Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: UxLfs5zyHIeIry9WqBnH1StP3Y+kC/KYLT/Nj65O00U=
Subject key identifier: F7:2E:B0:89:9E:50:83:A0:98:80:C8:2D:E6:BC:47:92:31:A6:90:E7
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 019D382E88BCA2AE0EA0CBFFFA35EE8ABB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 0B4A
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (hash: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc=)
2: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: AXU6Zsjd5+PHJ97gljh5PgqccTN1bEjavgoSkTBvw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:88:bc:a2:ae:0e:a0:cb:ff:fa:35:ee:8a:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=f72eb0899e5083a09880c82de6bc479231a690e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:36:69:ac:2d:ff:8c:5c:5f:e3:23:20:5d:
09:a6:35:ab:ba:52:a6:5d:9c:f9:13:bb:65:7b:c8:
69:d5:c6:ea:28:27:1f:51:9d:c4:11:af:82:92:c1:
c7:25:2b:b2:95:38:f4:9b:14:27:98:fb:d1:7a:53:
af:f6:02:c3:87:a7:bf:88:2c:6d:09:84:87:ef:fd:
58:dc:30:2a:22:bb:9a:95:1a:1f:8c:58:c1:e2:3c:
5d:53:05:1c:9c:f8:72:8b:d8:47:09:99:79:75:4e:
33:d3:bf:40:e1:c9:23:b6:e9:e5:02:36:7d:b9:7a:
9a:56:56:1f:67:ac:57:e0:65:b4:0f:27:3e:17:32:
08:cc:95:6c:de:58:77:39:85:1f:b1:dc:1b:73:11:
44:c6:40:f6:8b:d9:4a:e9:33:1a:fa:c0:7e:81:b9:
9c:f3:40:f4:e7:42:5b:be:65:5a:05:3d:48:b5:0a:
d6:90:4e:b4:fe:9d:1f:a9:17:bc:6a:ac:6b:81:ed:
37:0e:37:98:7d:69:ae:79:95:74:be:9e:de:eb:19:
c8:bf:94:f8:ba:96:1e:24:5f:f6:79:fe:e5:a9:64:
15:b1:d4:5e:1e:b8:1b:a9:74:c2:a5:d1:e2:86:b1:
67:e4:b1:ad:40:26:d7:ac:94:d1:d3:74:db:1c:bd:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:B0:89:9E:50:83:A0:98:80:C8:2D:E6:BC:47:92:31:A6:90:E7
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:28:ea:98:6d:61:b1:06:e5:d7:d8:84:d8:58:17:4c:78:29:
b9:c1:49:01:e0:6b:53:b9:04:fb:28:30:b0:78:fb:7b:a0:17:
94:1a:ec:50:51:44:1b:fe:02:ac:af:c4:44:f0:bd:7a:85:bb:
7f:27:0d:28:bf:51:16:a7:c1:91:01:15:ce:45:23:5f:2d:f1:
62:67:fc:ed:74:32:f5:d5:a2:29:1e:c8:ce:74:eb:09:bf:f6:
39:62:e4:fb:a3:0f:82:e9:18:3c:1a:84:62:7f:24:4f:01:f1:
f4:d0:dc:a4:ca:9f:0c:da:3e:98:ab:9a:5a:d4:14:48:94:4b:
11:0a:c2:ac:3f:f0:fe:8f:5a:f2:a8:7d:1b:96:c4:05:5e:dc:
14:e7:c7:7a:2c:e9:4a:08:44:d7:16:2a:67:40:75:99:d9:f2:
81:ae:7d:d9:ed:fa:51:96:b6:ba:dd:fc:bb:e8:bc:83:40:4d:
96:3a:45:34:f7:b9:9b:9f:49:55:f3:f1:fd:76:09:f1:b3:b5:
e1:3b:07:e3:92:20:d3:05:de:47:ab:15:35:ec:fa:99:bc:3e:
a8:5b:12:3a:90:5c:d0:41:17:12:30:b6:4f:db:3d:49:1f:81:
c5:dd:07:81:8b:4a:af:d5:30:77:9c:b0:eb:7e:99:09:18:f1:
19:4e:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client