Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: BD27l6+WKNgKg51zNzQN8hbUUWCKpgDFwZwkCYHRnC4=
Subject key identifier: FA:9E:50:55:37:BC:2A:94:79:53:FB:68:77:32:EE:F0:8E:F7:BD:42
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 019D389C2490638A1136D5FA153DFF19D118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 15C0
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 1VJc7ft8TlNEuOzgNAve0dUg5ts.roa (hash: u9EUB0oer4BE1uLDqYmT9DNzu0VsYJr/VpAxRhL9w6U=)
2: Fdl_nZxVedWv2AmqCyx2ob7psNo.roa (hash: dF6kmKpoSTBGTgpAPWKjMIqwVCyeLlpSw1AmDj1OHIE=)
3: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: s3sReoiJtF7CWNV97nXwkguYx9MiTozrl41SFvPSGbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:24:90:63:8a:11:36:d5:fa:15:3d:ff:19:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=fa9e505537bc2a947953fb687732eef08ef7bd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:e6:ee:fa:6d:8f:e3:e9:3d:d4:bf:59:ec:
a2:12:9a:32:7c:71:0f:7d:14:51:98:d5:b6:1e:a3:
16:8e:6f:c7:5e:58:bc:da:4a:be:f6:11:6d:7d:03:
58:14:37:b7:6c:f3:dd:cf:2e:e8:04:bc:3b:78:c1:
98:1c:81:f5:db:07:44:a2:be:6f:d9:6b:d0:8e:6a:
b3:db:6d:c0:c0:7c:bf:81:11:2b:92:98:47:b4:1e:
30:fa:46:a9:f0:8a:cc:e4:be:4a:03:79:c4:aa:14:
e1:4e:ff:38:89:72:39:6e:d1:7c:6f:f8:d3:85:b8:
2d:1a:6f:76:50:02:34:ca:34:17:70:03:1d:65:ff:
09:03:cb:43:7e:9c:fb:e0:77:92:01:fa:3b:f2:a1:
ea:a6:9e:a4:4b:80:76:bc:3c:38:43:ca:4c:7e:67:
f4:36:a5:f3:b5:e5:6d:50:3f:9d:e8:53:3d:28:9a:
be:e8:a3:a9:f1:8e:2d:0d:4a:63:77:25:bb:ec:cd:
08:63:45:dc:6f:ee:81:5b:14:e4:c0:9f:a6:14:34:
db:e9:d6:18:5c:4e:22:af:9b:7b:6f:da:02:5c:9b:
7a:f0:41:cd:d0:5a:f1:f2:32:55:bf:69:c9:4c:c0:
42:79:a4:07:5a:a4:39:88:fc:c4:5a:90:57:86:bd:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:50:55:37:BC:2A:94:79:53:FB:68:77:32:EE:F0:8E:F7:BD:42
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:7c:65:b8:05:77:66:7a:1d:2e:d6:f8:29:8c:31:5d:02:0b:
61:3e:70:23:7c:09:4b:fc:6a:ed:59:0d:01:ca:c6:fc:97:b8:
e3:29:58:d7:7e:f5:09:d5:52:9d:32:e4:0f:0d:83:50:5d:5c:
59:ac:66:73:16:dd:e8:a1:be:89:1a:0f:ab:0f:c5:8d:2f:5e:
ab:62:9c:d7:29:e1:1a:cb:49:87:8a:54:ac:05:9f:16:8f:25:
47:dc:dd:c8:70:19:40:94:80:96:6b:b7:5e:e7:bd:90:1a:f1:
39:8d:a7:ba:e5:b2:38:0b:fa:af:ba:b7:6e:bd:5e:c4:2e:88:
7e:6d:2d:a0:c8:77:e7:7f:29:8f:17:c0:e1:e9:0e:f6:d0:b9:
5e:82:0b:d0:d6:f1:44:0f:ab:85:71:db:85:1a:8b:94:2a:69:
30:c6:26:36:22:1d:fe:21:7e:c8:b3:9d:d7:1b:67:0e:8c:05:
76:7c:c2:67:98:e5:77:22:2f:c5:c5:50:38:cf:54:51:8f:fb:
cb:67:76:13:7a:e1:06:3c:1a:64:07:61:c9:dd:42:a5:59:a2:
85:6a:9d:17:8e:dc:28:d8:9b:44:ff:6e:63:21:13:5c:14:5e:
9f:e3:1d:57:67:8c:25:19:cd:93:30:a7:9d:08:77:b2:6e:8c:
8b:94:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client