Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: JdGkx7tJnO6qHB7R4U8lJfo7y0XyNjC1BYsBAiNLnbY=
Subject key identifier: 00:63:64:D6:0B:8C:D1:F4:67:10:C5:FA:77:67:62:29:75:D3:79:80
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019D2772B68B0F13B96BCA5694830E00365B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 0A54
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: BVqqb8lSIphtFXGqi1sz49tXm0E.roa (hash: ccDupErLCJ+UOpMWaTKoluVs74aytETrBSW4WCesOvI=)
2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: bvpgdS3W3BCSKQRKofymjvjN1qaaq5kOabfnnpmKsaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b6:8b:0f:13:b9:6b:ca:56:94:83:0e:00:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=006364d60b8cd1f46710c5fa7767622975d37980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:a6:aa:3b:93:cb:3f:49:a0:2a:8c:01:39:
82:c0:47:41:c9:95:ed:cd:61:d0:69:dd:ed:e3:af:
4d:50:5c:db:46:d6:8a:5e:ac:02:96:26:8d:a5:00:
0b:ba:eb:01:0a:d1:b6:e1:d2:7b:7b:a6:0c:4b:e7:
36:71:1e:86:a0:d1:31:83:15:1c:63:a3:e8:3e:a0:
10:8a:a9:62:6e:15:c1:9d:ca:21:6c:18:7b:f4:af:
fb:da:f4:bd:60:bf:72:f2:e0:3b:e3:52:ea:b7:37:
df:55:77:c2:aa:be:94:fc:49:5a:2a:0e:7c:bf:7c:
45:1f:8e:23:de:65:08:51:61:77:96:fc:94:40:bc:
ef:6e:d3:3f:f4:42:64:4f:30:5d:29:4e:bd:04:db:
16:f0:37:16:00:ec:6f:f3:45:37:26:c4:45:31:41:
e6:38:d4:27:95:c1:8e:6a:60:a1:85:6f:d6:b6:45:
d1:69:87:c0:2a:9a:05:92:af:55:f9:89:5f:67:39:
ec:31:77:6c:12:38:d6:dd:2d:2b:09:84:db:34:9d:
c8:56:1d:5b:41:65:db:59:62:b3:66:80:5c:bb:1e:
6b:31:5b:13:bb:67:98:ac:d6:cd:48:93:77:2e:5a:
83:dc:bb:35:93:4d:a8:ca:fb:4b:30:8d:c0:04:65:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:64:D6:0B:8C:D1:F4:67:10:C5:FA:77:67:62:29:75:D3:79:80
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:d2:d0:3a:d7:da:cb:5d:27:1e:f0:f7:dc:3e:25:02:14:
b3:a1:33:59:fc:b1:6d:39:23:79:71:29:0b:c1:f7:17:2a:85:
65:29:da:30:06:ed:06:4c:31:e5:0e:35:cd:dc:0c:73:43:64:
68:aa:55:ef:60:b5:a8:ea:c8:b5:a9:76:c1:7d:08:7b:a4:4f:
4a:bc:ff:37:84:1b:56:3a:86:5c:03:b4:e5:b8:e9:6e:fe:eb:
fc:e9:b3:14:10:a2:35:41:51:1f:28:47:12:e4:b3:dd:a0:90:
79:d3:3e:14:0e:e0:c7:f2:2b:27:bc:ce:85:e8:25:b3:04:07:
36:ea:09:96:ba:94:28:04:a0:ff:6f:30:c5:8d:8f:5b:ab:33:
62:b1:95:e4:a2:6e:0a:40:b0:d5:73:d6:21:d7:09:61:e9:c6:
66:f7:10:a3:ea:78:5d:0f:92:9f:fe:62:52:d9:f2:86:a7:ff:
8b:4f:f5:e7:27:ee:7b:22:e5:80:66:8a:f3:44:17:fd:46:ba:
54:59:9b:9f:e0:93:c1:29:1c:3d:90:2f:58:f3:3f:d3:3c:67:
87:52:44:53:34:14:cd:25:ea:f8:5f:22:dc:56:ff:92:f6:0d:
b8:6e:1c:86:65:7d:28:30:2e:15:d8:7c:7a:eb:6a:0a:a1:d6:
a2:c8:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:17 2026 by rpki-client