Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: FdRTzh5r0hEwepNObIFFHbjl8OewCiWfUesY3tSt+4o=
Subject key identifier: 4A:C5:87:6E:0F:F9:41:C1:06:64:DF:B3:1F:64:DC:25:8E:01:E9:A8
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 019D38D3CB2E1206CE6EBE34CC4A63390FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: 17g+kL3r3gMzXguahcaSUj6pAbSNbfMTf4RWLAx8BCI=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cb:2e:12:06:ce:6e:be:34:cc:4a:63:39:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=4ac5876e0ff941c10664dfb31f64dc258e01e9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:ab:aa:7a:7e:9c:dc:05:a9:c5:b0:95:a8:
f6:39:83:23:ee:a7:0a:85:b3:48:ca:de:96:9b:ec:
1f:7c:6e:20:96:f9:13:66:70:06:11:fe:b8:5b:70:
75:f8:9c:4d:f2:cc:2d:0f:52:86:af:e5:30:07:60:
13:dd:c8:62:c1:bf:3b:ba:e1:87:c6:ca:89:e7:2f:
b9:62:a5:76:3e:ea:4b:c8:1d:d3:d2:7a:d0:44:a0:
de:72:60:48:14:ac:ca:a0:fd:3e:50:0f:56:5d:60:
81:be:7a:5b:31:8d:97:91:69:cb:dd:32:1c:f7:67:
e8:89:56:63:c9:ae:a5:3c:d6:2c:43:8a:f9:41:20:
77:5d:8e:a8:08:02:6f:4d:95:f2:bf:9b:92:a2:90:
fc:86:e3:ea:43:35:24:ab:45:51:09:56:63:6d:d4:
e9:c4:ef:fb:6a:e3:43:52:ec:93:4b:d7:b0:96:ad:
88:23:1d:2f:b1:85:ce:61:20:f8:38:22:68:56:68:
02:a4:c2:84:f3:42:cc:b3:8e:77:75:71:46:16:99:
b2:5b:ef:12:e1:1a:dd:33:50:25:3b:b5:32:9e:71:
61:65:7f:62:43:b7:40:01:ed:75:18:10:4c:cf:de:
b4:b0:47:f8:dd:57:71:30:68:d5:c6:92:2d:8c:1e:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:87:6E:0F:F9:41:C1:06:64:DF:B3:1F:64:DC:25:8E:01:E9:A8
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:3e:53:3c:07:49:9d:ed:4c:49:54:7a:f1:16:d4:e3:83:
52:16:6a:e4:38:93:90:40:37:c7:aa:0f:19:8c:58:09:b0:f9:
a5:05:78:2e:39:01:2f:24:b0:9d:37:c9:01:c1:e6:18:87:7d:
a9:ba:ba:11:67:74:c7:19:74:c6:f7:5a:ef:4f:1c:8d:d3:eb:
f4:fb:61:4f:9d:fd:20:18:cd:40:66:7e:49:da:c3:b4:96:55:
84:f4:6d:24:30:69:bd:ab:30:ec:af:de:ca:a6:53:15:98:c2:
09:3f:c0:fb:e1:1f:46:5f:25:7c:cd:2e:c6:7d:8c:c3:89:ff:
01:0f:19:1d:28:65:0c:04:70:3d:38:74:aa:cc:ca:5d:26:1b:
21:33:b3:47:d9:52:7a:d4:a7:81:c3:33:29:07:ce:3e:fe:e2:
67:a0:bc:6e:17:24:c1:80:33:31:67:1b:8f:d9:19:4c:9a:9f:
08:9a:20:a7:c6:03:06:d5:30:c7:e8:81:5d:5d:60:f4:33:40:
27:0b:b6:97:98:3a:22:9c:cf:43:ce:68:38:f1:75:18:70:b2:
fe:45:f8:cf:03:9f:d8:49:cd:52:e5:dd:ba:69:b9:52:7c:0a:
ad:13:85:62:7f:43:ee:e7:19:81:55:06:d4:b1:2d:c8:7e:4b:
c7:c6:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client