
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: zBYJNOu4DWDLZNbjfVyHMBmtHS1eMsGwfdC/IvZozmQ=
Subject key identifier: 12:3B:84:FB:E4:76:9B:0D:DE:43:4F:69:16:BF:38:CC:8F:4C:16:A9
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019D2BF33251A0A96B25C2265C020F72DAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1016
Signing time: Thu 26 Mar 2026 21:00:51 +0000
Manifest this update: Thu 26 Mar 2026 21:00:51 +0000
Manifest next update: Fri 27 Mar 2026 21:00:51 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: VF1pchwXinj9VDBId4sjZq5pMkiyr9WIegH+FXrGEX4=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:32:51:a0:a9:6b:25:c2:26:5c:02:0f:72:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Mar 26 21:00:51 2026 GMT
Not After : Mar 27 21:00:51 2026 GMT
Subject: CN=123b84fbe4769b0dde434f6916bf38cc8f4c16a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:41:ec:9c:1c:58:bf:5f:0b:27:35:a1:65:
54:f1:c5:ca:7c:87:7f:84:8e:3c:6d:bf:fa:92:6e:
c2:e5:2a:98:aa:4f:92:84:7d:da:88:60:7b:e4:2a:
88:c1:09:3b:ac:22:6e:c1:b1:8b:ae:62:84:77:5c:
50:3d:60:3f:33:0d:f3:27:3c:06:c1:6b:43:7f:c5:
83:94:f3:b2:d3:81:f0:0c:c2:cd:0b:a7:63:64:68:
43:f8:c6:82:62:48:d8:fa:8f:55:49:ab:6a:ea:e9:
56:ef:34:e8:3e:c9:47:6a:cf:9c:be:c9:68:f8:b7:
d5:39:fb:63:d6:5b:04:8e:0e:56:85:14:64:f2:cf:
31:55:96:9d:13:55:73:32:96:1b:ee:b5:ea:4f:5e:
e6:5b:83:42:ab:2e:46:c5:52:02:af:6c:12:f1:ce:
ed:e2:6b:cc:7e:fd:99:d9:fe:e5:61:d0:72:bc:2e:
e5:72:37:81:ef:80:64:3c:25:28:13:96:0d:40:05:
b1:d6:3d:8b:06:6c:36:33:1b:65:67:07:7d:5c:0f:
c7:ce:59:3f:c4:6f:62:6b:80:7d:67:09:05:92:70:
34:a4:50:58:91:a2:64:9c:04:4e:79:43:66:a3:2c:
7f:02:cf:22:eb:67:34:bc:82:6c:0f:28:97:b6:67:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:84:FB:E4:76:9B:0D:DE:43:4F:69:16:BF:38:CC:8F:4C:16:A9
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c8:79:2b:88:5d:22:71:77:54:de:04:26:28:24:8b:f3:cf:
c1:df:16:13:f9:09:3c:bb:b0:45:9b:7a:95:5a:bf:23:c4:5d:
54:0f:43:56:c0:59:1c:fa:67:ef:e3:e9:76:d6:9d:46:30:98:
89:32:fc:43:18:4f:42:e9:c5:f1:af:0b:65:4f:10:7c:a0:51:
4d:89:b4:f1:af:20:7b:af:25:7f:87:ec:df:41:4b:c9:11:f3:
5a:6f:2f:dd:08:1d:10:c7:9a:05:da:ec:29:e2:68:4c:1e:cf:
ef:d4:92:b7:bb:c7:38:29:d1:ba:8f:8e:7b:05:eb:c2:c2:92:
f0:fa:20:31:ba:24:d6:81:21:e0:06:33:9d:8e:0d:ac:83:fd:
eb:5b:fa:a2:48:4e:cb:ac:c7:78:d2:20:6f:eb:40:fc:bd:ee:
65:98:70:e5:49:8e:ff:09:03:6b:a0:da:53:76:22:5d:a3:56:
ad:52:5a:39:45:7d:f0:20:a5:90:60:50:4e:4d:aa:5f:c0:50:
3e:b1:ff:83:07:e4:fe:8b:ed:b2:ed:e1:05:9e:16:7b:90:04:
b2:c3:ca:7e:24:58:00:c6:03:34:9a:b7:6f:7b:a8:8e:04:38:
7b:8a:ee:c1:fc:52:90:84:08:71:e4:36:25:ff:5f:04:6c:56:
52:e9:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:50:18 2026 by rpki-client