Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File: FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier: ZWrQ/KPGpgy/rVoi2PoO0gtmXcv1PzB7vkB60/e67bU=
Subject key identifier: 90:1A:02:71:F0:AC:48:96:12:48:AC:F2:A6:25:81:22:19:36:4B:41
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 019D3A1C5CDD80B92DB4F90DF847072B37BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number: 0DE0
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: /t/bFmkyJkxNrmx1oA+g/8uAWQPs++MpIncXi1qkZeA=)
2: W58XMgZh9lZ_P5m3yj1yWR948AE.roa (hash: /DZnUsMGqFUioz1rHfXRehgQ0Epro6BcGMD4flzo29I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5c:dd:80:b9:2d:b4:f9:0d:f8:47:07:2b:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=901a0271f0ac48961248acf2a625812219364b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:54:7e:d0:e8:03:36:40:7d:8d:2e:fe:9c:
10:7a:cc:89:bb:c3:3d:9b:bb:c9:84:5b:af:cf:bd:
94:cd:4e:3b:51:62:b3:f4:b9:df:c1:dd:81:18:bd:
ce:c7:4e:54:84:53:23:cf:2a:22:bc:e2:55:8a:8a:
5b:f6:8b:57:91:78:6f:11:16:cd:f2:03:68:45:79:
42:9f:09:81:36:6e:6c:a4:d3:51:a3:31:1d:e2:e4:
d7:dc:aa:0e:97:1c:6d:8f:12:dc:3a:89:47:96:b6:
32:9a:5a:ff:b8:46:cf:e4:20:a2:72:71:00:7e:98:
b1:fb:f0:bc:f6:6a:7a:10:01:f9:60:6a:c4:82:55:
49:b4:3f:06:cb:0b:4c:b6:96:34:1b:d1:01:8e:e9:
e6:8a:09:55:b4:c0:00:8d:69:10:4f:b5:57:7d:72:
c5:dc:a6:e6:90:d7:32:e9:72:8b:c0:c2:ec:86:83:
24:11:dd:01:81:c0:78:82:d1:0d:ac:10:fe:ed:b3:
b2:a5:f0:48:4a:c5:8f:34:cd:90:fa:3c:2b:56:ce:
20:77:56:bb:28:87:b0:9a:30:05:24:1e:a2:c7:73:
e4:22:49:48:eb:48:d0:14:d0:d3:50:11:20:06:61:
a5:fb:15:80:13:00:fa:71:c4:91:92:d6:3a:37:ab:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:02:71:F0:AC:48:96:12:48:AC:F2:A6:25:81:22:19:36:4B:41
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:61:cf:7b:bc:b2:01:11:14:ad:6a:d3:ca:dd:a2:3d:a5:
82:67:7c:d7:22:35:2d:80:1a:f2:ff:b0:c2:3e:8e:dc:0b:02:
d5:66:1d:54:68:f8:d2:8e:c5:37:be:2d:1e:af:43:be:e2:d2:
69:d9:2e:c2:e4:9d:e0:8d:89:ee:c3:71:f2:df:8d:b6:99:e8:
40:40:04:a8:4d:ec:e9:9b:8f:9a:1b:6d:64:8f:cb:76:39:47:
20:f2:3e:16:ef:6a:1a:3a:dc:c1:80:03:59:ae:5c:6a:ef:e8:
ba:bb:a0:43:e7:b0:89:e2:51:29:96:2b:a3:50:10:b7:e4:4f:
b5:ef:22:0e:f5:18:11:d5:76:1a:8f:f4:5c:77:17:e6:cc:ff:
59:86:e4:94:48:ab:eb:31:d7:f3:e7:1d:cb:69:1e:e1:6a:a2:
6d:2a:a0:fd:2c:f3:fb:5b:9c:a0:23:96:b6:37:86:41:62:b2:
e7:8e:af:64:72:db:af:59:1c:ae:f0:2d:8e:e3:19:9f:a4:2c:
e3:52:d0:dc:aa:2e:1d:b0:46:b0:5d:41:c4:13:a1:82:35:78:
3d:60:4f:11:aa:20:89:05:64:9a:ec:c5:a3:8a:5d:5e:83:89:
44:7a:bc:bf:8b:f2:8f:8a:9b:e6:be:5f:16:f2:65:db:88:73:
aa:b0:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:01 2026 by rpki-client