Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: VLPXTIjGZ4vMFlYbBCiGw4bztvR6DXJDwcWoDsw6400=
Subject key identifier: 0F:4F:16:C7:6B:94:4E:B4:25:2F:A8:3D:E4:68:58:59:89:92:88:55
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019D38D381E9197F343462021F8447B56ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 09AF
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: T1O7uD3/efOQy+dVsVDT+GDMi82w1jis/cTAqG07MQA=)
2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:e9:19:7f:34:34:62:02:1f:84:47:b5:6a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=0f4f16c76b944eb4252fa83de468585989928855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:bf:03:0d:83:9d:a1:74:cf:26:1a:b7:ee:
68:3d:68:fd:6f:49:08:4e:25:a2:50:e8:07:79:06:
01:61:6c:65:eb:94:52:d0:7c:c7:2e:36:23:b9:e0:
25:d9:49:9f:88:e4:1f:58:a0:3e:c2:c6:dc:e6:0a:
65:4a:e2:ec:4d:63:ce:9b:71:68:ac:99:82:e5:b0:
52:7c:a2:33:0c:1d:a8:72:61:ee:25:97:91:74:7c:
ec:3a:9d:d0:09:7d:07:50:b4:f6:d6:95:10:72:3c:
39:33:67:74:0f:79:9a:ab:70:a4:2c:78:a0:83:68:
98:0a:f8:4b:b6:a5:d6:df:8c:72:93:5c:50:ae:8b:
56:2d:ac:5b:79:a1:0a:e4:1b:47:75:66:92:2c:a3:
7e:82:24:88:03:00:fa:2a:44:4e:ba:1f:e4:d6:ed:
a4:c9:62:0c:2d:84:b2:ab:d5:0b:75:d0:2b:20:41:
47:fd:0e:a5:7f:a2:07:83:ee:af:a0:8f:d5:4e:ef:
f4:aa:fd:79:b1:72:a9:fe:22:a4:56:07:0e:6d:39:
fe:ca:ac:d5:0e:0b:3a:e6:2f:be:be:b6:de:da:6c:
cf:29:cb:8e:3a:40:4b:4d:f6:53:f6:06:4f:0d:be:
d7:86:b3:a7:b0:5c:24:b9:ac:0e:24:c6:e0:ab:2e:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:16:C7:6B:94:4E:B4:25:2F:A8:3D:E4:68:58:59:89:92:88:55
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e1:7d:ac:a9:f1:67:50:c5:ed:c9:83:da:d5:46:8e:b3:f8:
a2:6e:67:f6:9f:4f:9e:4f:34:96:97:4f:e3:e7:71:c7:55:48:
46:ff:66:ae:48:00:b4:a0:2b:43:73:6d:a1:3d:ca:59:dc:3f:
9d:e8:c9:42:f5:8e:a8:34:6d:9a:77:d7:0c:28:d9:f1:a3:fb:
5f:23:25:14:08:3b:37:4e:fc:26:53:93:60:04:3d:77:ee:43:
15:65:86:a9:8a:e0:4f:4e:c1:7f:89:9c:ed:71:81:5b:ba:97:
c9:c3:6b:d4:15:89:c5:95:de:64:5b:1b:c7:f2:43:36:98:96:
99:3f:29:61:b5:85:b7:c4:4d:3e:7b:06:ba:f7:fd:82:cd:6e:
65:fb:36:a8:2d:8b:60:3a:96:50:9b:ed:d8:e9:0b:75:80:21:
a3:9d:5e:18:4a:9e:fa:32:ff:76:16:1a:95:0a:e4:39:c5:6e:
99:ae:66:3e:96:3c:9f:96:f5:4c:16:e6:5c:4e:53:64:b1:a2:
a8:af:a7:e7:2c:18:ba:e7:24:26:cd:ab:c8:61:0b:d4:7c:ff:
6a:b6:be:64:2f:20:73:02:09:85:be:54:80:35:82:16:07:ee:
05:49:b3:71:83:ca:91:99:8b:92:ab:65:9b:09:90:35:d0:89:
0b:69:e3:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404HpGX80NGICH4RHtWrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDE1NTM5YzAxMTIxMDY2ZWFmZTk1YmUzNDAxZGZhNDQ0
MDc3ODUwHhcNMjYwMzI5MDkwMTE4WhcNMjYwMzMwMDkwMTE4WjAzMTEwLwYDVQQD
EygwZjRmMTZjNzZiOTQ0ZWI0MjUyZmE4M2RlNDY4NTg1OTg5OTI4ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0la/Aw2DnaF0zyYat+5oPWj9b0kI
TiWiUOgHeQYBYWxl65RS0HzHLjYjueAl2UmfiOQfWKA+wsbc5gplSuLsTWPOm3Fo
rJmC5bBSfKIzDB2ocmHuJZeRdHzsOp3QCX0HULT21pUQcjw5M2d0D3maq3CkLHig
g2iYCvhLtqXW34xyk1xQrotWLaxbeaEK5BtHdWaSLKN+giSIAwD6KkROuh/k1u2k
yWIMLYSyq9ULddArIEFH/Q6lf6IHg+6voI/VTu/0qv15sXKp/iKkVgcObTn+yqzV
Dgs65i++vrbe2mzPKcuOOkBLTfZT9gZPDb7XhrOnsFwkuawOJMbgqy4oRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9PFsdrlE60JS+oPeRoWFmJkohVMB8GA1UdIwQY
MBaAFBbRVTnAESEGbq/pW+NAHfpEQHeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUt
ZTg2ZmZmOTNmNDVkLzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUtZTg2ZmZmOTNmNDVk
LzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+F9rKnx
Z1DF7cmD2tVGjrP4om5n9p9Pnk80lpdP4+dxx1VIRv9mrkgAtKArQ3NtoT3KWdw/
nejJQvWOqDRtmnfXDCjZ8aP7XyMlFAg7N078JlOTYAQ9d+5DFWWGqYrgT07Bf4mc
7XGBW7qXycNr1BWJxZXeZFsbx/JDNpiWmT8pYbWFt8RNPnsGuvf9gs1uZfs2qC2L
YDqWUJvt2OkLdYAho51eGEqe+jL/dhYalQrkOcVuma5mPpY8n5b1TBbmXE5TZLGi
qK+n5ywYuuckJs2ryGEL1Hz/ara+ZC8gcwIJhb5UgDWCFgfuBUmzcYPKkZmLkqtl
mwmQNdCJC2njvg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:53 2026 by rpki-client