Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: bW156x7HHoyWUwMFQon3vYv9jSUA1yzjvNtm6dS0IUw=
Subject key identifier: BD:4B:99:B5:04:3B:DB:E0:BF:55:85:ED:51:98:70:95:7B:D2:80:72
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019D3977F9267C43194D5220BAFE8F24B17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 063C
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (hash: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: R1yzc6OHEAZ7Mv1Y+de+Z0DSm/4R4gUg0Ng/GfWGPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f9:26:7c:43:19:4d:52:20:ba:fe:8f:24:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=bd4b99b5043bdbe0bf5585ed519870957bd28072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:df:6d:4e:71:37:b5:da:73:ae:b3:22:44:
ef:9f:69:87:84:0f:84:da:33:41:9e:30:df:36:bf:
12:32:8f:fc:61:7e:47:69:57:ec:ca:40:7c:1f:0b:
07:de:27:87:02:79:ec:5a:4c:08:cc:7e:bb:23:95:
3e:9c:64:25:05:9a:b8:50:94:a0:83:88:a3:fc:5e:
79:d5:86:2e:db:80:aa:6f:f1:5c:25:aa:4f:8e:76:
da:eb:fc:2b:59:33:2b:ff:69:ac:1f:74:3b:57:f2:
84:0d:8a:2a:68:31:4c:cb:59:d3:06:2d:29:6c:97:
60:26:43:26:78:0e:25:9e:d2:27:59:15:02:05:4b:
38:9d:ab:10:4e:b9:1c:a3:60:17:54:e5:d6:ca:46:
f5:55:02:8d:8a:3a:90:43:e9:df:2f:54:20:81:08:
f4:10:bf:b2:38:78:29:2c:c0:c0:f2:7c:a0:cf:19:
0e:48:a6:cb:65:ea:ec:2b:c2:6d:b2:1a:f8:bd:db:
00:25:ad:79:08:70:69:36:5b:08:fd:95:a8:92:57:
93:62:ab:dd:a5:d6:d0:45:b2:4d:79:0e:d6:0e:42:
1b:1f:3f:40:bc:a0:32:09:de:39:a2:21:46:56:c3:
32:23:d3:1c:d4:4a:1d:90:4a:67:eb:8c:42:07:f0:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:99:B5:04:3B:DB:E0:BF:55:85:ED:51:98:70:95:7B:D2:80:72
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:b3:dc:c2:68:7b:8d:f0:a3:82:50:9d:8b:71:21:48:19:
65:87:6c:b4:f9:31:94:87:03:84:03:2e:4c:7a:59:88:16:88:
dc:6e:92:45:6a:24:8e:b9:09:85:bd:88:23:83:06:42:2b:f9:
00:58:60:00:fe:b6:6a:36:35:3d:ab:63:67:f4:c0:21:c5:96:
13:12:51:f6:61:33:c1:a0:7c:ad:f5:46:52:7b:ee:14:21:2e:
49:a4:98:46:64:03:9e:46:55:c7:9f:84:41:e9:12:47:17:d5:
43:49:86:69:eb:39:25:58:d6:d1:3e:43:ff:e3:1f:cd:c4:c3:
80:bb:97:2f:78:87:89:68:5e:3c:0f:dd:9a:40:d7:a1:39:a2:
22:eb:d5:94:7e:dd:a0:20:1e:91:57:4c:51:7f:53:68:c0:5a:
89:eb:6b:84:b3:e3:7f:45:13:5f:d3:95:95:c9:0e:3c:97:13:
f0:6c:05:d1:98:5b:cf:b0:f2:dc:12:0a:3e:8c:1e:be:24:bf:
c9:18:a3:79:02:98:f9:a8:53:df:4e:33:3e:df:a0:be:9a:f6:
d4:55:53:21:61:91:bc:0d:2b:cb:2e:1f:79:af:df:f7:b4:05:
7f:88:b6:26:ae:fb:90:4b:a1:ad:93:9f:41:62:f7:53:75:9b:
c7:c8:b4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d/kmfEMZTVIguv6PJLF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjFmYjEyOTAzYTVjZDRiYzE3YWJiNTk4NzNjOWQ2ZGE3
ZTY5YjUwHhcNMjYwMzI5MTIwMDU3WhcNMjYwMzMwMTIwMDU3WjAzMTEwLwYDVQQD
EyhiZDRiOTliNTA0M2JkYmUwYmY1NTg1ZWQ1MTk4NzA5NTdiZDI4MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfDfbU5xN7Xac66zIkTvn2mHhA+E
2jNBnjDfNr8SMo/8YX5HaVfsykB8HwsH3ieHAnnsWkwIzH67I5U+nGQlBZq4UJSg
g4ij/F551YYu24Cqb/FcJapPjnba6/wrWTMr/2msH3Q7V/KEDYoqaDFMy1nTBi0p
bJdgJkMmeA4lntInWRUCBUs4nasQTrkco2AXVOXWykb1VQKNijqQQ+nfL1QggQj0
EL+yOHgpLMDA8nygzxkOSKbLZersK8Jtshr4vdsAJa15CHBpNlsI/ZWokleTYqvd
pdbQRbJNeQ7WDkIbHz9AvKAyCd45oiFGVsMyI9Mc1EodkEpn64xCB/C6AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1LmbUEO9vgv1WF7VGYcJV70oByMB8GA1UdIwQY
MBaAFBXx+xKQOlzUvBertZhzydbafmm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUt
MmYyZjhiNTkwNTAzLzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUtMmYyZjhiNTkwNTAz
LzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm96z3MJo
e43wo4JQnYtxIUgZZYdstPkxlIcDhAMuTHpZiBaI3G6SRWokjrkJhb2II4MGQiv5
AFhgAP62ajY1PatjZ/TAIcWWExJR9mEzwaB8rfVGUnvuFCEuSaSYRmQDnkZVx5+E
QekSRxfVQ0mGaes5JVjW0T5D/+MfzcTDgLuXL3iHiWhePA/dmkDXoTmiIuvVlH7d
oCAekVdMUX9TaMBaietrhLPjf0UTX9OVlckOPJcT8GwF0Zhbz7Dy3BIKPoweviS/
yRijeQKY+ahT304zPt+gvpr21FVTIWGRvA0ryy4fea/f97QFf4i2Jq77kEuhrZOf
QWL3U3Wbx8i0iA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:41 2026 by rpki-client