Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: tmNrFfk1/vkWe8Sgsv/spPh4uv8J6w3t+AY/X99O3hc=
Subject key identifier: 9F:1B:93:A8:19:64:68:54:0F:AE:01:5A:75:3E:EF:37:F6:69:68:FA
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019D37C0ED7FB92399620AED27511D32BA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 102C
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: irIvPZDKN43xKy+HcAPYHt053et6NY0NONz1QRAHc08=)
2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ed:7f:b9:23:99:62:0a:ed:27:51:1d:32:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=9f1b93a8196468540fae015a753eef37f66968fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:03:16:fb:ca:88:a3:06:bd:c9:26:a8:98:
cd:60:1e:e4:9a:36:08:e3:fb:46:c7:4f:63:69:4a:
ed:f0:68:95:e7:7b:7c:3a:64:31:8f:08:9b:bb:32:
ee:ab:7f:7e:48:95:b7:bb:e0:9d:ef:c7:ff:3e:64:
66:a5:9c:5a:65:f1:b5:1d:c8:69:e6:11:06:eb:ca:
e2:00:1b:0e:a8:56:73:c4:7c:52:27:fb:03:d9:76:
42:19:28:f1:e6:42:b0:ad:fb:77:4b:84:eb:ec:93:
a7:4e:69:b0:de:fb:6d:ec:69:4a:ae:3a:1b:ec:bf:
78:09:b7:aa:4f:48:77:f9:43:39:95:5a:18:11:a4:
f8:89:d0:cd:eb:7d:cf:7e:77:5f:2b:c5:5a:38:7e:
d5:93:f9:af:88:c7:3c:a3:25:4f:76:76:c0:ad:e4:
84:09:a5:4e:29:ae:05:5e:2e:34:65:fd:d9:28:15:
05:75:07:3b:02:af:2e:9e:77:e7:c4:c4:6e:fb:76:
47:e2:0a:ec:6e:6c:b2:55:aa:bd:2e:21:47:26:b7:
98:bb:ce:04:5d:02:a5:de:c4:c9:95:b5:19:b0:3d:
f0:bd:1b:41:bd:6c:e0:c3:b7:e9:71:b9:3f:56:b0:
fe:57:9c:cf:fd:96:6f:c9:d0:b0:36:b1:c6:23:74:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:93:A8:19:64:68:54:0F:AE:01:5A:75:3E:EF:37:F6:69:68:FA
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:d7:b1:19:fd:1a:53:ca:f3:4a:b4:35:52:1b:2c:c2:8a:
f4:7d:b2:dd:d0:9a:55:e0:2b:bc:2c:96:78:e1:24:a0:6b:60:
3b:da:52:ce:ce:eb:cc:13:16:83:c6:b6:3d:d9:6a:86:66:64:
8a:63:59:7f:4e:02:5a:3d:91:6f:d4:67:c8:2a:a5:37:c1:7a:
a6:65:2b:9f:32:ba:c9:9f:f7:c8:b6:94:9c:7a:99:9f:e8:72:
db:e7:45:41:49:90:dc:ee:a6:a0:23:20:fc:84:14:49:dd:4a:
47:0f:ff:eb:31:0c:5f:67:f2:12:8b:ab:a8:72:6d:1b:c2:6b:
6b:d1:84:92:14:26:75:23:75:90:17:a9:b1:9c:11:ba:c9:46:
a1:74:6f:31:66:df:c0:0d:ca:d1:f2:6b:2f:f8:8f:ff:40:1b:
a5:a1:d3:e0:65:80:bd:8c:6c:24:c7:f8:6d:5f:7b:56:37:55:
c1:aa:e2:11:7c:03:c0:e3:66:6b:2a:6b:30:24:d7:64:0e:2d:
a8:82:d0:06:57:a0:7d:76:2d:8a:c3:d1:f4:42:bd:cc:e8:61:
50:3e:bf:3d:06:ff:7d:4e:ed:ec:2c:17:69:e8:36:0c:9b:05:
2d:10:23:5d:90:91:94:5c:3f:e7:00:66:a4:5c:c1:eb:af:25:
45:df:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client