Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
File: Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft (raw, json)
Hash identifier: 3R+2Pbt3W7dNiMb+fnpArKxWcE2d1VlLqFs/AqSuvIc=
Subject key identifier: 42:4F:4C:D3:A9:BA:6D:57:FE:3D:02:E4:05:B3:44:37:5A:FC:21:EA
Authority key identifier: 16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24
Certificate issuer: /CN=169f7cbfca8595e391f40b975fd103958de08d24
Certificate serial: 019D3940EA0588F174134A7B172E27B01470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl (hash: QZUb7c4dB2MOv78I8xF5RqBuD0fREw5HMizeaUQutrE=)
2: pm0Tvle3pSWAFywqIeydLv7TeLE.roa (hash: inzjhwDjN5GTwhq8RFj6Bcubbn1fXkic1q4h6XInxSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ea:05:88:f1:74:13:4a:7b:17:2e:27:b0:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f7cbfca8595e391f40b975fd103958de08d24
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=424f4cd3a9ba6d57fe3d02e405b344375afc21ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:82:02:f9:a9:13:11:fd:17:1f:09:f0:2d:
5d:0b:59:2a:98:c3:82:b0:e1:0a:86:20:6c:7e:99:
aa:cd:a4:1a:2f:24:f2:13:84:30:63:6a:e4:9e:cc:
b8:7c:0d:46:1f:d6:04:90:cc:8f:73:43:89:71:0d:
fa:1d:4d:11:1d:a5:6b:26:e6:30:59:2f:74:bf:fe:
ab:bb:30:ca:f3:7c:ee:3a:7e:21:9f:cc:b0:09:d4:
2d:aa:ae:d3:ec:e8:c5:36:d4:5e:a8:dc:22:8f:29:
e3:45:f5:8c:81:0a:df:af:11:b2:a5:63:6f:08:4e:
3b:eb:f7:d7:db:ba:f3:03:56:91:e8:68:68:67:ae:
c9:5b:2a:35:b8:bd:7c:e2:c9:ce:6e:ef:02:34:d6:
2e:ad:bf:8a:94:ef:80:c0:93:43:e3:3a:26:a7:d7:
d1:08:bf:a2:47:5e:5b:cd:b8:65:c0:40:d5:dd:6e:
98:71:41:29:49:9d:80:e1:9e:4c:a5:06:0f:51:87:
16:54:f2:0f:07:f4:66:e1:6c:b9:a3:b6:26:4f:17:
1a:60:91:3f:a4:5e:bb:5a:ff:28:1f:c4:5d:06:5e:
6f:c6:49:75:c3:20:f5:b0:06:01:21:7e:4b:a4:e8:
fb:fd:ee:46:ce:8e:79:d7:1b:4b:8d:1e:20:a4:61:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:4C:D3:A9:BA:6D:57:FE:3D:02:E4:05:B3:44:37:5A:FC:21:EA
X509v3 Authority Key Identifier:
keyid:16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:a1:49:c0:ad:6f:14:f4:23:a8:77:80:51:38:c7:a0:e8:
11:13:87:d2:39:44:7d:44:ad:b2:b1:aa:ba:9a:52:b4:2a:67:
76:57:b4:99:b1:55:b8:f1:a4:57:a1:0d:e7:b3:53:8e:9d:8c:
7d:7c:54:d7:e1:6b:ac:2e:74:7f:67:ef:bf:66:bf:00:77:71:
37:15:2c:59:23:42:bf:b9:c8:98:69:de:73:f5:13:b4:f7:61:
ce:a6:f9:df:9a:7c:9f:5f:79:07:35:48:fa:f5:96:97:88:a4:
ff:5f:c9:0a:20:10:c5:b5:d5:bf:26:8e:0b:a2:d8:fc:7c:70:
1a:3e:87:33:7d:1b:6a:f5:ea:ac:6e:d3:f0:50:0a:65:78:95:
eb:90:f9:70:d6:d8:cd:f6:2e:68:0a:c6:e4:9b:74:05:9f:eb:
6c:20:21:6d:ae:23:56:a6:5a:a1:74:13:2f:9a:9b:7a:48:92:
66:51:6b:d4:ff:f1:b2:77:d2:a9:e6:ab:09:af:ca:18:c6:a2:
f8:79:3c:7b:bb:83:fc:98:6c:f1:27:b2:60:62:be:49:77:99:
8c:74:e6:0b:46:df:1b:9d:f9:75:d0:5a:b6:82:fd:b0:15:df:
75:c9:35:f2:0a:aa:a1:73:e5:b7:50:a3:be:66:98:40:8a:c4:
dc:12:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:55 2026 by rpki-client