Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: Z6D5r9eEWSfmUPFfPXm3m3InLiGn6ITm3vErOsLiSoo=
Subject key identifier: AC:4A:F5:FA:97:BE:66:23:EE:BC:E4:AC:78:D8:2C:6E:10:2D:1E:27
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019D98F4669295D11C609AD2EA2E92666D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0BF3
Signing time: Fri 17 Apr 2026 01:00:47 +0000
Manifest this update: Fri 17 Apr 2026 01:00:47 +0000
Manifest next update: Sat 18 Apr 2026 01:00:47 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 2e/daCnwpaJOdk86BPFO+zct3qpWRSZmRQ9Chd9R9pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:66:92:95:d1:1c:60:9a:d2:ea:2e:92:66:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Apr 17 01:00:47 2026 GMT
Not After : Apr 18 01:00:47 2026 GMT
Subject: CN=ac4af5fa97be6623eebce4ac78d82c6e102d1e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:d9:f0:9d:ae:62:cb:f1:20:48:e5:41:5a:
90:68:bf:88:c1:28:a4:5f:59:65:c9:bc:a7:9b:e2:
14:09:78:a3:68:f4:83:6b:63:fd:9a:69:0a:a2:b3:
af:cc:54:54:ed:5f:4c:64:16:c1:60:a9:24:d6:f7:
05:92:2a:09:00:a2:4a:b1:4f:99:84:47:13:44:d6:
da:43:ee:4c:ab:36:bc:78:df:23:1b:f1:85:93:63:
4c:52:25:98:7e:e4:a7:f9:04:59:44:03:ce:72:86:
8c:62:61:2d:34:c1:26:04:9a:c3:8a:cc:24:2b:0e:
4e:d5:ca:38:43:39:8f:e0:82:a2:00:c6:95:8d:db:
e4:af:46:0f:8a:93:a6:86:b4:27:4b:9c:6d:f1:97:
e5:5b:1d:64:bb:d7:cc:7a:83:85:44:67:5d:14:e8:
5a:0a:ca:ae:1d:f1:52:ee:29:67:80:bf:c1:da:76:
da:35:66:e4:0f:24:32:dc:e7:e8:46:f0:7e:7a:53:
98:cd:e1:a5:ec:ae:7e:4d:a4:c5:53:98:59:61:f4:
4d:20:7d:ed:f1:5c:3f:d3:3b:52:59:6c:7a:36:0f:
91:c8:f4:82:97:1e:0a:cf:bb:0f:21:bd:cd:20:c9:
88:48:66:f8:b7:61:d7:7d:1c:e0:67:2e:75:f5:31:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:F5:FA:97:BE:66:23:EE:BC:E4:AC:78:D8:2C:6E:10:2D:1E:27
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:69:dd:ac:ce:53:a9:3b:a7:9b:7f:5e:bc:81:6f:80:43:
3e:cc:a1:7b:17:e8:a2:02:1c:17:e4:31:bc:29:62:09:69:91:
bd:b8:cb:4e:5d:63:9e:de:4a:53:5f:a9:ac:13:83:90:57:e6:
8f:af:95:9c:1c:9b:cd:6c:ae:93:f5:07:2c:b5:a1:4d:ed:8a:
30:9a:6a:e6:63:b8:68:eb:4f:41:6f:e3:14:3c:a8:38:00:fe:
fe:ec:33:00:27:11:4c:23:e2:ba:e5:75:26:fa:db:a2:2d:7c:
d6:e3:34:51:00:fa:96:13:9e:7a:c5:1b:7c:a0:46:82:de:2b:
e8:7f:6f:18:e3:58:5e:6d:16:18:31:89:e7:09:bc:6a:3d:91:
f3:41:2f:dd:79:07:e8:dc:fe:7e:01:74:80:9a:8e:73:4a:64:
ea:fe:ab:2f:e0:0e:23:11:da:6a:52:f2:0b:01:c4:7b:27:99:
fa:42:f1:21:d9:af:d2:31:94:db:ae:71:11:95:32:9b:51:54:
2f:4c:79:cf:12:95:92:99:00:e6:d7:38:e0:b8:2c:db:bc:d0:
c1:40:43:f2:51:63:14:5e:87:fb:e3:4e:4b:83:e4:79:66:8b:
3e:57:ca:90:c6:07:74:dc:e1:3a:52:ee:f2:12:42:6e:56:eb:
1b:55:26:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9GaSldEcYJrS6i6SZm1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3
NGI2NzEwHhcNMjYwNDE3MDEwMDQ3WhcNMjYwNDE4MDEwMDQ3WjAzMTEwLwYDVQQD
EyhhYzRhZjVmYTk3YmU2NjIzZWViY2U0YWM3OGQ4MmM2ZTEwMmQxZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHZ8J2uYsvxIEjlQVqQaL+IwSik
X1llybynm+IUCXijaPSDa2P9mmkKorOvzFRU7V9MZBbBYKkk1vcFkioJAKJKsU+Z
hEcTRNbaQ+5Mqza8eN8jG/GFk2NMUiWYfuSn+QRZRAPOcoaMYmEtNMEmBJrDiswk
Kw5O1co4QzmP4IKiAMaVjdvkr0YPipOmhrQnS5xt8ZflWx1ku9fMeoOFRGddFOha
CsquHfFS7ilngL/B2nbaNWbkDyQy3OfoRvB+elOYzeGl7K5+TaTFU5hZYfRNIH3t
8Vw/0ztSWWx6Ng+RyPSClx4Kz7sPIb3NIMmISGb4t2HXfRzgZy519TEJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxK9fqXvmYj7rzkrHjYLG4QLR4nMB8GA1UdIwQY
MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt
NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi
LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZFp3azO
U6k7p5t/XryBb4BDPsyhexfoogIcF+QxvCliCWmRvbjLTl1jnt5KU1+prBODkFfm
j6+VnBybzWyuk/UHLLWhTe2KMJpq5mO4aOtPQW/jFDyoOAD+/uwzACcRTCPiuuV1
Jvrboi181uM0UQD6lhOeesUbfKBGgt4r6H9vGONYXm0WGDGJ5wm8aj2R80Ev3XkH
6Nz+fgF0gJqOc0pk6v6rL+AOIxHaalLyCwHEeyeZ+kLxIdmv0jGU265xEZUym1FU
L0x5zxKVkpkA5tc44Lgs27zQwUBD8lFjFF6H++NOS4PkeWaLPlfKkMYHdNzhOlLu
8hJCblbrG1UmHw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:03 2026 by rpki-client