
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: eGIeYfIODu6IrbW4NXVIifHAvV2EHM+a3YDOV0en1os=
Subject key identifier: 43:68:12:F8:B9:8A:92:2C:CB:9C:AA:DB:34:3D:F9:C3:ED:E7:1C:79
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 019D32637434FAC73A9ED3B119663B8195C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 0B47
Signing time: Sat 28 Mar 2026 03:01:11 +0000
Manifest this update: Sat 28 Mar 2026 03:01:11 +0000
Manifest next update: Sun 29 Mar 2026 03:01:11 +0000
Files and hashes: 1: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (hash: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc=)
2: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: KMsnJH0OfmB11rSTbcr2Yb+JboHUS0VCVURmOtZGXMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:74:34:fa:c7:3a:9e:d3:b1:19:66:3b:81:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Mar 28 03:01:11 2026 GMT
Not After : Mar 29 03:01:11 2026 GMT
Subject: CN=436812f8b98a922ccb9caadb343df9c3ede71c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:d9:2f:86:83:c1:7d:7c:c3:84:a6:98:af:
d0:d9:40:54:e6:45:4f:7a:79:bb:63:aa:4d:90:1a:
9f:3b:5b:a9:7e:a8:79:9f:4e:ec:7d:f8:ef:94:8e:
10:b9:36:22:39:e1:24:55:d4:9b:6a:af:cf:4f:32:
23:ea:54:af:25:a6:52:7f:7e:71:f8:98:a2:5b:f2:
3b:50:d1:3d:74:9a:61:54:80:b4:4f:b2:53:f6:b5:
3b:3a:4a:8b:72:0e:76:74:b3:86:68:53:42:9f:c7:
45:3d:80:bf:36:d2:df:9b:74:c4:81:93:52:4a:89:
5a:f6:09:79:be:b3:1c:23:c1:e1:64:b3:53:6e:76:
75:d7:51:24:47:d8:49:43:ba:71:71:80:82:94:81:
78:17:b2:45:ce:31:18:52:32:2a:a7:e2:63:2f:58:
e2:3f:9f:68:8f:9a:c9:29:9a:3a:a5:5c:c6:46:32:
e6:95:26:be:1f:b7:f1:54:6e:62:73:40:08:d9:1f:
43:4a:b0:74:f1:f7:1c:00:6b:d7:1a:fc:ae:41:47:
1e:9b:f9:20:7a:a1:ca:0d:58:aa:7f:82:2f:25:30:
03:54:9f:8c:06:64:6c:c5:3a:d9:48:0d:c0:19:31:
ec:6b:33:a3:c8:7c:2a:09:52:5b:bd:e6:6a:cc:5e:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:12:F8:B9:8A:92:2C:CB:9C:AA:DB:34:3D:F9:C3:ED:E7:1C:79
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3e:3e:da:59:80:b9:fa:61:04:08:07:21:cd:02:42:92:5b:
1b:a5:30:4c:7a:a6:ab:0e:17:fa:94:85:33:c0:c3:d6:d0:21:
b8:cc:21:1a:70:e4:b5:88:7f:a9:4d:f0:1a:61:04:1d:71:d3:
7d:ca:04:40:79:47:6e:d8:6e:6b:eb:26:02:22:e7:8f:27:f7:
84:57:25:d4:0d:c8:6c:dc:d5:02:3f:8b:c8:ea:30:6a:07:5a:
7d:36:2c:06:f3:84:16:42:30:6a:10:2f:f6:44:6c:8e:78:85:
39:8d:c9:1e:99:b7:ce:97:fd:e7:f0:a0:f4:b8:07:08:32:28:
be:25:18:6e:77:2f:51:93:8d:b4:73:88:89:8a:25:90:31:bd:
78:29:bc:7a:cc:91:24:4f:80:41:f9:17:dc:ec:76:b4:d2:d5:
0a:4a:38:10:2c:20:a4:f8:93:63:de:00:44:fc:09:93:63:75:
67:9c:6e:1d:7d:cd:f0:ba:cf:34:c7:25:73:2e:e6:27:47:77:
94:4e:a0:e3:e8:4b:78:75:ec:03:bd:9f:0a:dc:f2:0d:96:e0:
55:45:b2:f9:92:59:53:4c:0b:70:24:5f:0b:0f:91:1c:dd:08:
5b:05:83:f5:1b:df:a9:2c:67:d9:98:94:c7:63:d3:3a:c2:5f:
5b:07:88:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yY3Q0+sc6ntOxGWY7gZXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy
ZDZmZjkwHhcNMjYwMzI4MDMwMTExWhcNMjYwMzI5MDMwMTExWjAzMTEwLwYDVQQD
Eyg0MzY4MTJmOGI5OGE5MjJjY2I5Y2FhZGIzNDNkZjljM2VkZTcxYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSfZL4aDwX18w4SmmK/Q2UBU5kVP
enm7Y6pNkBqfO1upfqh5n07sffjvlI4QuTYiOeEkVdSbaq/PTzIj6lSvJaZSf35x
+JiiW/I7UNE9dJphVIC0T7JT9rU7OkqLcg52dLOGaFNCn8dFPYC/NtLfm3TEgZNS
Sola9gl5vrMcI8HhZLNTbnZ111EkR9hJQ7pxcYCClIF4F7JFzjEYUjIqp+JjL1ji
P59oj5rJKZo6pVzGRjLmlSa+H7fxVG5ic0AI2R9DSrB08fccAGvXGvyuQUcem/kg
eqHKDViqf4IvJTADVJ+MBmRsxTrZSA3AGTHsazOjyHwqCVJbveZqzF59owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENoEvi5ipIsy5yq2zQ9+cPt5xx5MB8GA1UdIwQY
MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt
MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm
LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj4+2lmA
ufphBAgHIc0CQpJbG6UwTHqmqw4X+pSFM8DD1tAhuMwhGnDktYh/qU3wGmEEHXHT
fcoEQHlHbthua+smAiLnjyf3hFcl1A3IbNzVAj+LyOowagdafTYsBvOEFkIwahAv
9kRsjniFOY3JHpm3zpf95/Cg9LgHCDIoviUYbncvUZONtHOIiYolkDG9eCm8esyR
JE+AQfkX3Ox2tNLVCko4ECwgpPiTY94ARPwJk2N1Z5xuHX3N8LrPNMclcy7mJ0d3
lE6g4+hLeHXsA72fCtzyDZbgVUWy+ZJZU0wLcCRfCw+RHN0IWwWD9RvfqSxn2ZiU
x2PTOsJfWweIfg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:08 2026 by rpki-client