Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json)
Hash identifier: nZJLBRvJnmJhHyzs4Ld1Ay+e0HuKyS8FOE5DM/2xTeM=
Subject key identifier: D8:93:77:24:03:B5:0B:CF:59:36:C4:42:6B:EC:EC:E8:9A:04:48:FD
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial: 019D382DE222F35F4A506190B6B5FE18A719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa (hash: i9+gFVyb3SxyLJJwgR43XfwCTSTrRwfgOhIAHEXtM3I=)
2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: idHxZJ1GVXLaHXAnrgvY4hgGzNfWypw82o0Iyb9ylLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:22:f3:5f:4a:50:61:90:b6:b5:fe:18:a7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=d893772403b50bcf5936c4426becece89a0448fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:4a:5c:7f:af:d8:93:58:c1:67:ab:ed:0e:
c1:4f:43:f2:b3:50:42:ae:64:dc:e5:8e:c2:85:01:
98:6c:bc:af:cc:36:9d:86:9c:27:49:40:38:c6:a4:
49:7b:ab:db:91:61:ba:e1:12:24:4f:bd:31:64:e2:
80:6b:88:66:e4:a6:f2:6f:ba:03:bc:70:7f:55:51:
6b:95:85:94:66:0f:b1:1b:9d:e6:ad:fb:0b:a8:f6:
4d:6a:e4:d5:12:76:02:f5:df:47:50:34:39:f8:40:
25:07:eb:c0:38:cd:69:93:dd:23:71:76:f5:46:82:
74:56:76:a9:b3:65:9b:d4:74:f9:ea:5a:c0:71:ae:
e2:b8:ed:4a:bb:cc:32:a6:1b:e3:a2:6d:99:98:9d:
35:04:a2:72:f1:61:01:fd:be:d8:a8:0a:0e:79:ef:
39:9a:f6:01:f4:30:9f:f8:3a:01:38:ac:61:79:ef:
5a:b1:68:16:00:ec:ea:6a:23:47:75:99:2c:8d:c3:
37:e8:89:ab:01:62:a9:24:77:ca:00:4c:79:4d:71:
96:96:26:9a:0f:d7:eb:ae:1f:a7:61:ed:b5:85:9a:
db:0b:c6:c3:e0:5f:3e:32:23:18:e3:f0:72:3e:61:
76:d3:a4:96:cf:d8:50:37:35:3b:10:58:49:80:26:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:77:24:03:B5:0B:CF:59:36:C4:42:6B:EC:EC:E8:9A:04:48:FD
X509v3 Authority Key Identifier:
keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:92:a4:c7:f5:4f:35:ce:e8:f4:ee:58:96:30:71:d3:6f:f5:
99:36:a6:c1:d3:4e:0e:3c:d8:f6:7a:78:b2:3a:6f:f5:00:ea:
bc:21:32:20:b5:9b:a3:0d:88:2b:32:bb:3d:35:cf:32:30:0c:
98:d9:3a:30:36:00:0e:d6:79:44:9e:6b:4d:d5:cb:ad:85:40:
0c:4e:07:9f:a5:c7:ae:aa:1e:ea:91:d2:c7:cf:b0:cd:c3:32:
f7:9a:c3:56:71:97:e8:67:aa:fe:13:93:72:0a:24:4d:33:b3:
a3:b7:8f:c3:30:73:fa:94:d3:48:db:38:17:f9:87:14:41:a9:
d3:d8:b1:75:e2:b6:60:ca:18:17:7e:88:66:b9:7b:68:d1:2e:
e1:4e:ef:4d:49:7f:00:5a:90:b2:79:59:39:26:23:e4:1c:90:
48:3d:3f:aa:49:50:c4:f1:a2:89:36:8a:20:48:c3:a6:13:75:
93:ec:95:fb:8b:7f:9a:72:db:6e:a8:69:81:57:ce:d0:82:a6:
51:a3:f0:d1:f2:0b:b1:fd:ae:fc:a6:87:a5:95:c9:8d:3e:7a:
80:8b:36:35:c1:62:d9:6c:a6:64:18:01:8c:45:1e:dc:97:93:
81:2e:83:b8:9c:9c:f8:cb:99:92:ef:04:90:19:a5:b2:a8:c7:
c4:d1:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:18 2026 by rpki-client