Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: I8HMYxXWTDDET0QHBujAjuupl8nP9+uazun+hZPF7L8=
Subject key identifier: D7:61:BF:76:53:D2:5C:C9:49:A3:0F:43:32:54:E4:68:4E:0A:A0:BA
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 019D269661FEE731B175D14DAA8EF0FCB2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0F1F
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: lwqF6x3G1tLF6nDUkCnGVT8425Z7cz56v+0aZ3hnh+k=)
2: dxP5s46cfdGtCEKUTwZwMAVD5-o.roa (hash: bdBmbDABGKMk3f6j5ouSrfAperYeR4KSkhr2BdJOd/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:61:fe:e7:31:b1:75:d1:4d:aa:8e:f0:fc:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=d761bf7653d25cc949a30f433254e4684e0aa0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:92:77:36:b5:d0:7e:05:db:b7:85:19:9e:
30:53:ee:6f:7b:2f:5c:9b:fb:2a:6d:0c:bc:fb:57:
7d:fe:d2:10:aa:cd:7d:2a:ed:2f:fd:ac:3f:41:2c:
63:42:24:8b:e4:9b:44:66:b5:f7:9f:23:d6:c3:1c:
ab:17:b1:d1:13:74:16:38:02:4d:7c:fc:1f:0b:76:
10:d6:f9:6d:e9:6d:91:70:a2:74:fa:e9:fa:63:2b:
ed:eb:80:c7:2a:d3:cb:f2:0a:83:40:b4:31:2d:21:
79:51:b6:62:95:0e:f6:d8:e6:f7:f6:0c:bb:a6:98:
ff:76:c3:5b:1e:97:81:63:37:09:00:20:9d:8f:27:
9b:72:d2:03:f8:eb:70:b2:0d:d2:84:7f:fc:83:a9:
de:5a:96:77:c1:1b:f4:d3:ea:32:07:a3:cb:e5:a5:
5a:de:06:e6:d7:b1:82:cd:0f:e5:1d:d5:ce:e5:d9:
89:5a:19:c6:aa:ca:36:ca:b6:c2:bb:02:4f:55:ed:
b9:d0:26:88:c6:6a:36:1d:9b:f6:65:03:3c:c8:63:
71:b2:c2:89:5a:9d:a8:55:32:77:e0:97:ce:d4:de:
ba:41:bb:8a:30:41:f0:a6:f2:6a:43:5c:0e:4f:a8:
d3:01:77:2c:a1:89:5c:59:66:7f:56:dc:44:05:52:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:BF:76:53:D2:5C:C9:49:A3:0F:43:32:54:E4:68:4E:0A:A0:BA
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:5d:cc:c6:4a:e3:d4:c2:7b:01:1d:52:fb:22:39:a8:ce:
9f:c1:00:c2:e7:e1:66:1e:55:1f:b9:0e:2d:32:37:f5:56:1d:
9f:6c:1a:e5:1d:40:b6:54:1c:fd:72:59:42:9b:d4:fd:fa:5b:
7c:ad:d0:de:e4:7b:33:d6:65:9d:2b:b5:80:83:71:1f:76:57:
a5:45:86:be:19:38:26:f6:d7:31:e9:0f:2a:58:3d:1a:25:2e:
54:5f:32:05:c1:bb:d7:77:0c:7d:07:a4:a7:8c:f6:c2:e1:07:
d6:db:b1:86:18:70:b1:a3:56:1e:9b:d2:27:98:e6:e7:04:1e:
f2:e1:84:49:4f:6f:83:5a:96:95:d5:4b:88:14:b7:7b:dc:24:
d7:92:1f:f2:dc:4c:d7:a5:c5:29:4b:76:57:09:f4:80:d2:6d:
90:af:58:e7:a7:48:ec:4e:5a:b6:5b:d6:d7:de:2f:64:5c:c9:
e8:dc:ab:f3:f3:00:f6:ef:9c:88:13:18:d5:9d:18:d7:63:f0:
18:e8:e1:fb:23:25:31:19:43:73:55:33:3a:06:78:da:5f:ba:
ee:f3:cb:31:f9:a6:08:3d:a0:33:aa:0e:20:5a:2e:62:19:2f:
18:5f:b3:03:87:bb:86:1c:27:5a:e0:90:b7:44:17:48:f6:7b:
f4:db:47:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmH+5zGxddFNqo7w/LKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWUzMzBjZmEyNmZkNDRkNDI5NGZjZGJkZGZiZDg5NTEw
YzZhNDgwHhcNMjYwMzI1MjAwMTIyWhcNMjYwMzI2MjAwMTIyWjAzMTEwLwYDVQQD
EyhkNzYxYmY3NjUzZDI1Y2M5NDlhMzBmNDMzMjU0ZTQ2ODRlMGFhMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2eSdza10H4F27eFGZ4wU+5vey9c
m/sqbQy8+1d9/tIQqs19Ku0v/aw/QSxjQiSL5JtEZrX3nyPWwxyrF7HRE3QWOAJN
fPwfC3YQ1vlt6W2RcKJ0+un6Yyvt64DHKtPL8gqDQLQxLSF5UbZilQ722Ob39gy7
ppj/dsNbHpeBYzcJACCdjyebctID+Otwsg3ShH/8g6neWpZ3wRv00+oyB6PL5aVa
3gbm17GCzQ/lHdXO5dmJWhnGqso2yrbCuwJPVe250CaIxmo2HZv2ZQM8yGNxssKJ
Wp2oVTJ34JfO1N66QbuKMEHwpvJqQ1wOT6jTAXcsoYlcWWZ/VtxEBVJrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdhv3ZT0lzJSaMPQzJU5GhOCqC6MB8GA1UdIwQY
MBaAFGxeMwz6Jv1E1ClPzb3fvYlRDGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMt
ZGEyMzEyYjY1YTUwLzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWFiY2QtZTZlOS00ZjQzLWJhNmMtZGEyMzEyYjY1YTUw
LzEvYkY0ekRQb21fVVRVS1VfTnZkLTlpVkVNYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagJdzMZK
49TCewEdUvsiOajOn8EAwufhZh5VH7kOLTI39VYdn2wa5R1AtlQc/XJZQpvU/fpb
fK3Q3uR7M9ZlnSu1gINxH3ZXpUWGvhk4JvbXMekPKlg9GiUuVF8yBcG713cMfQek
p4z2wuEH1tuxhhhwsaNWHpvSJ5jm5wQe8uGESU9vg1qWldVLiBS3e9wk15If8txM
16XFKUt2Vwn0gNJtkK9Y56dI7E5atlvW194vZFzJ6Nyr8/MA9u+ciBMY1Z0Y12Pw
GOjh+yMlMRlDc1UzOgZ42l+67vPLMfmmCD2gM6oOIFouYhkvGF+zA4e7hhwnWuCQ
t0QXSPZ79NtHWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:39 2026 by rpki-client