
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
File: FDOvfHMrNzBikL15lfodb8PcqMk.mft (raw, json)
Hash identifier: 0fxFPOxHfT3VJHOwDolsrreQfts6DBNlWT2tbmTwzqM=
Subject key identifier: FF:97:DB:E9:69:9B:27:EF:7B:DD:6F:10:B4:58:89:97:2E:FF:C6:9D
Authority key identifier: 14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
Certificate issuer: /CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Certificate serial: 019F935C2AD3BD9DB83419A229A1AEEBAAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: FDOvfHMrNzBikL15lfodb8PcqMk.crl (hash: H4/Uk9IIYDHkJs1dqhXjBrXWp1FKRUx6qJGKK/NhtpQ=)
2: XPAo9csIakgnxL1vkDoDw7OBqQY.roa (hash: /BzxC1mTgVHXG35cXVsO81Ky1QleogI+28Bk2r4rk5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2a:d3:bd:9d:b8:34:19:a2:29:a1:ae:eb:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=ff97dbe9699b27ef7bdd6f10b45889972effc69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:0c:0b:4a:c5:a0:e8:80:08:67:c4:6e:f8:
8f:14:ab:25:1d:6f:b3:2a:57:46:33:ba:b3:89:6c:
c5:2d:d8:bd:8a:16:01:c3:42:e2:c4:97:19:06:e8:
77:ea:6b:d9:51:c4:52:ac:ef:c4:3a:dd:74:17:44:
61:69:81:22:35:9a:37:fd:a0:65:81:e0:7d:44:15:
5c:4a:65:75:5a:77:82:c6:d6:2e:b9:39:27:fe:dc:
f5:5f:c4:3a:fe:5b:7f:60:4d:5d:e3:77:7b:da:08:
60:de:62:5c:76:80:f5:4b:19:d3:91:9d:76:3d:65:
eb:50:22:ed:0d:5d:a3:fb:88:75:4f:e6:89:ca:a8:
70:d9:b1:d8:95:fd:f2:e1:6e:7b:8e:31:a4:be:6f:
1a:5c:bc:aa:43:97:a2:4b:2a:34:61:86:4d:e7:4a:
d0:19:f7:dd:17:67:d4:79:75:9e:b2:a9:8c:a6:3d:
e8:8e:bb:04:ea:b7:4a:20:9e:80:b5:77:57:52:91:
0d:12:42:b4:bd:9f:38:1d:5a:7b:d7:7b:36:72:26:
05:e6:3d:74:7f:a0:0c:da:87:7e:b4:f2:e6:7d:b7:
b0:a9:a9:d3:1c:ea:3a:56:c2:88:32:6d:5f:f7:3a:
84:68:31:bc:82:8e:1a:4c:d7:17:cd:36:77:6d:5f:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:DB:E9:69:9B:27:EF:7B:DD:6F:10:B4:58:89:97:2E:FF:C6:9D
X509v3 Authority Key Identifier:
keyid:14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:44:81:36:e6:46:5a:07:01:10:7b:c5:3c:10:85:21:f4:
f5:e0:8d:ef:e1:a1:6f:c9:5e:8a:77:ef:6f:03:a3:83:33:b1:
c1:41:b1:ed:b4:5d:5b:bd:7d:0b:f2:63:ad:6e:1d:f4:7e:b0:
29:2a:09:59:75:8d:b9:bf:bf:2c:6f:c2:c4:97:1b:82:3e:73:
ee:d4:89:82:01:52:2b:5b:52:5c:dd:d0:20:f9:8d:56:f6:2b:
e6:a3:c1:fc:b5:a7:a3:2c:ee:23:c7:f1:df:81:96:36:eb:e4:
22:96:0b:57:f2:cf:f1:eb:e0:31:f6:8f:ab:0e:8b:d4:ef:80:
93:31:37:91:e9:f1:55:8e:bc:21:1c:81:72:5a:6e:76:7b:d8:
bc:30:13:6b:17:df:59:ac:89:01:fd:10:c2:e4:d9:19:e9:01:
c7:a4:57:e3:e8:60:e2:3f:bd:4c:ba:b9:a9:ba:d1:57:3b:97:
37:9c:cb:b3:d5:5d:11:e1:13:bd:28:cd:5d:7c:2d:b6:7f:7a:
27:53:97:a6:a8:09:1a:0e:82:1a:56:54:9c:02:eb:b1:fc:13:
35:d9:9c:62:95:b6:b0:15:06:31:e4:c2:85:00:23:cf:1e:c2:
4b:64:49:ea:5c:35:7c:09:d2:5a:32:7f:06:ab:fe:f8:0d:75:
ac:31:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:59 2026 by rpki-client