Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier: QIqp14d9RWtivl4xt7YdLKd77/5M3XMNvTClt9/28cQ=
Subject key identifier: F1:52:19:91:28:BA:CC:F5:4E:2D:48:75:C8:C8:FE:97:A2:C5:E2:F4
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 019D389C00898D69893C17CE6C15D79C8138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number: 15DC
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: DQBCw+ZVObqqsYZPlEdtdlwZ+X0SKxdWTy4gp9g0Dh8=)
4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:00:89:8d:69:89:3c:17:ce:6c:15:d7:9c:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=f152199128baccf54e2d4875c8c8fe97a2c5e2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:30:dc:72:2d:00:65:17:83:d6:ad:2e:0b:
f9:1f:07:24:6c:b6:2e:3a:d2:9a:73:92:38:38:d1:
ba:31:86:96:ec:cf:ac:37:2c:dd:26:4f:22:0c:3b:
57:6f:c8:83:1f:63:45:7e:94:8a:6f:9f:61:ec:e4:
2f:d5:c2:65:b0:25:77:e4:31:78:05:ec:b7:69:09:
4d:1f:bd:35:e3:a2:3d:a5:9b:bd:28:38:f8:b4:6b:
58:6d:bd:a0:47:b9:26:57:5f:82:6b:b9:89:04:47:
de:8d:4c:50:d6:f9:55:d7:ae:d0:c8:e7:be:c0:7e:
de:df:69:9e:a7:b2:83:cd:7a:e8:2b:c5:fd:d5:65:
10:e8:9c:55:37:52:34:c1:e0:d8:bd:7b:99:6e:a9:
09:c2:1a:b7:fc:56:ff:ac:e1:5a:d5:4e:71:e0:e8:
74:80:18:bf:ae:ec:57:ee:2f:e6:1e:c0:7e:00:c0:
c3:bc:21:73:84:36:64:17:1c:fa:93:a2:28:43:12:
a4:53:2b:b6:6c:60:1f:66:11:e6:cf:29:55:1e:75:
f7:8c:f4:fe:6d:33:bc:ca:5f:ed:e7:7e:99:4d:f2:
dc:3f:cd:2a:2f:f4:49:e8:2e:a9:68:fc:88:8c:d0:
f3:c1:b0:fd:a7:92:7d:75:ca:00:7e:60:f4:4e:81:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:19:91:28:BA:CC:F5:4E:2D:48:75:C8:C8:FE:97:A2:C5:E2:F4
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:24:e7:ff:ff:7e:d8:dc:16:ae:2e:a1:fd:86:76:d4:8b:
55:b0:b7:fc:77:06:2c:9a:de:71:65:ca:ff:dd:a6:33:19:a5:
a9:94:67:bb:fa:ba:5a:49:87:2b:1c:96:c8:8e:71:36:04:fe:
38:78:80:be:13:16:a5:dd:7c:95:30:5f:c9:60:fb:cf:fe:7d:
ae:7f:2a:0e:f2:2b:9b:5c:d7:21:5e:c6:43:3f:ed:83:f9:59:
90:41:fe:18:36:4d:e9:7a:92:12:9b:47:49:20:68:4a:ec:a5:
5a:48:41:d3:65:47:42:59:29:ff:ed:38:49:d3:76:48:8e:36:
db:1f:32:da:40:80:a7:62:5e:ce:1f:38:c4:21:39:c4:1a:41:
62:5f:2b:de:90:d1:97:9a:fe:67:88:8b:19:b1:ee:5e:ff:88:
f4:eb:c6:a1:74:59:8c:ef:b9:89:75:8c:81:d1:7b:ed:d0:14:
da:52:43:65:42:38:54:f6:6f:10:7b:fc:79:a0:e9:ac:6a:75:
66:06:5e:37:d2:de:ae:c8:c5:a7:67:f5:60:88:b3:24:05:67:
f5:2e:44:b4:c8:c2:6b:c2:f8:87:20:04:c4:33:7c:b0:b7:d1:
24:74:4b:a3:33:58:92:5d:b0:4f:35:52:71:93:c1:f3:3c:58:
c1:d7:75:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nACJjWmJPBfObBXXnIE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5
YmViYTEwHhcNMjYwMzI5MDgwMDQwWhcNMjYwMzMwMDgwMDQwWjAzMTEwLwYDVQQD
EyhmMTUyMTk5MTI4YmFjY2Y1NGUyZDQ4NzVjOGM4ZmU5N2EyYzVlMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaww3HItAGUXg9atLgv5HwckbLYu
OtKac5I4ONG6MYaW7M+sNyzdJk8iDDtXb8iDH2NFfpSKb59h7OQv1cJlsCV35DF4
Bey3aQlNH70146I9pZu9KDj4tGtYbb2gR7kmV1+Ca7mJBEfejUxQ1vlV167QyOe+
wH7e32mep7KDzXroK8X91WUQ6JxVN1I0weDYvXuZbqkJwhq3/Fb/rOFa1U5x4Oh0
gBi/ruxX7i/mHsB+AMDDvCFzhDZkFxz6k6IoQxKkUyu2bGAfZhHmzylVHnX3jPT+
bTO8yl/t536ZTfLcP80qL/RJ6C6paPyIjNDzwbD9p5J9dcoAfmD0ToGcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFSGZEousz1Ti1IdcjI/peixeL0MB8GA1UdIwQY
MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt
YjY5ZGNlNzU0N2ExLzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex
LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr0k5///
ftjcFq4uof2GdtSLVbC3/HcGLJrecWXK/92mMxmlqZRnu/q6WkmHKxyWyI5xNgT+
OHiAvhMWpd18lTBfyWD7z/59rn8qDvIrm1zXIV7GQz/tg/lZkEH+GDZN6XqSEptH
SSBoSuylWkhB02VHQlkp/+04SdN2SI422x8y2kCAp2Jezh84xCE5xBpBYl8r3pDR
l5r+Z4iLGbHuXv+I9OvGoXRZjO+5iXWMgdF77dAU2lJDZUI4VPZvEHv8eaDprGp1
ZgZeN9LersjFp2f1YIizJAVn9S5EtMjCa8L4hyAExDN8sLfRJHRLozNYkl2wTzVS
cZPB8zxYwdd1mw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:46 2026 by rpki-client