Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
File: FVDRC3zIDkmRflpRsdo-clnUhbE.mft (raw, json)
Hash identifier: oWS/3xITOIIiSs/QZHKgTVSRPfdkbfXIBI+SIRWVZi4=
Subject key identifier: 8B:79:47:B7:63:75:39:E5:E8:26:BD:09:43:66:13:4F:A9:6A:5F:0B
Authority key identifier: 15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
Certificate issuer: /CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Certificate serial: 019DCD875324360E7EE383A2082F56306447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
Manifest number: 4D
Signing time: Mon 27 Apr 2026 06:01:31 +0000
Manifest this update: Mon 27 Apr 2026 06:01:31 +0000
Manifest next update: Tue 28 Apr 2026 06:01:31 +0000
Files and hashes: 1: FVDRC3zIDkmRflpRsdo-clnUhbE.crl (hash: LiCbu8Q/WhGv8Pprv6FeaLwo3u7BwD64T31WnkEUqtk=)
2: Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa (hash: MRU5e7pRB4AUwsc2cjanJCKk9BsA/Ymmye5RL8bOTC8=)
3: a6x4sdR9rghHdVLAMn80-X_buNk.asa (hash: i54M6h3tMK35/FAaoQ8pWQt9iY2Sll+lX20PEeCdHeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:53:24:36:0e:7e:e3:83:a2:08:2f:56:30:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Validity
Not Before: Apr 27 06:01:31 2026 GMT
Not After : Apr 28 06:01:31 2026 GMT
Subject: CN=8b7947b7637539e5e826bd094366134fa96a5f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:6f:90:0a:cb:45:54:be:04:a9:b3:07:db:
38:7c:44:82:1e:b8:5f:cd:47:53:fc:d6:25:78:8b:
5a:85:41:7d:ce:df:01:ac:df:14:ec:ab:e7:18:47:
f5:62:85:0d:d4:52:19:b3:7d:31:fd:56:e8:f5:c4:
fb:ae:5e:8c:55:96:56:c3:ff:ea:61:4c:da:47:a8:
dc:d3:28:60:43:c3:5a:e8:0c:3d:40:8c:78:35:3f:
5c:6c:c5:60:22:3b:2e:fc:67:c0:ef:ad:3b:72:4c:
ab:8e:25:2b:76:c8:4d:40:49:73:99:9c:b1:94:02:
0f:60:e7:83:7a:17:e5:37:86:a7:f7:5a:af:5d:dd:
2c:3e:0b:e6:29:a0:de:67:f4:15:df:d9:9a:c9:ec:
37:8e:04:2f:3c:b7:2a:8a:9a:2d:b8:ad:91:25:38:
0f:d6:22:be:83:56:37:65:e3:28:8d:53:08:d3:a7:
a0:27:08:85:67:49:a7:9d:a2:71:d9:ef:c1:5b:63:
fa:45:0f:c7:f2:18:94:19:a0:cc:d0:77:81:a3:6d:
f8:ec:63:2c:16:5f:72:a7:90:dd:9d:ce:1e:8a:20:
c6:6d:df:ae:c7:cd:2c:0e:5a:3b:21:4d:84:cd:77:
72:8a:f6:60:10:e7:fe:23:9c:6a:e8:6d:1f:60:20:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:47:B7:63:75:39:E5:E8:26:BD:09:43:66:13:4F:A9:6A:5F:0B
X509v3 Authority Key Identifier:
keyid:15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:16:0a:74:d5:99:65:99:a2:19:22:9b:c3:f5:85:9b:31:71:
a2:55:5c:9a:c7:06:71:cb:eb:c7:8f:99:f3:95:7a:cd:b4:4a:
c1:aa:4c:58:5d:40:94:dc:f2:78:be:9b:07:bf:87:4a:84:ee:
43:97:c3:a2:fd:dc:ba:7a:a5:99:2a:8c:94:62:46:73:34:b2:
93:ad:87:71:bb:03:72:c0:68:77:d0:ef:96:56:bd:2b:e6:64:
e8:c0:46:cd:15:37:fa:b0:9f:e8:39:96:79:d1:64:4c:a3:fa:
2e:d5:6e:f0:b3:0b:ee:a7:37:8d:00:bb:70:60:41:5d:f0:34:
34:67:44:df:0b:e0:89:5e:15:c4:f8:c1:3e:1c:64:9a:05:ce:
06:22:55:ea:01:7a:b6:a0:f5:ba:d7:fc:b1:44:2f:a8:02:b2:
86:3a:a1:05:32:55:4e:07:0f:9f:32:3a:a6:5e:0d:4e:a0:af:
d5:c6:8f:aa:0a:86:43:2d:84:90:0f:b4:ae:5d:41:3d:89:38:
ef:83:7c:d0:46:74:e5:cd:17:63:9a:79:6c:3e:84:1d:0b:6d:
f3:2a:16:76:fa:cd:7d:60:13:1c:b5:44:5b:45:8c:1b:89:4f:
42:29:14:8b:f1:0b:c3:bd:84:ae:48:51:15:8f:cf:0e:81:b0:
7f:ea:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:51:16 2026 by rpki-client