Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier: 4KsqyG34VqZqEVXa8ctr6NPX7h5GVa0ZXrBoUqaaIjc=
Subject key identifier: D1:08:A5:F2:B4:2A:A9:E1:7E:74:FC:A7:7C:83:AE:E8:71:9C:48:03
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 019D39AE6A906BF2BA2851D7BBF25CA48C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number: 1676
Signing time: Sun 29 Mar 2026 13:00:24 +0000
Manifest this update: Sun 29 Mar 2026 13:00:24 +0000
Manifest next update: Mon 30 Mar 2026 13:00:24 +0000
Files and hashes: 1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: byf+dt2vi5PKOTcIGQuoYnnVja48SHVZ/Py8cdGASMI=)
2: b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa (hash: GBEZ8Y0pqF1M+xMOeRWL/nxMJhb8iYsyNvr/SwhBu1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6a:90:6b:f2:ba:28:51:d7:bb:f2:5c:a4:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Mar 29 13:00:24 2026 GMT
Not After : Mar 30 13:00:24 2026 GMT
Subject: CN=d108a5f2b42aa9e17e74fca77c83aee8719c4803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:fe:97:e5:b1:8c:97:f6:21:7b:25:68:f2:
62:32:fe:4a:7d:06:81:ed:00:da:75:5f:c9:b5:2a:
e5:7d:78:4a:b9:86:bc:2f:3e:cb:b8:5a:6b:11:c5:
55:d6:22:2e:c2:c8:56:49:0c:a9:fc:96:4d:bd:83:
68:3d:56:c3:9b:2b:21:cf:98:f9:0e:1c:19:53:15:
f9:5b:d5:80:14:47:34:8c:1e:42:40:0e:16:cd:06:
34:f6:b9:1e:34:f4:6e:34:b6:29:7b:c6:3a:7d:4d:
30:93:10:cd:dc:a0:1b:24:45:0e:e0:e6:c0:fa:83:
a1:a8:de:1a:44:db:b4:a4:b2:56:48:2c:4f:75:15:
f1:af:b8:a2:ab:75:9f:40:ab:90:88:9d:bd:4e:d7:
69:fa:d4:3a:60:b6:6c:58:42:4c:f6:06:5c:f1:b7:
8e:69:ee:f8:36:73:3d:af:b6:53:a9:78:85:4e:bb:
ec:6c:ab:b1:ca:30:54:c6:44:c8:a3:c0:1b:fc:9c:
64:99:7c:9d:8e:e7:cd:3f:29:ab:49:db:a2:1f:f3:
18:12:18:98:31:83:2e:bf:cf:bf:fe:e4:bf:cb:1a:
91:cf:ee:be:89:18:75:97:99:06:c2:35:da:5d:74:
fe:bb:c5:98:f9:1f:35:ee:c3:c5:f7:1a:be:16:ea:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:A5:F2:B4:2A:A9:E1:7E:74:FC:A7:7C:83:AE:E8:71:9C:48:03
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:16:5d:11:5a:12:04:6a:85:d4:94:45:e0:85:93:db:49:2e:
8f:9a:f8:7a:b5:57:ec:48:48:94:0f:db:84:70:78:f6:c7:6e:
b0:2e:2d:e9:86:1a:6c:56:d0:a5:2b:b1:29:30:f7:1a:3f:7e:
bc:77:21:4b:b9:4c:2c:66:25:e8:ed:ef:d4:86:30:29:db:46:
24:5b:32:81:10:90:0e:23:ec:cc:70:84:df:74:dc:88:75:2b:
cb:a3:53:8c:02:0e:58:66:ba:05:01:49:90:41:86:01:96:b6:
35:69:7b:76:4b:21:a1:c3:a0:55:16:41:ed:fe:9a:ab:e4:8b:
a9:65:c1:31:f2:c1:9c:8a:aa:ba:51:1d:69:5b:fa:f6:4c:9c:
42:b4:d8:a1:5d:01:65:ce:59:c9:f8:9b:e2:c2:fa:88:84:88:
55:f6:a9:e3:47:ac:9d:a0:d2:4f:8e:d2:fa:b2:24:ea:4e:20:
1d:68:d6:ec:4f:6e:f2:a1:c9:8e:71:0f:5c:bb:b1:72:99:4c:
c5:3d:f2:90:52:98:7f:6f:0b:b6:b6:6a:24:c6:a1:ae:d4:ec:
a8:d5:e0:b6:45:e1:22:e8:4f:95:fa:27:3e:7c:d2:4d:d8:86:
8b:1b:74:da:d4:2d:58:1c:9b:41:9d:60:e4:72:7d:d0:d0:d5:
c7:0b:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:12 2026 by rpki-client