Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: VXexJmf2FSwQxHdWvkvl7qB4rMGTPSoJpzsE1R12sUY=
Subject key identifier: A2:A5:13:40:4A:1E:80:53:3F:89:D1:19:C4:F0:B6:B0:DE:90:DD:1D
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 019D38663FCF6F098871B294EA06BCD409FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: qtfisA6xMFaE9NLzadoHqNjJs4SBQX3fwMs1uWvyDwc=)
2: SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa (hash: u3RjjkaVFf/cQV+4yoRBPleDxt+ksRUQRSNCbsoYFqU=)
3: o2BsiGmifOXsbzzselyesyO7SIE.roa (hash: iLy0PC6zZs7wpX+RqnK0/QjsSwHsSWbMfjlQkWuiJ5w=)
4: rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa (hash: n8/JUrk12IuY4WimjIBxh1VJWwxTjOVeSQL6bKZGVyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:cf:6f:09:88:71:b2:94:ea:06:bc:d4:09:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=a2a513404a1e80533f89d119c4f0b6b0de90dd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:2c:28:71:ea:dd:83:3d:ce:42:a4:e9:af:
96:96:fd:32:e4:b6:cb:b0:fd:fe:6f:46:55:9a:17:
08:28:e6:dd:11:95:24:da:f5:2a:c7:74:f7:cf:64:
15:a6:13:97:58:2f:4c:2b:40:2e:0a:63:66:ee:0e:
6f:a8:02:c0:69:5a:15:89:62:f2:7b:b9:da:f5:c3:
f5:be:12:ce:5b:4a:d6:6c:e1:11:80:a7:b4:02:88:
2a:c6:6d:f1:b2:5b:70:1a:af:ae:6b:b8:47:ca:af:
60:4f:35:7b:00:52:07:30:ca:43:84:2c:e5:ba:40:
25:cd:99:10:50:9b:e9:11:82:b2:95:cf:af:59:2d:
bd:a8:17:69:2c:3b:61:b2:bf:da:de:20:63:0f:22:
bf:94:e4:47:ab:bc:d4:6a:38:d2:78:25:5b:18:19:
de:94:d3:38:b8:0e:17:65:06:1a:ee:98:2c:81:30:
89:c8:e9:db:dc:1b:82:2c:95:3e:80:09:c2:99:8b:
eb:e7:7f:a5:c7:81:39:d2:07:84:a5:8d:67:2d:d9:
a4:bd:7c:c3:6c:79:a5:2a:df:2a:1d:50:fa:5c:19:
08:55:1c:ca:a7:c6:21:8c:86:c4:b8:93:44:d6:91:
1f:62:89:4a:86:ef:69:e8:36:e8:79:a2:54:75:30:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:13:40:4A:1E:80:53:3F:89:D1:19:C4:F0:B6:B0:DE:90:DD:1D
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:e1:c8:71:30:5d:a0:89:63:29:bb:2e:2f:56:ac:93:48:
fb:0e:82:69:8f:9e:02:72:65:f8:d5:ba:86:e8:1d:46:bd:c2:
2d:03:d3:79:74:c0:48:e0:0b:92:1d:60:09:31:bd:f3:7d:c3:
29:11:c1:03:a8:e8:d5:2d:b2:76:52:7d:3f:0a:30:f5:ae:c9:
f5:be:c0:6d:1a:a3:13:75:1b:8e:e0:78:2a:7f:1b:27:31:34:
5d:e9:d3:69:ea:c4:0f:c3:70:e1:1a:4d:97:6f:af:5c:57:ac:
1c:1a:69:38:87:09:00:93:8d:c2:3d:83:9d:f3:e2:82:91:1d:
71:74:e0:c7:57:44:b3:7d:7b:4d:94:e7:5d:79:43:98:f4:7e:
ec:8e:53:66:68:d6:93:ab:75:14:c0:9d:20:29:1d:c9:58:e6:
fe:bb:4f:1f:e3:d4:ee:43:47:f2:17:05:7b:91:60:6a:78:8c:
e3:c2:23:de:8c:d2:a6:69:ee:85:ed:ef:44:31:22:98:90:57:
e1:79:23:ba:72:3a:88:89:2b:6b:b8:11:b5:ac:ba:3d:52:e7:
e0:6c:1a:6f:0d:e3:f4:c4:b2:7e:7b:bf:57:dc:2b:92:f9:56:
6c:60:74:7d:ed:0c:2e:de:07:ba:69:50:7a:f8:e6:3c:39:5a:
08:39:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:47 2026 by rpki-client