Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: O91LN0hNKCgGz0ZNwA3j/3KMMHwOiC5pxKC99Ex+G5k=
Subject key identifier: CD:D5:CB:8B:2D:DF:69:FC:05:CB:53:52:EA:9D:D4:80:A4:8A:B2:AD
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 019D296167A74AAD2950226856242E7440D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: 98BAvvixkFD65PMuGiGPQ3almBb/NLWamMn+pGfF6s8=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:67:a7:4a:ad:29:50:22:68:56:24:2e:74:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=cdd5cb8b2ddf69fc05cb5352ea9dd480a48ab2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:b3:ce:d4:c1:50:f0:cd:4c:b6:9e:d1:5c:
e4:a5:2b:aa:ac:21:30:9e:c9:b0:23:5c:2d:36:e9:
db:19:8c:63:c7:53:63:dd:26:af:c6:f8:8a:8f:0f:
69:da:74:e2:da:5c:af:55:dd:28:68:af:ea:41:09:
a5:b4:c2:cf:74:79:79:7d:1f:8c:55:07:c8:68:5e:
c3:78:c3:53:c0:d9:b8:0c:70:5a:6b:1b:c0:24:c1:
4d:5c:f6:15:c6:d3:0c:1c:fd:e4:4a:75:02:3a:8f:
ee:05:14:63:7f:b1:3e:6e:f4:36:3d:b2:94:a0:02:
ca:7b:0f:fb:80:0e:a0:74:f3:a6:1d:1d:cf:88:d6:
a5:a8:35:e0:71:59:3e:8d:a7:15:f6:4a:0b:6b:bd:
95:29:1b:4d:d3:19:15:79:ed:11:29:ac:55:e5:f1:
06:6a:5a:38:4f:e2:7d:ca:41:6d:61:40:eb:f7:29:
d9:a2:ec:ee:f1:2d:0a:d1:dd:2a:b9:64:ac:99:1e:
25:3b:9b:ca:79:b5:8d:93:7b:26:55:9d:58:79:8a:
da:a2:81:49:63:b2:8a:7a:21:dc:13:55:96:ee:f4:
3f:8f:64:ab:19:26:b9:8f:0a:a1:48:05:70:5a:7a:
74:ea:3a:49:82:e7:9e:cc:ca:f7:1d:45:d4:35:b0:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:CB:8B:2D:DF:69:FC:05:CB:53:52:EA:9D:D4:80:A4:8A:B2:AD
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:28:a8:e5:23:7d:ab:23:44:08:a1:9e:f5:bd:d5:6d:9e:8e:
85:fa:29:5c:62:71:3e:10:e5:7b:98:de:fd:d1:1d:90:74:35:
db:22:0b:b9:09:6b:ad:b3:ac:33:49:aa:c7:44:97:59:ec:d0:
e1:6b:1a:1d:83:d1:bc:c1:28:8c:c2:dc:f1:df:b2:23:ea:e2:
88:06:76:5c:25:14:cf:bc:09:cc:f1:ba:8c:80:3c:56:4d:2e:
67:00:1e:dc:37:de:6c:af:aa:6c:3e:07:5b:c5:9a:e4:cb:50:
4a:16:5c:28:24:10:0b:cf:f8:a8:dd:63:b3:e1:f2:51:d4:f0:
7d:dc:bd:e5:dd:47:fa:cf:56:27:fa:99:57:6e:dc:c4:c5:aa:
a0:a7:c0:31:03:93:f0:b2:0e:32:a4:bc:11:ad:9c:9f:0a:3d:
86:38:74:f3:e8:58:95:2d:71:1e:ac:61:69:01:8d:9b:0b:54:
ac:02:47:f1:b7:29:f5:10:bf:ec:23:a0:08:54:7e:8e:aa:e1:
53:ca:bf:83:da:a9:9d:3f:3f:17:dc:9a:36:f9:9a:5a:c4:33:
f0:74:2f:f5:f3:79:42:ab:53:22:47:c8:f4:8d:da:30:fa:25:
4a:04:c8:c1:69:9e:28:db:12:37:3f:2e:b3:a4:4c:b7:ea:78:
dd:ca:94:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYWenSq0pUCJoViQudEDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmUwZDAyNGNkZGJhZjg2ODIyOTEyMjE1ODk3MTQ3MmIy
NGNiNGQwHhcNMjYwMzI2MDkwMjIyWhcNMjYwMzI3MDkwMjIyWjAzMTEwLwYDVQQD
EyhjZGQ1Y2I4YjJkZGY2OWZjMDVjYjUzNTJlYTlkZDQ4MGE0OGFiMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPuzztTBUPDNTLae0VzkpSuqrCEw
nsmwI1wtNunbGYxjx1Nj3SavxviKjw9p2nTi2lyvVd0oaK/qQQmltMLPdHl5fR+M
VQfIaF7DeMNTwNm4DHBaaxvAJMFNXPYVxtMMHP3kSnUCOo/uBRRjf7E+bvQ2PbKU
oALKew/7gA6gdPOmHR3PiNalqDXgcVk+jacV9koLa72VKRtN0xkVee0RKaxV5fEG
alo4T+J9ykFtYUDr9ynZouzu8S0K0d0quWSsmR4lO5vKebWNk3smVZ1YeYraooFJ
Y7KKeiHcE1WW7vQ/j2SrGSa5jwqhSAVwWnp06jpJgueezMr3HUXUNbDAmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3Vy4st32n8BctTUuqd1ICkirKtMB8GA1UdIwQY
MBaAFBb+DQJM3br4aCKRIhWJcUcrJMtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYt
NWIyZjkwZGY3OTZkLzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYtNWIyZjkwZGY3OTZk
LzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCio5SN9
qyNECKGe9b3VbZ6OhfopXGJxPhDle5je/dEdkHQ12yILuQlrrbOsM0mqx0SXWezQ
4WsaHYPRvMEojMLc8d+yI+riiAZ2XCUUz7wJzPG6jIA8Vk0uZwAe3DfebK+qbD4H
W8Wa5MtQShZcKCQQC8/4qN1js+HyUdTwfdy95d1H+s9WJ/qZV27cxMWqoKfAMQOT
8LIOMqS8Ea2cnwo9hjh08+hYlS1xHqxhaQGNmwtUrAJH8bcp9RC/7COgCFR+jqrh
U8q/g9qpnT8/F9yaNvmaWsQz8HQv9fN5QqtTIkfI9I3aMPolSgTIwWmeKNsSNz8u
s6RMt+p43cqUxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:06 2026 by rpki-client