
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: Erfsv7JOnk5J8Rwjbfd8spblbB/AuPHGdBYUF/wBjOc=
Subject key identifier: D5:88:BF:B6:96:35:9D:6F:B2:BE:4C:17:CB:26:04:DF:58:EA:38:55
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019E205ADBDB346406E374BE439AE5B0DB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 03F1
Signing time: Wed 13 May 2026 08:01:25 +0000
Manifest this update: Wed 13 May 2026 08:01:25 +0000
Manifest next update: Thu 14 May 2026 08:01:25 +0000
Files and hashes: 1: JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa (hash: GTd8cCkoiW0FGNR73NG1lnLnp97HhBUrrNAzm3q5ilE=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: OvcjfxJGPYGHaOs1UGGtCos8FP9UnptpF7iGw1q9D9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:db:db:34:64:06:e3:74:be:43:9a:e5:b0:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: May 13 08:01:25 2026 GMT
Not After : May 14 08:01:25 2026 GMT
Subject: CN=d588bfb696359d6fb2be4c17cb2604df58ea3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:46:2d:22:6c:74:db:c0:a9:79:a7:5b:aa:
87:13:ac:bc:a2:97:fb:01:ae:82:8e:05:bc:32:25:
8e:7f:0d:8a:a5:2b:75:59:ca:39:af:9a:c2:59:1c:
7c:ec:03:f6:8f:f7:a0:0c:8e:54:63:da:9a:11:93:
69:ad:37:be:de:2a:bd:38:3c:d2:11:78:a7:f5:2d:
6d:9f:31:4d:ef:fe:74:dc:c0:2f:a0:ce:e1:13:27:
32:ee:45:a2:7e:a7:95:fe:c7:ac:4c:40:da:c2:4a:
4f:a1:99:b7:77:a3:08:1e:29:cb:e0:ee:26:ea:62:
b9:53:45:d8:4a:f5:b5:83:cd:86:d8:d6:06:b1:ca:
3c:a7:6b:4c:cb:65:80:77:b7:af:20:af:92:63:e8:
bd:df:b3:30:7a:f1:92:7f:30:79:6c:d0:85:8a:84:
dd:64:21:c3:2d:3d:bc:c3:5d:a0:f9:6c:3c:ea:92:
e6:c5:22:49:15:0c:1c:d9:af:dd:6a:ec:60:43:04:
02:91:1a:e0:c4:a6:44:31:94:0c:6c:5e:b8:8c:6a:
54:6c:e0:1c:d1:48:fb:bf:d1:7d:b5:d7:18:39:c3:
6e:fa:ef:60:2a:a0:10:d5:be:af:c5:b3:ee:2d:a7:
ea:9d:b7:40:23:cc:ec:82:2a:13:42:8e:d1:91:24:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:BF:B6:96:35:9D:6F:B2:BE:4C:17:CB:26:04:DF:58:EA:38:55
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:ce:a3:9f:68:da:3d:16:2a:10:a1:a7:7e:8c:b4:f1:f6:
36:a1:b0:29:7b:29:bc:d2:ca:89:72:c0:48:67:f3:57:86:d2:
d9:53:39:ec:d2:5b:16:75:8a:3c:84:c6:6a:1c:7c:7e:2c:d0:
98:5f:69:d9:98:b6:00:ab:57:c6:f4:27:73:b3:81:86:53:d1:
ad:36:46:61:62:d6:d6:54:09:7f:84:4a:b1:75:37:a9:e7:1f:
d6:ff:fb:c2:76:bc:66:68:7d:93:f4:9d:d1:bf:1d:fc:c0:dc:
63:ba:c4:aa:4b:f5:49:fe:48:f7:14:1e:67:6e:1a:8b:2f:cb:
4d:da:0d:ab:91:4f:53:40:24:89:e6:39:63:c1:4c:34:4f:d2:
1a:47:c4:f3:2e:9a:ea:6d:25:16:f4:e4:bd:08:59:6a:b1:90:
6a:92:4e:51:05:08:ba:97:3e:8c:1d:ec:2c:56:3a:ce:27:e4:
5f:86:ab:04:34:62:46:79:40:a4:e1:53:1f:a8:b8:ff:42:f2:
94:04:1d:49:30:59:aa:b2:7a:a4:ed:66:1b:bb:33:e6:d2:ff:
76:6c:6c:90:3c:30:e5:65:e3:b2:f4:06:c3:1d:4e:50:f6:19:
d3:5a:2a:63:b8:e9:f0:79:f9:af:46:42:df:88:da:61:06:84:
3f:79:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:14:09 2026 by rpki-client