Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: axx4BGhwBPmlGFAtEOZJY7oNCjq8Z3FO3pZel43msp8=
Subject key identifier: A3:3E:F3:58:2F:5C:92:84:B6:C2:E6:40:B6:86:6F:F1:10:8F:F6:F9
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019CAE6C24FD937F4ABA504EDDADC053081B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0FD5
Signing time: Mon 02 Mar 2026 12:00:48 +0000
Manifest this update: Mon 02 Mar 2026 12:00:48 +0000
Manifest next update: Tue 03 Mar 2026 12:00:48 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: dGXbW7geToWOTjYoaA9sdPCrU8Qucd3llMlUKKTQmj0=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:24:fd:93:7f:4a:ba:50:4e:dd:ad:c0:53:08:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Mar 2 12:00:48 2026 GMT
Not After : Mar 3 12:00:48 2026 GMT
Subject: CN=a33ef3582f5c9284b6c2e640b6866ff1108ff6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:19:fb:75:c5:48:e2:37:df:57:f6:84:be:
f1:07:82:2e:76:33:86:b5:2e:b3:56:29:17:3d:0c:
38:4f:a2:8b:29:c0:a7:0b:5a:59:36:7c:08:b0:44:
80:3e:db:c1:7c:6d:6e:ec:0c:aa:80:7a:fb:a3:4a:
5a:71:02:aa:78:0d:fd:5f:b7:bb:c8:91:58:27:c4:
19:f5:01:89:dd:8f:db:39:0c:24:8f:68:67:e9:24:
0f:da:1c:3c:74:91:91:c3:83:aa:e2:17:99:a9:7c:
b9:5c:c7:01:ab:b5:f0:a0:6f:d5:38:58:a1:0b:9d:
bd:15:fd:01:31:92:ff:4e:c6:f3:af:62:dd:88:ff:
1e:38:4a:31:46:14:7f:84:39:52:06:10:36:e2:27:
77:fc:ae:f5:79:f7:47:80:18:78:3f:79:ab:fa:2c:
36:60:bd:bf:ce:c7:39:82:af:24:c0:27:89:ef:eb:
a3:b6:1f:17:8b:f2:36:4f:fc:ea:56:33:20:76:3a:
86:66:0b:73:77:59:41:9f:63:33:d1:2c:63:b3:ab:
55:99:b4:b9:8b:28:68:fc:f5:9c:52:17:4b:de:01:
e1:d5:ef:37:20:6f:5d:39:44:d7:ef:3e:e6:c3:c1:
33:11:7d:6d:f8:7e:78:05:e8:90:8e:1a:31:24:84:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:F3:58:2F:5C:92:84:B6:C2:E6:40:B6:86:6F:F1:10:8F:F6:F9
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:75:1e:9f:44:d7:14:e1:f3:1f:95:84:a7:7f:3d:de:10:2a:
52:d2:75:41:f3:5a:54:42:c9:65:07:59:4e:cb:52:0e:c6:4b:
85:62:d3:09:90:22:76:be:7e:5f:81:c7:1a:9b:62:f3:8c:5c:
78:b2:cf:b2:ac:4a:d2:40:50:03:5a:e8:3c:9f:4b:a2:eb:e9:
fa:d3:dc:39:13:54:c6:63:88:9e:d6:6f:cc:b5:a1:69:fa:de:
3d:6a:a3:a2:f3:5b:f4:f8:84:5b:43:dc:8d:24:80:22:a5:98:
dc:8d:fe:35:4f:15:37:f2:2d:0d:c2:40:57:ba:d9:d5:fe:ec:
6b:8c:9a:ef:72:81:23:4b:2d:e8:a1:c9:36:62:16:5d:c5:cd:
af:d6:c9:f4:58:c6:2c:74:93:25:eb:c3:bb:17:08:2b:27:60:
66:ee:cc:27:7c:0f:98:55:78:12:08:4a:cc:d8:ff:0e:c6:98:
61:00:e6:14:63:a9:b5:18:be:fd:a7:27:c3:1d:9c:e2:ac:a6:
a0:34:55:0f:d1:dc:ae:15:68:42:b0:76:08:45:8b:d3:02:0e:
17:38:89:9f:31:29:fa:42:87:8e:16:d7:0a:5b:1f:f5:92:37:
5c:50:50:b7:58:e0:aa:04:3c:4f:7c:14:96:47:63:aa:08:61:
05:79:7a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubCT9k39KulBO3a3AUwgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjYwMzAyMTIwMDQ4WhcNMjYwMzAzMTIwMDQ4WjAzMTEwLwYDVQQD
EyhhMzNlZjM1ODJmNWM5Mjg0YjZjMmU2NDBiNjg2NmZmMTEwOGZmNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y0Z+3XFSOI331f2hL7xB4IudjOG
tS6zVikXPQw4T6KLKcCnC1pZNnwIsESAPtvBfG1u7AyqgHr7o0pacQKqeA39X7e7
yJFYJ8QZ9QGJ3Y/bOQwkj2hn6SQP2hw8dJGRw4Oq4heZqXy5XMcBq7XwoG/VOFih
C529Ff0BMZL/Tsbzr2LdiP8eOEoxRhR/hDlSBhA24id3/K71efdHgBh4P3mr+iw2
YL2/zsc5gq8kwCeJ7+ujth8Xi/I2T/zqVjMgdjqGZgtzd1lBn2Mz0Sxjs6tVmbS5
iyho/PWcUhdL3gHh1e83IG9dOUTX7z7mw8EzEX1t+H54BeiQjhoxJISTZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM+81gvXJKEtsLmQLaGb/EQj/b5MB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnUen0TX
FOHzH5WEp3893hAqUtJ1QfNaVELJZQdZTstSDsZLhWLTCZAidr5+X4HHGpti84xc
eLLPsqxK0kBQA1roPJ9Louvp+tPcORNUxmOIntZvzLWhafrePWqjovNb9PiEW0Pc
jSSAIqWY3I3+NU8VN/ItDcJAV7rZ1f7sa4ya73KBI0st6KHJNmIWXcXNr9bJ9FjG
LHSTJevDuxcIKydgZu7MJ3wPmFV4EghKzNj/DsaYYQDmFGOptRi+/acnwx2c4qym
oDRVD9HcrhVoQrB2CEWL0wIOFziJnzEp+kKHjhbXClsf9ZI3XFBQt1jgqgQ8T3wU
lkdjqghhBXl6Mw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:46 2026 by rpki-client