Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier: iaWWXTKDjr0s9+ROFgIW9fRYPzs8JuuZB+LPQB3BuVQ=
Subject key identifier: 35:42:8D:54:15:5F:83:78:77:23:B4:6D:24:6C:91:4D:6E:92:39:01
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 019D273B29E26DC5B078C2055B24A24FE0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number: 15D3
Signing time: Wed 25 Mar 2026 23:01:21 +0000
Manifest this update: Wed 25 Mar 2026 23:01:21 +0000
Manifest next update: Thu 26 Mar 2026 23:01:21 +0000
Files and hashes: 1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: kfB86YKOrN2cB88/668B9mE5/GAj2DXPLkMIB0iXKe0=)
4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:29:e2:6d:c5:b0:78:c2:05:5b:24:a2:4f:e0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Mar 25 23:01:21 2026 GMT
Not After : Mar 26 23:01:21 2026 GMT
Subject: CN=35428d54155f83787723b46d246c914d6e923901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:72:d8:3f:27:dd:b9:5c:d9:c2:89:9c:45:
64:cf:1c:d4:cf:f1:70:4a:c5:16:86:7b:0d:48:6b:
d9:2d:e7:8d:b4:73:b5:54:ba:91:6b:a2:38:d9:df:
60:42:86:5b:60:ec:66:ee:0d:42:3e:66:37:bd:71:
2e:2b:b3:c2:02:c0:d1:ad:62:20:aa:16:56:95:6c:
e5:4d:b7:f2:85:1b:97:96:62:1d:54:0d:ae:b1:bf:
db:78:1b:bf:ef:7e:e3:c9:5d:eb:c4:61:c6:f1:04:
7e:fd:9a:34:9f:97:b0:6a:f4:73:61:af:26:f3:64:
33:53:17:58:28:13:92:f8:06:cc:1f:9d:77:3a:0b:
7f:a3:92:45:d7:60:cf:75:69:40:77:18:1e:e0:2d:
04:1a:01:25:2d:54:71:f3:64:de:88:a4:25:56:13:
0a:78:b1:5b:6c:d9:86:8a:47:b1:fd:73:7e:31:66:
a4:c8:a2:2f:9b:32:54:a1:54:89:bc:c9:4b:77:54:
f1:0b:e5:e4:04:9a:69:dd:66:0c:c9:3a:05:56:fb:
cd:95:03:30:2a:a6:b9:63:1b:14:03:fc:0f:43:d8:
7b:81:3a:f7:cb:9a:10:02:af:a5:25:bc:ca:d8:95:
70:aa:d7:7f:51:68:9e:e8:f8:b6:2c:9b:45:42:ce:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:8D:54:15:5F:83:78:77:23:B4:6D:24:6C:91:4D:6E:92:39:01
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f5:8a:89:61:3c:95:15:66:fe:fd:1e:0f:19:d1:30:d9:38:
72:bf:fd:ab:a2:4e:70:7a:33:3c:59:13:86:10:e9:cd:7c:c2:
d1:36:33:17:1a:64:50:00:4a:ef:e7:0b:6e:4c:90:e2:2b:e7:
26:16:f1:a5:dc:3d:6b:de:a8:9a:1a:a7:f7:57:21:ed:87:93:
a0:38:18:d4:bb:fd:dc:15:36:dc:97:82:91:d5:2c:98:58:81:
0c:a3:04:6b:7e:f2:ed:e1:8a:23:a2:b0:89:c8:8d:fe:e5:ed:
c5:1c:2c:09:3f:d4:1b:00:09:66:2a:ba:87:17:7f:7b:37:cc:
20:c7:ed:67:95:f9:4b:22:ae:ac:cb:86:23:55:95:f9:12:73:
78:3a:be:3b:5d:dd:dd:76:4f:33:94:52:31:14:4e:bf:b1:3c:
ab:b1:10:31:eb:56:9d:f9:7c:4a:92:22:96:db:51:01:fb:45:
0d:04:17:1a:0b:2a:17:ab:7a:05:6e:b6:34:ed:03:4a:36:01:
54:58:c4:9d:ba:5a:ab:3f:88:1e:be:47:4d:90:cf:a8:aa:af:
f1:3e:09:94:a5:45:ea:ec:8b:69:1b:05:55:40:52:46:c2:80:
87:b8:a9:3e:d9:c6:cd:f5:3d:2c:04:98:31:9e:28:08:2e:c4:
c0:7e:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:13 2026 by rpki-client