Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: iso1AW5SYsu9edvU5lAPFxPNPmbsKfX9OnK5juWf+EM=
Subject key identifier: 37:2A:C2:E5:40:88:D0:23:1F:04:2E:10:35:35:36:89:C5:21:99:CA
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019D9818F41D3A2CBB04A96D8C5C54C89479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 104E
Signing time: Thu 16 Apr 2026 21:01:05 +0000
Manifest this update: Thu 16 Apr 2026 21:01:05 +0000
Manifest next update: Fri 17 Apr 2026 21:01:05 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: neSZ69VdfUSTNyc8BDcLcCSOmJO9vxpeN4WdZg8ZV4A=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f4:1d:3a:2c:bb:04:a9:6d:8c:5c:54:c8:94:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Apr 16 21:01:05 2026 GMT
Not After : Apr 17 21:01:05 2026 GMT
Subject: CN=372ac2e54088d0231f042e1035353689c52199ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:e1:2b:c7:75:c0:cb:b3:1e:c4:03:42:2d:
28:e8:1c:d0:a2:2b:d7:9d:0e:9d:3e:01:04:1a:18:
a6:a8:46:2b:8c:b2:92:15:54:93:5c:f0:c8:b0:b1:
bf:20:fa:8c:53:89:40:88:1f:ce:1e:dd:d3:86:4d:
dd:f9:46:62:f2:07:82:4b:f9:dc:78:f3:31:50:f0:
58:da:6a:9f:17:2f:e4:4d:a6:bc:dd:a3:56:84:b4:
e9:0b:32:8a:54:2b:8b:4d:31:f1:96:11:81:40:b9:
aa:d9:3e:e4:72:66:b3:99:11:c5:8c:d5:37:20:29:
43:ae:32:3e:d4:74:af:34:cc:a3:bc:f2:39:1a:fa:
c6:a8:01:09:4a:61:e9:72:9e:54:ce:bc:01:b2:db:
f0:e7:e1:18:95:57:58:5b:8e:92:76:5f:85:ff:0b:
c5:c4:13:7f:2e:53:ba:48:43:d8:33:31:cb:7e:2b:
7b:bd:c5:61:51:0a:6a:10:b1:6d:98:eb:d6:41:e1:
05:99:23:3e:62:77:63:58:7d:e3:df:2f:18:33:62:
63:8b:36:bc:ad:68:0d:d5:a8:97:99:cf:54:f3:ba:
69:2b:19:ce:58:80:ad:07:f4:84:5a:f8:5d:15:a4:
4a:d6:10:20:33:5a:95:09:98:ab:bd:42:8c:c8:1b:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:C2:E5:40:88:D0:23:1F:04:2E:10:35:35:36:89:C5:21:99:CA
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:5f:61:ce:34:ab:1e:8a:82:d5:3e:44:bb:6e:c7:31:5b:
7c:70:0e:6c:f7:cd:16:95:e9:77:77:57:7a:61:cc:2a:24:9a:
7d:40:c0:66:bc:51:e7:f9:0e:22:d1:65:d2:01:6c:73:47:62:
9c:50:3e:ac:73:74:1f:c5:9b:f8:82:86:00:e9:77:d7:f2:c2:
0a:74:7f:85:a8:40:80:4c:86:b7:19:06:b2:c1:a3:a5:d1:b5:
e6:da:52:e9:2c:fb:fa:22:f4:a2:a0:5c:d7:35:39:cf:ff:7d:
c0:0a:39:5e:d0:f5:37:63:39:0f:c9:8f:07:2f:4f:86:7b:34:
3d:84:d2:48:a1:3c:6a:75:a0:a1:72:6e:41:fe:0c:b1:11:e5:
f8:c8:cd:83:7a:92:ea:4e:cb:d2:8c:57:16:6c:3e:8c:7c:82:
74:bf:4e:ce:b6:86:0d:65:b0:be:0e:f3:c5:60:fe:d3:68:85:
b5:97:94:29:81:61:ca:1c:0f:75:3e:20:29:89:5b:dd:2a:99:
15:c1:22:29:e4:33:6b:6a:d4:5b:fe:c0:bf:43:bd:bf:e6:bb:
f2:65:a1:3b:fe:f2:49:c5:da:91:f7:48:1f:cf:50:31:12:01:
06:18:22:6b:99:69:ca:2a:06:2f:f9:fe:2f:38:e4:a7:4e:57:
a5:6c:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:26 2026 by rpki-client