Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: SV8RfnTOs4+JoQImwag97paloRca1L471G9o3CUMvuA=
Subject key identifier: 95:BC:F1:61:CC:91:C5:03:DA:11:A1:D1:B4:83:88:7D:CE:26:EC:76
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019D992B54D33B0CD968484845D7C9CED816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 15F6
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: KzEVfil0Go9HfBltVLagOIgi9Ltd46mQW+H8FBkzl0E=)
2: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (hash: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:54:d3:3b:0c:d9:68:48:48:45:d7:c9:ce:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=95bcf161cc91c503da11a1d1b483887dce26ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:eb:76:c2:ca:50:4d:62:2a:fc:e6:44:b8:
32:d3:53:c9:c0:33:18:8b:e8:91:21:43:d2:8f:44:
f5:d2:b5:e8:c9:1f:02:ba:27:72:6a:9c:35:51:96:
ce:f8:1b:20:dd:f2:b6:04:6e:dc:51:ed:1d:2f:34:
16:a1:5e:32:04:1f:f8:a2:3e:d2:8e:70:c5:dc:61:
a2:f6:85:e6:16:c4:35:54:bc:b6:22:2d:cc:f9:60:
ab:46:a7:55:7a:92:e8:60:53:f9:30:de:ea:35:e6:
08:c9:c4:e6:eb:7d:2e:d4:a0:e0:2e:ac:5f:e8:f8:
c7:83:56:ff:16:52:f3:a1:84:ca:62:55:d5:41:8c:
72:0f:a5:33:50:47:d4:89:81:ab:31:d5:53:77:80:
52:d8:6e:d4:54:70:c1:23:c0:d6:fa:86:84:ce:36:
b5:35:b8:9a:65:0b:00:7b:2c:e2:9c:0a:f7:e3:9b:
7c:28:71:3f:25:2f:9c:4d:50:b1:93:f3:8d:4d:c6:
a2:c4:6e:d2:11:3d:b5:64:dd:f9:39:2c:5f:96:14:
8d:37:69:6d:2d:b1:66:93:8c:e3:69:95:d5:68:99:
d4:06:90:e8:80:b7:e9:e7:62:30:89:40:48:a8:68:
78:f1:b4:a7:a5:1a:5f:61:b1:fb:93:b4:8f:bb:de:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:F1:61:CC:91:C5:03:DA:11:A1:D1:B4:83:88:7D:CE:26:EC:76
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:ab:f8:69:f7:e7:eb:62:ba:75:47:21:53:0a:9c:88:97:
4e:91:c2:e2:d6:7a:8d:c7:9c:06:ab:a1:83:34:38:cf:8e:2f:
d3:74:1d:5e:d1:83:1a:ad:ce:06:18:07:2d:6c:dc:ad:12:41:
e0:ab:5f:fd:dc:5e:6c:1a:67:5a:d2:69:cc:ca:e8:a9:79:38:
80:00:9d:30:75:be:41:a7:66:da:61:42:ba:b2:31:6e:39:79:
f5:74:9f:4a:bb:bd:0c:64:a9:ad:f4:b2:68:6c:06:a8:eb:32:
cd:29:88:28:03:82:b5:3e:f8:7e:fd:1d:5d:f4:a0:35:1d:7d:
d9:35:69:cc:20:0d:92:0c:4f:56:c4:78:69:fc:8b:02:ad:dd:
2f:18:cf:1f:e2:d6:24:ba:0d:48:20:d2:18:32:5d:78:6a:32:
b2:4f:4a:9f:69:8b:42:99:d9:8c:e4:9c:b7:75:e3:0b:44:83:
a5:23:f4:2c:21:78:27:c3:4c:f7:47:32:0f:5e:16:dd:01:42:
14:96:dd:33:2e:a1:45:28:a9:4d:6b:82:8b:c7:1c:14:fe:b2:
37:99:34:8c:94:26:49:a6:62:6d:4d:1d:12:24:32:4f:14:25:
f7:a1:ca:6a:9f:e5:fa:57:a2:1c:ff:74:18:23:a2:86:d5:82:
9e:74:17:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1TTOwzZaEhIRdfJztgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm
MWJkZjkwHhcNMjYwNDE3MDIwMDQ2WhcNMjYwNDE4MDIwMDQ2WjAzMTEwLwYDVQQD
Eyg5NWJjZjE2MWNjOTFjNTAzZGExMWExZDFiNDgzODg3ZGNlMjZlYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsDrdsLKUE1iKvzmRLgy01PJwDMY
i+iRIUPSj0T10rXoyR8Cuidyapw1UZbO+Bsg3fK2BG7cUe0dLzQWoV4yBB/4oj7S
jnDF3GGi9oXmFsQ1VLy2Ii3M+WCrRqdVepLoYFP5MN7qNeYIycTm630u1KDgLqxf
6PjHg1b/FlLzoYTKYlXVQYxyD6UzUEfUiYGrMdVTd4BS2G7UVHDBI8DW+oaEzja1
NbiaZQsAeyzinAr345t8KHE/JS+cTVCxk/ONTcaixG7SET21ZN35OSxflhSNN2lt
LbFmk4zjaZXVaJnUBpDogLfp52IwiUBIqGh48bSnpRpfYbH7k7SPu97HvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW88WHMkcUD2hGh0bSDiH3OJux2MB8GA1UdIwQY
MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt
ODlhYThkMmU4MDA0LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0
LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNOr+Gn3
5+tiunVHIVMKnIiXTpHC4tZ6jcecBquhgzQ4z44v03QdXtGDGq3OBhgHLWzcrRJB
4Ktf/dxebBpnWtJpzMroqXk4gACdMHW+Qadm2mFCurIxbjl59XSfSru9DGSprfSy
aGwGqOsyzSmIKAOCtT74fv0dXfSgNR192TVpzCANkgxPVsR4afyLAq3dLxjPH+LW
JLoNSCDSGDJdeGoysk9Kn2mLQpnZjOSct3XjC0SDpSP0LCF4J8NM90cyD14W3QFC
FJbdMy6hRSipTWuCi8ccFP6yN5k0jJQmSaZibU0dEiQyTxQl96HKap/l+leiHP90
GCOihtWCnnQXOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:20 2026 by rpki-client