Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
File: FK__4H7yluyM0lK8sgiLG6qPur0.mft (raw, json)
Hash identifier: uduk1g9rKSCZ4WOdTiOYmBzzJ3cr3/R9rNH+EaeSAFM=
Subject key identifier: C0:E8:C9:D1:C6:AD:F9:B1:2F:1B:6A:9D:F5:2D:07:8A:0B:30:66:81
Authority key identifier: 14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
Certificate issuer: /CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Certificate serial: 019D39AEA261EBF5A4B8B704A131185DB15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
Manifest number: 08
Signing time: Sun 29 Mar 2026 13:00:39 +0000
Manifest this update: Sun 29 Mar 2026 13:00:39 +0000
Manifest next update: Mon 30 Mar 2026 13:00:39 +0000
Files and hashes: 1: FK__4H7yluyM0lK8sgiLG6qPur0.crl (hash: Fgst+Dkvp66FVoi/iTbjNRe2IiCpYA131IA3trbhPnE=)
2: QpgRqR4ONpEAldJV9RdLVieuB30.roa (hash: O7WrNb/BN4tdedokbnfczoEsP+osybSj8/C29gRLRWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a2:61:eb:f5:a4:b8:b7:04:a1:31:18:5d:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Validity
Not Before: Mar 29 13:00:39 2026 GMT
Not After : Mar 30 13:00:39 2026 GMT
Subject: CN=c0e8c9d1c6adf9b12f1b6a9df52d078a0b306681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:09:27:75:5e:3d:22:96:16:bc:64:ed:1a:
fe:e5:84:24:e0:19:3c:6b:47:09:ac:92:9e:ba:87:
22:c9:2a:3b:8b:22:45:ba:0e:5d:93:6b:be:3e:26:
69:44:35:f0:1c:dc:0d:40:66:f2:ba:1c:5b:df:67:
6d:82:78:e5:f6:5d:57:c5:b7:f6:af:0e:2b:01:08:
ea:a7:4b:cd:c3:52:f4:b0:14:83:8c:c2:b4:d6:22:
99:f4:c0:c0:75:80:8b:f2:a3:26:03:a3:a4:d2:e4:
9a:68:42:15:aa:c3:9b:fc:e1:b8:29:5c:b4:d6:96:
61:0e:1e:e8:05:41:51:17:f7:01:12:2a:44:ed:92:
12:21:f1:f4:65:26:3e:57:41:7c:a8:2d:8f:44:33:
3c:f1:13:da:52:56:b3:5e:0c:eb:4b:55:71:ee:88:
17:88:74:e4:17:e1:c2:c3:2b:1f:c1:13:27:c1:54:
16:2b:4c:52:74:17:81:61:1d:40:e9:41:39:ae:d0:
cc:87:78:eb:02:32:7e:8a:2e:6b:5c:0f:77:a2:1e:
0d:df:cc:5c:85:f4:3a:8e:05:30:87:2b:6b:e5:53:
64:2d:d0:73:be:6c:56:ed:bf:73:ef:fa:65:21:58:
22:51:71:e5:24:b4:4e:ef:c6:a5:6b:47:db:32:72:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:C9:D1:C6:AD:F9:B1:2F:1B:6A:9D:F5:2D:07:8A:0B:30:66:81
X509v3 Authority Key Identifier:
keyid:14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:05:b6:c4:82:62:69:e5:7a:03:77:01:4f:cc:86:39:38:3c:
41:e5:15:79:14:6e:95:33:f9:a5:b5:ed:89:c1:9b:1a:46:f6:
f5:e9:ce:71:7f:47:97:89:4d:2f:ff:54:fe:5a:f6:2b:0d:b8:
57:4c:46:01:e6:5c:c9:30:70:b2:eb:3e:9d:cf:d3:8d:a6:dd:
c8:0c:78:2e:03:8c:ae:84:6b:8a:6a:cc:3e:ee:ff:ec:d0:43:
0d:f2:e1:8b:d4:5b:95:af:f5:46:51:a9:3f:fd:a1:9d:4d:c0:
0f:35:ce:ba:97:2c:19:3e:e2:5d:81:27:1a:40:e3:9b:ef:fd:
42:36:dd:45:6a:ff:37:d5:d5:54:1b:3f:b1:86:56:ce:8c:9b:
5c:0f:bc:e6:49:c6:7b:0c:b1:a3:2b:a4:03:12:ee:39:dd:96:
1a:ba:5b:28:5c:ea:85:5e:db:3c:7c:24:4e:c7:96:18:0c:48:
c4:2e:65:b0:bb:c3:aa:84:5e:9a:a5:df:1c:44:17:3c:6a:30:
12:73:9a:ba:89:ac:5e:88:a8:03:bf:9c:71:24:a7:aa:d3:f2:
c1:48:e8:de:98:dd:24:f3:0d:11:f7:a6:a2:99:20:2e:7e:9e:
89:9a:4a:5f:02:7f:b4:a5:6a:b7:3e:a6:11:53:e0:67:3b:53:
c2:55:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:34 2026 by rpki-client