Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: 8+QArumCsl7NnyGkh1IzP1zE37PiFqf8MxLbkIBV1HI=
Subject key identifier: 7E:76:58:76:28:7F:DF:48:98:83:51:81:69:DD:1F:A9:90:42:79:B0
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019D98BD2B0EC0660A392EC8E87C2B13C7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0EFE
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: 38oAPK8l1QAyS4-vjUH6OdfHPVE.roa (hash: HEbM3ygSfjq8vR4KrtNmnwA7caa3UAN1JiQwsCGLoxg=)
2: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: vFn6rBlPJXYSAweyPgLLC2bcN0ifAoN66EkmPvMKy8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2b:0e:c0:66:0a:39:2e:c8:e8:7c:2b:13:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=7e765876287fdf489883518169dd1fa9904279b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:6e:88:fa:46:de:12:f0:9f:55:b9:fb:51:
1f:df:bc:c9:f0:7e:60:75:c2:a8:fa:7f:df:15:3f:
ed:47:0d:74:e6:79:00:73:26:c0:d6:7f:e5:ca:b5:
0a:55:9f:d8:4f:37:a0:f5:b4:9a:b8:bb:2e:e7:7b:
46:4e:90:29:6b:a9:24:52:d7:38:1e:c2:86:a9:2b:
d5:39:84:c5:18:90:32:71:70:0a:08:bb:54:e2:fd:
5a:fd:d7:66:9c:96:b9:ca:f2:09:e0:59:36:a7:58:
9f:90:f6:dd:c9:de:76:50:a1:03:8c:bb:ec:f2:d5:
56:9f:20:11:07:da:6e:ad:a7:a3:98:fb:0b:33:da:
09:d2:5b:02:e0:29:5e:ca:fc:c6:34:8a:bb:50:8d:
fb:51:8c:16:4a:14:6e:ef:80:88:7a:3f:4c:7d:7a:
ed:0d:91:74:22:5e:74:92:2e:71:58:08:e0:cf:23:
37:a2:41:27:e0:1c:fa:06:9f:6d:e9:42:5e:21:a8:
11:ee:35:32:74:a4:8d:ae:64:07:c4:e2:19:5f:3f:
66:a8:6d:32:28:ea:01:8e:e8:2b:d2:e6:a6:bc:92:
eb:b6:8a:1c:b4:0c:ea:f5:9d:ae:2d:95:27:d6:d0:
ee:ed:62:77:d8:5e:6b:82:3f:30:ef:aa:b3:e7:5a:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:58:76:28:7F:DF:48:98:83:51:81:69:DD:1F:A9:90:42:79:B0
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:fa:af:c1:5d:f8:45:be:b6:9f:09:95:ac:b6:de:6f:a6:
a7:b7:e8:31:96:7a:17:40:7b:b9:80:b7:23:d5:73:c6:9e:75:
c1:82:0f:d2:3f:0b:e8:9f:0b:92:45:60:4b:2a:28:1e:43:23:
4c:9e:5a:03:4f:08:1d:77:de:63:4c:a3:9a:e1:80:fa:38:5f:
d5:bb:bf:91:c2:05:38:a6:80:c1:40:b6:8c:a8:e7:8a:02:02:
28:0a:23:f4:2c:e9:bc:30:24:27:2e:43:47:7c:a1:6e:8e:6e:
8b:13:44:e8:e4:64:53:f7:7d:eb:89:aa:98:50:e6:cc:26:bb:
76:46:5d:1f:81:5e:a8:1b:1b:93:94:64:d5:86:03:a7:ac:cf:
ab:dc:10:91:cb:ed:87:29:59:c5:0c:c7:87:05:54:dc:c1:26:
fd:09:a9:02:32:b7:e2:35:b6:a4:20:33:50:c4:31:21:d2:42:
ed:8b:a7:77:29:a5:3d:c9:f7:1f:bc:b6:45:84:ab:d4:3c:64:
39:fd:48:13:f6:80:69:57:42:f1:38:51:11:18:8c:f2:09:7b:
5b:71:d0:40:05:3d:31:fc:4b:1e:fb:4a:e0:26:1c:bc:ff:bc:
fe:3a:81:ed:48:17:19:2b:e2:04:cf:e8:ed:f9:bf:60:8b:4c:
4a:80:d2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvSsOwGYKOS7I6HwrE8fVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmZlZDhiYjY0NDliMWNlYzZiNjY1ZTkzMDcxOGI4NThh
MmI2OTQwHhcNMjYwNDE3MDAwMDI3WhcNMjYwNDE4MDAwMDI3WjAzMTEwLwYDVQQD
Eyg3ZTc2NTg3NjI4N2ZkZjQ4OTg4MzUxODE2OWRkMWZhOTkwNDI3OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJpuiPpG3hLwn1W5+1Ef37zJ8H5g
dcKo+n/fFT/tRw105nkAcybA1n/lyrUKVZ/YTzeg9bSauLsu53tGTpApa6kkUtc4
HsKGqSvVOYTFGJAycXAKCLtU4v1a/ddmnJa5yvIJ4Fk2p1ifkPbdyd52UKEDjLvs
8tVWnyARB9puraejmPsLM9oJ0lsC4CleyvzGNIq7UI37UYwWShRu74CIej9MfXrt
DZF0Il50ki5xWAjgzyM3okEn4Bz6Bp9t6UJeIagR7jUydKSNrmQHxOIZXz9mqG0y
KOoBjugr0uamvJLrtooctAzq9Z2uLZUn1tDu7WJ32F5rgj8w76qz51qFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH52WHYof99ImINRgWndH6mQQnmwMB8GA1UdIwQY
MBaAFBZv7Yu2RJsc7GtmXpMHGLhYoraUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEt
NmRlYTYwM2NjYzdiLzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEtNmRlYTYwM2NjYzdi
LzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1v6r8Fd
+EW+tp8Jlay23m+mp7foMZZ6F0B7uYC3I9Vzxp51wYIP0j8L6J8LkkVgSyooHkMj
TJ5aA08IHXfeY0yjmuGA+jhf1bu/kcIFOKaAwUC2jKjnigICKAoj9CzpvDAkJy5D
R3yhbo5uixNE6ORkU/d964mqmFDmzCa7dkZdH4FeqBsbk5Rk1YYDp6zPq9wQkcvt
hylZxQzHhwVU3MEm/QmpAjK34jW2pCAzUMQxIdJC7YundymlPcn3H7y2RYSr1Dxk
Of1IE/aAaVdC8ThRERiM8gl7W3HQQAU9MfxLHvtK4CYcvP+8/jqB7UgXGSviBM/o
7fm/YItMSoDS5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:43 2026 by rpki-client