Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: g87znd12dkQm/L/mUrsl2T5j2G49egLoCuXUnr9CfgI=
Subject key identifier: B1:3C:2B:8D:51:53:7E:7F:11:88:1C:67:20:B5:76:91:65:DB:01:51
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019D37C0C13518BE489C916E8514E0620CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0A68
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: Z5IP+XtrG81m+fb10H4Ms0+qgLqbqzDoeBwYE+ytTjo=)
2: wzKWY6Wt2mb7gzv6ILxVI9gqBVI.roa (hash: Ih5+NRozSgaecg0vA3twm5kYdnmkAGbTAu9H3wik/xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c1:35:18:be:48:9c:91:6e:85:14:e0:62:0c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=b13c2b8d51537e7f11881c6720b5769165db0151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:2f:e2:75:92:07:11:8d:c7:8c:57:c8:9d:
e7:73:2f:29:3e:2e:b1:53:5a:a5:eb:81:4c:c8:01:
4c:f0:ed:39:8c:a6:39:16:ec:d5:f4:1b:c0:f0:55:
c0:2d:1c:9a:b4:10:47:ba:f3:76:aa:7c:ac:08:85:
71:86:0d:de:f1:5a:a6:b2:dd:13:00:bb:e7:43:25:
f8:f3:66:aa:42:6c:7e:e6:6a:e6:7f:56:5f:c0:09:
71:c5:26:02:04:6b:6a:67:f9:1b:33:c3:b3:fe:a5:
e0:12:66:e6:38:e4:a4:4b:a3:07:fe:85:4a:cc:44:
bf:ea:37:98:5e:4a:05:22:43:85:17:03:f4:07:d3:
34:5a:ca:59:5f:41:00:b2:a4:21:61:4e:7d:1a:04:
d0:2a:75:da:5b:d2:6b:fb:8c:09:27:3c:3a:78:09:
aa:ca:cb:7b:14:a0:ec:ee:63:db:a0:19:6e:f8:6f:
db:bd:1b:c9:1d:ff:43:68:b6:51:de:c0:02:99:48:
bc:85:93:55:a8:57:6a:05:09:64:35:55:60:d5:0a:
5c:ef:2f:b3:46:f4:c7:91:1b:03:ac:04:42:6c:97:
d4:3b:12:1f:d5:ac:17:b8:99:0f:fb:66:7d:5f:c5:
03:90:59:ef:7e:69:de:d2:2e:36:e2:3f:36:71:08:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3C:2B:8D:51:53:7E:7F:11:88:1C:67:20:B5:76:91:65:DB:01:51
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:33:a6:7f:1b:56:18:70:6a:5b:46:0f:5e:0a:04:8c:d0:
d5:f4:d3:2f:f1:00:87:27:5a:c6:cb:d1:b9:f5:a7:a0:a5:fd:
ac:87:83:52:b5:57:bc:49:bb:29:5f:e5:20:44:cf:71:c5:ce:
39:c5:7e:02:82:d2:39:aa:36:0d:1c:7a:1c:93:72:99:5a:8f:
ee:4e:a7:11:79:3b:fb:2b:43:36:a4:f4:90:a9:9b:c5:a6:75:
9f:6d:a8:37:6c:93:6b:76:a3:07:9f:bf:ba:76:2a:bf:51:f4:
94:23:24:86:a2:66:8d:60:dd:4a:01:b1:b9:87:e9:86:b1:eb:
b1:30:58:9c:ef:24:ed:7d:e7:99:35:02:63:99:24:eb:f6:60:
8e:f7:66:c5:97:96:68:2a:ed:95:39:91:12:16:c7:b5:03:86:
91:31:e5:87:de:f9:2f:93:93:a7:86:18:3b:70:b1:b2:7d:00:
50:d3:1a:9d:c2:94:5b:9f:92:41:f5:7d:09:f5:f5:de:54:eb:
29:b2:da:b3:0e:09:57:4d:00:c2:86:94:75:5d:ed:c3:15:61:
46:8d:ba:10:2d:97:05:a7:f8:45:1b:fc:ba:36:16:69:22:c6:
90:68:4b:31:2f:ae:04:f0:47:7a:ba:3c:8f:67:54:ee:1e:e9:
a2:e4:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:19 2026 by rpki-client