Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json)
Hash identifier: 8kC30ZiCpu1e21aNn2wxDIsrplYL/J0SiWBQE7ULKMM=
Subject key identifier: 48:00:A6:D1:EE:F8:93:6F:AB:34:70:32:23:3C:35:94:98:9F:76:DA
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial: 019D26CCBCD0DA49203A28A1CA8FDDCB2705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
Manifest number: 0239
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa (hash: i9+gFVyb3SxyLJJwgR43XfwCTSTrRwfgOhIAHEXtM3I=)
2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: mIRbNlKU0cib6PyQtDPolaSvPZ1sgkOAOORKXDJRxAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bc:d0:da:49:20:3a:28:a1:ca:8f:dd:cb:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=4800a6d1eef8936fab347032233c3594989f76da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:73:69:10:ac:95:56:82:00:a0:76:8f:1b:
d9:39:67:07:76:fa:82:0a:b4:94:79:74:74:aa:a0:
b1:ef:24:fc:e5:78:76:8c:64:cd:28:ad:f9:08:99:
1f:51:eb:77:02:55:4d:fd:b5:ac:74:34:0e:1e:d4:
c0:88:b8:ee:be:83:c8:27:c4:b3:f5:b2:bf:5e:0a:
ae:64:b8:bc:2f:96:28:a5:7a:e2:8d:75:6d:c9:fb:
da:b7:01:b5:50:00:48:a6:35:5b:22:65:c8:c7:26:
5a:63:07:3c:a1:aa:8a:c4:8b:d0:45:db:35:4c:38:
aa:a9:7a:77:5c:bf:bc:79:46:e9:0e:64:35:dd:30:
a9:7b:10:8b:c1:0b:14:68:e2:d8:03:43:5e:af:2e:
45:13:7c:5a:5b:c1:ce:5b:6e:0c:03:91:a9:af:97:
8e:c3:8b:bd:64:2c:26:05:47:1b:2b:08:57:4b:51:
40:cf:7c:81:6b:0e:c5:12:dd:7b:f5:2e:a4:75:94:
c3:c9:2e:41:cc:df:25:a6:98:16:aa:72:96:d6:11:
86:34:7d:25:e5:61:ca:e2:27:e4:9b:63:b2:82:28:
df:2f:45:0e:20:9a:41:95:f6:6f:26:b6:ce:81:c6:
e7:bf:24:7e:56:d4:4a:31:46:c3:25:d7:8d:3b:01:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:A6:D1:EE:F8:93:6F:AB:34:70:32:23:3C:35:94:98:9F:76:DA
X509v3 Authority Key Identifier:
keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:c9:c5:33:74:50:79:d0:a0:e6:19:54:46:ea:ed:af:74:
70:4e:5a:46:4c:9d:d9:cb:f3:01:0c:96:66:26:11:48:10:77:
94:44:65:c4:27:2f:25:b5:ad:27:7c:e9:9c:ae:9b:7c:ad:ec:
5e:17:72:b9:fc:90:c8:f4:5f:5e:a1:22:65:1c:8e:16:cd:dd:
f0:30:83:53:d8:42:a5:68:40:e1:5e:0d:81:12:86:0d:f2:7b:
e2:df:4a:95:64:69:42:d1:7c:69:8d:09:54:4e:74:fa:af:09:
a1:77:7e:51:6a:27:e1:e9:4f:49:75:5c:70:cd:f8:22:f4:c0:
3f:2d:62:fd:a0:b8:62:c9:80:85:9a:99:7f:91:9f:d9:78:23:
57:19:d0:f8:ac:d3:ba:a1:4b:0d:28:49:59:93:25:b5:a7:fa:
42:44:34:15:94:a5:de:1a:c5:f3:be:39:03:af:c8:e6:7b:1e:
90:6d:85:cd:f8:1e:ac:1d:47:a5:47:29:7b:e9:de:b6:07:8b:
bb:c2:74:17:79:04:d6:a3:db:f1:be:63:e9:15:ec:6b:33:7c:
a5:cc:1a:69:57:5f:0e:e9:c8:32:72:54:51:a8:cf:b6:11:7e:
c6:fd:80:2e:60:c7:2b:36:d9:2a:78:a7:41:80:7e:0f:b8:28:
3c:b0:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:24 2026 by rpki-client