Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: LTe9B7DFY5PEWtb+2gTmiNrCCACePkQCRa7gwCxCSao=
Subject key identifier: 4F:5D:44:21:EB:34:AF:9C:3F:8C:DE:3C:F8:D5:7B:E3:32:AD:DB:2F
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 019D996273B9E5DCAA4B33757C94CAD0E29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 0830
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: cOjlzooi13lwNlOxHCxeMBiWlK+QSXTHxLJ77hXfydc=)
2: prR3St_T-JCudPoZgk4y2vYURI8.roa (hash: 1HOWJUzi0cuRKIHRjrvVgn5q7O99JRjdWW0TYvqs9a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:73:b9:e5:dc:aa:4b:33:75:7c:94:ca:d0:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=4f5d4421eb34af9c3f8cde3cf8d57be332addb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:a3:b4:4e:52:e0:25:73:0e:4e:e5:6f:85:
2e:ca:81:0e:d9:20:93:03:1e:64:34:0a:74:85:9e:
b1:2d:11:02:ae:c2:6f:62:ed:3a:97:bb:9b:17:9a:
63:f5:47:a1:32:d2:3e:16:63:04:25:a4:25:b8:e2:
a2:7c:6b:f2:72:22:5b:c1:fd:48:75:a6:67:9c:2f:
72:d6:0a:db:7e:5a:9a:1e:ab:a3:8e:f7:73:d4:cf:
ea:40:7e:0e:99:9b:e1:46:0e:19:1c:f0:32:97:32:
f2:af:85:a9:e3:d2:12:7c:4f:20:b4:24:ed:17:eb:
61:8e:b4:6d:43:9d:3a:9f:7a:b3:da:cd:84:ab:3a:
5e:44:89:10:95:73:f2:70:97:78:e0:17:3a:ee:ca:
28:64:82:e4:5f:4a:ea:8b:ff:6d:c8:9d:0f:95:69:
a3:68:3c:3c:f6:b2:87:a2:6a:8b:73:84:a2:db:10:
e9:0a:13:48:36:23:6b:74:4b:d5:a2:3f:7f:06:93:
54:a1:74:6c:a7:ce:10:c6:b2:3e:fe:13:30:63:21:
67:94:69:85:21:0c:2b:0c:06:21:d2:25:71:95:62:
48:1d:0d:02:29:c1:82:21:ef:c0:14:59:fe:5a:1d:
8d:15:95:c5:34:30:b9:3b:db:96:d0:e1:bd:c8:01:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:44:21:EB:34:AF:9C:3F:8C:DE:3C:F8:D5:7B:E3:32:AD:DB:2F
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5e:cf:b9:34:10:cd:c6:a1:30:ba:da:cc:a0:5e:c8:26:33:
66:c1:93:f7:94:b1:f8:72:df:15:da:23:d5:a4:05:4b:96:c9:
d7:66:84:59:bd:9c:8b:d7:11:16:ba:27:10:9e:40:d2:0d:18:
87:43:c9:04:1d:f8:6d:a1:41:40:fe:2b:be:4c:cc:cd:0b:8b:
5f:17:73:ab:2b:89:98:df:7c:73:f3:95:97:10:b3:f4:e6:64:
37:f8:a8:eb:ae:e2:47:d1:c9:13:6e:52:ce:cc:24:95:dc:96:
8e:6d:bd:d3:b2:d8:e8:7f:6b:d2:84:02:a2:59:57:21:50:63:
92:9d:cd:5d:94:91:10:f8:1a:28:a4:a1:e9:5a:e5:98:5b:e4:
84:41:84:8e:6d:c9:38:1c:88:45:8a:69:a3:9f:92:c1:43:3d:
8a:19:62:b0:92:10:1a:37:a6:6c:7f:d2:7b:ec:2e:99:72:ba:
88:9f:16:f9:e7:cc:bd:d8:cb:8c:04:5b:54:28:05:7d:0b:0c:
d9:ac:54:f5:1d:4a:90:18:85:64:e6:67:a4:38:4b:3e:0e:17:
f6:06:8d:07:0e:3c:ef:c4:b3:22:e0:78:3a:86:3c:ba:87:c9:
06:d0:20:0b:6f:78:ce:aa:83:b4:73:65:13:81:44:f3:10:89:
a2:02:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:16 2026 by rpki-client