Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: Ep/myTHGi32bAJH57jBDlM6mB3sbfR1if4r/boOHjSw=
Subject key identifier: AD:B3:EF:CA:EE:CC:3E:A4:3F:4F:69:94:0C:39:C0:C6:98:1B:47:7F
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019D0D0D7B0AB5B44FDF5426DCCEA4EB4C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1006
Signing time: Fri 20 Mar 2026 21:01:20 +0000
Manifest this update: Fri 20 Mar 2026 21:01:20 +0000
Manifest next update: Sat 21 Mar 2026 21:01:20 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: 20hx34KHyp1GgOEXtJ7F2cx4purRxAbPf5LId8QgdXQ=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:0d:7b:0a:b5:b4:4f:df:54:26:dc:ce:a4:eb:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Mar 20 21:01:20 2026 GMT
Not After : Mar 21 21:01:20 2026 GMT
Subject: CN=adb3efcaeecc3ea43f4f69940c39c0c6981b477f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:30:c6:43:e7:d8:bd:f0:da:a0:08:e8:e8:
b1:7f:de:ec:42:ba:20:6d:51:72:48:bd:0f:bb:6e:
ca:dc:be:33:3e:fa:68:81:d7:59:57:c2:1c:4c:01:
58:4c:c6:cf:4f:b7:49:f9:80:31:86:1f:97:a0:01:
82:33:3c:52:18:c1:97:bf:27:5a:fa:26:a6:94:22:
08:92:2c:b8:36:82:bb:23:f1:cd:05:7b:59:0e:a0:
11:79:23:08:b6:94:c5:32:d7:7e:b2:7c:b6:35:23:
9b:dc:9f:9c:68:fc:b4:13:cc:77:61:47:87:85:7e:
0f:3f:f2:fb:6c:ea:0c:18:e3:0a:20:a9:b8:1e:03:
7a:7d:9c:f2:8c:00:de:f4:9f:ab:bc:39:00:e3:fd:
32:3a:b5:d1:8f:37:11:54:01:28:fb:15:e4:47:b5:
e7:6e:98:1c:52:fd:22:1e:3f:5e:8c:e6:71:bd:06:
4b:a3:43:d3:3c:9c:17:cd:63:d9:97:4c:c0:16:b1:
7a:ba:4a:df:4e:28:2a:ee:de:7b:78:32:75:c7:f6:
0d:73:04:e7:76:a0:ab:78:1b:6b:5e:9b:46:2f:65:
20:18:dd:d8:f1:93:7a:a8:12:9b:9d:e8:55:56:df:
8c:c5:42:f6:34:1a:0e:81:20:6a:9c:e3:44:be:23:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:EF:CA:EE:CC:3E:A4:3F:4F:69:94:0C:39:C0:C6:98:1B:47:7F
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ef:0e:99:cf:f2:f4:05:2a:b8:f7:b6:78:fe:d4:47:e6:74:
19:f1:53:13:21:c8:ac:57:78:4a:f1:8c:90:8f:ed:96:b1:ef:
d3:10:90:19:b3:66:44:80:03:e2:30:8d:92:01:2e:3d:5b:51:
96:5b:03:61:a6:93:98:03:64:82:84:46:68:7c:59:5d:3b:58:
e4:a4:d3:48:b3:96:e8:3b:54:b0:e5:28:8b:15:b8:af:21:d1:
35:b1:a9:70:39:67:7c:73:d4:57:59:76:fe:bb:09:c5:c7:af:
61:48:de:76:01:3a:b3:85:a8:40:a0:23:c7:a5:29:42:c0:14:
9c:94:94:33:f5:d2:d1:ae:28:db:00:77:6a:ca:af:5e:5f:23:
e6:c3:e0:1a:21:03:28:5d:f6:39:af:34:7e:8e:f9:e8:b0:4b:
7a:40:d7:df:66:bb:d6:d1:f2:76:9e:ad:e1:1a:7f:f1:d2:41:
76:95:28:2b:b7:8b:a8:45:b5:3c:fa:ea:8a:3c:51:2a:40:1f:
8a:2e:92:70:b3:5a:f1:db:ab:40:46:ec:de:0a:e7:d9:2b:4f:
cd:5b:8a:9a:1d:07:4b:4b:fe:52:b9:26:d2:86:de:ed:4c:f8:
ac:b1:16:4f:ed:b1:30:8e:dc:cf:28:f6:62:34:51:ee:e3:bb:
61:2c:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:03 2026 by rpki-client