Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: CBmAJObXbzdeu+ShObaQcoSJ3zQ91rUOagcOT9Qa1qU=
Subject key identifier: 43:F3:41:72:5D:90:CF:51:DD:04:E8:0B:6F:FD:82:D1:16:94:5C:10
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019D2A04CF1619C5ACA09C24F0451AE32E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 1015
Signing time: Thu 26 Mar 2026 12:00:51 +0000
Manifest this update: Thu 26 Mar 2026 12:00:51 +0000
Manifest next update: Fri 27 Mar 2026 12:00:51 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: N8ppJFXkZDhoqKV5AXN80z4L/nHv5zr8H0c2C4wMOvg=)
2: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
3: _GRNAQTm72gHQq3bL7B41p2YrHs.roa (hash: rvspb8Z2lGqTsEE3S985n0zOGBc3jLtF+UnFjeWtBHI=)
4: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:cf:16:19:c5:ac:a0:9c:24:f0:45:1a:e3:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Mar 26 12:00:51 2026 GMT
Not After : Mar 27 12:00:51 2026 GMT
Subject: CN=43f341725d90cf51dd04e80b6ffd82d116945c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:61:43:b2:0e:fb:f7:4d:aa:6c:63:bd:71:
0e:72:75:3a:5c:23:58:ca:0d:00:b0:bb:4d:9b:64:
07:48:1f:d7:1a:57:58:1d:f9:67:25:a0:31:32:e5:
b6:17:ab:1b:c1:0b:bd:41:de:07:d4:37:90:65:c3:
4c:19:dd:79:1a:b8:87:32:fa:1c:8e:65:d5:69:49:
5f:08:87:a8:e8:46:d3:c3:ef:d7:f2:6c:4d:11:53:
3f:5a:58:ae:1d:f5:8b:93:49:90:1e:b5:49:0c:b9:
1e:d3:ab:85:41:7a:85:83:40:33:7b:e4:e3:63:af:
80:cd:b5:8f:ec:84:5f:d5:1d:b7:31:35:3b:2e:dd:
7e:be:a0:23:b1:c4:a4:44:30:d6:08:68:7a:50:5b:
f8:98:35:fa:f7:e7:9f:5e:f8:0a:fa:e6:19:42:32:
23:61:f5:d1:b7:d9:64:4d:97:90:0a:3f:c1:69:98:
33:1b:0e:f7:e5:c8:c4:9c:e7:43:75:fa:c2:72:59:
70:84:e5:29:0b:e7:bc:e1:f8:51:22:43:1d:74:6e:
09:35:0f:50:66:25:20:10:3f:90:4a:85:35:63:07:
7d:ab:ae:07:f1:9c:52:62:e4:7b:b9:8b:45:fe:2d:
01:0a:96:51:24:51:02:a1:2e:31:3b:4e:63:e7:d7:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:41:72:5D:90:CF:51:DD:04:E8:0B:6F:FD:82:D1:16:94:5C:10
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:f9:24:c2:95:b9:c4:57:81:54:78:de:2b:62:8b:92:15:
93:77:8b:9b:e3:ba:a4:f4:32:73:60:aa:83:03:d9:6a:0f:dc:
f6:02:8f:cd:2e:64:83:19:50:29:78:de:d4:21:bb:0d:86:0d:
9a:cc:8c:1e:f0:c4:6c:9e:af:19:d0:25:56:a0:83:81:0a:35:
36:18:ca:f2:61:b8:da:b9:4a:fc:78:d2:a8:ee:b7:c5:93:56:
9f:88:94:8e:02:53:9f:56:0a:bb:98:c2:50:24:c9:24:1c:45:
7c:51:22:1a:51:c1:89:c6:22:32:41:5a:31:94:0d:18:9c:b7:
83:53:5b:3b:bb:b4:29:e9:d7:f6:9e:f3:dd:55:0f:43:f0:37:
fd:fc:38:8c:41:97:f6:4a:48:70:4b:3d:5f:a8:3a:5a:cd:6b:
d9:66:d8:1a:bc:56:3e:74:17:70:39:02:19:c5:55:95:d3:3b:
aa:78:77:56:d9:1e:58:73:8e:86:80:43:e0:65:44:03:31:8c:
b5:8b:84:fc:d1:c5:e4:88:eb:e5:b8:15:65:22:bf:4e:a3:1e:
d8:f0:74:bf:6a:09:9c:47:13:80:fb:ed:b3:d9:2e:f7:03:10:
1c:2b:ad:10:38:86:c2:83:59:fc:77:ba:04:f2:84:0f:e1:7a:
83:7c:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:33 2026 by rpki-client