41:99:ab:14:e1:16:bc:8f:85:77:26:fa:3a:2b:34:4f:
92:90:fb:fc:b8:0e:a5:df:05:18:28:48:7b:1e:92:ae:9c:05:
17:d9:c0:0e:0b:92:c6:d9:f2:8d:1e:3e:41:02:7c:21:31:69:
88:20:03:dd:72:e2:df:27:cd:54:0c:66:2d:3d:2b:13:2f:ff:
a5:7d:db:ca:bd:b7:43:94:9d:2c:bd:eb:71:cf:b2:f9:b6:00:
88:dc:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:10:41 2026 by rpki-client