Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: ze9BS4/aeNFTrrAyIqGRvQZLi0vlZg0x8az4NdeUOvA=
Subject key identifier: 5C:A7:13:87:E2:E4:E2:E5:19:D3:5D:50:DA:FD:9B:88:45:CA:4B:3C
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019D27DF7604A60F73E4CA174AEEA227E93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0716
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: uYP16n0H53PY0iaSS5UQPX3A5b50CSxCtrbT4eh3C5I=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:76:04:a6:0f:73:e4:ca:17:4a:ee:a2:27:e9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=5ca71387e2e4e2e519d35d50dafd9b8845ca4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:35:f4:03:f8:a6:5a:1b:52:8d:09:6a:f9:
d5:1a:bd:19:2c:d6:65:08:ab:40:e6:a1:81:cc:ad:
ba:f6:ea:56:b6:29:d0:0a:6d:93:25:11:f5:74:1c:
21:c0:20:1d:d3:83:45:3e:5f:f0:62:53:a1:71:fa:
99:b6:8b:30:7b:42:9d:17:d2:cb:f4:bc:b6:e3:97:
eb:25:32:44:b7:7b:23:3d:ff:c7:2f:84:a5:14:84:
89:9c:45:76:14:76:de:fb:1a:97:d0:ba:ae:46:49:
cc:80:ae:b8:2f:a2:8a:37:4d:53:b6:34:36:0e:27:
c6:37:5b:65:6e:75:a4:9d:3a:19:62:91:a2:96:b6:
3e:59:33:85:c4:5d:46:c3:b1:e4:6a:18:38:f7:23:
d7:78:e7:25:d1:3e:81:cf:72:7b:de:f8:0b:ca:f2:
13:ea:cd:00:28:be:88:d5:c1:0b:ea:3a:36:e9:c7:
73:5f:64:51:7d:26:45:71:5f:80:2c:7e:5c:0b:fe:
ae:cc:c9:ac:70:6a:ee:15:1c:98:c2:d7:ea:4e:e0:
50:68:1f:f4:c9:81:c2:33:95:ab:26:bd:12:3e:50:
c3:95:75:54:1f:6e:2f:34:28:16:f4:1f:93:67:32:
65:18:5a:42:c9:27:d5:e9:04:bb:74:80:ba:25:39:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:13:87:E2:E4:E2:E5:19:D3:5D:50:DA:FD:9B:88:45:CA:4B:3C
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:81:ca:02:7a:e2:42:5e:af:f4:a5:67:2d:62:00:7d:60:
05:11:e1:66:77:a9:90:5f:ff:f2:10:0f:54:96:bc:85:92:72:
25:f2:91:4f:71:f7:49:1b:84:48:d1:66:d9:06:56:7f:ed:e2:
52:d4:c3:c8:4e:f1:5d:72:e6:8e:bf:07:7c:53:26:4f:4d:d7:
0d:eb:ad:a4:cc:c9:03:23:d2:f8:54:d8:68:2b:03:ae:a0:b1:
d4:0a:33:e0:2e:78:a3:94:78:e9:6f:ae:af:19:69:29:f0:a6:
98:44:eb:b2:b6:09:2e:b4:f0:db:32:82:41:28:21:52:c2:42:
c3:b0:18:f5:2e:1b:ed:7c:58:a5:6d:71:0a:d3:12:14:08:23:
fd:c1:9a:38:fe:e5:ad:ea:50:5d:97:7f:53:55:38:5d:b2:c4:
52:aa:5e:90:0b:c7:f8:05:90:d5:43:37:9a:e8:cc:65:87:b3:
25:c8:6c:a8:df:b7:e4:cc:ea:1d:26:05:27:92:2e:2e:a6:52:
46:d4:04:88:82:27:de:17:6d:9e:34:ca:8e:a4:dd:27:9e:60:
40:f2:e5:6d:1f:f1:0f:cb:11:c2:4a:28:56:55:c4:00:6b:23:
b8:16:db:07:35:98:2d:1b:86:d2:f5:82:23:ff:dc:b8:0f:4b:
06:08:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:01 2026 by rpki-client