Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: XatvowhXYEKLY4JIZ7FzJR5JxEQ8bujNgQ9HLoBNH14=
Subject key identifier: 41:9F:63:A4:C4:FB:1D:65:F0:91:8C:EA:0A:5E:CF:FB:DA:B6:86:67
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019D9B19C43707BB8B207F0EAB730B3223B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 08ED
Signing time: Fri 17 Apr 2026 11:00:50 +0000
Manifest this update: Fri 17 Apr 2026 11:00:50 +0000
Manifest next update: Sat 18 Apr 2026 11:00:50 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: 1vXCVuBAFcKdcwknezmGx+xu9KODGG55QV7k2yi1Rwk=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c4:37:07:bb:8b:20:7f:0e:ab:73:0b:32:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Apr 17 11:00:50 2026 GMT
Not After : Apr 18 11:00:50 2026 GMT
Subject: CN=419f63a4c4fb1d65f0918cea0a5ecffbdab68667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:5d:e7:75:26:bc:7f:d9:99:02:2f:ae:11:
88:49:54:2d:21:7c:a3:d7:d2:53:3c:93:86:63:da:
62:e1:ec:b1:d9:d7:81:30:1a:ba:27:01:32:ed:d6:
e7:43:54:4a:4a:8e:4c:1e:5d:fd:b0:dd:35:2b:e6:
27:11:ba:bd:a5:79:16:29:dc:76:9d:07:28:11:e5:
d6:cb:c7:a9:5f:45:69:af:24:79:9e:13:aa:65:54:
2f:59:70:cb:9e:42:0b:58:a6:57:be:21:7c:5b:1f:
b2:4d:55:1e:89:5b:c0:ff:09:23:26:cc:a6:a6:1d:
d3:91:4c:57:a4:a4:05:c9:2a:2d:6b:e9:4c:cf:a3:
09:e7:f5:50:a3:bc:95:ca:a1:78:1c:8e:8a:55:80:
56:00:59:c3:cd:56:35:54:62:ce:1f:86:7f:4b:61:
13:ba:a0:06:fe:00:ae:e6:89:42:88:b2:1b:47:9c:
c6:56:b0:d9:d7:25:46:f1:86:38:9c:e9:50:4c:e4:
db:6e:07:14:f0:3f:4e:67:bd:1e:dc:13:47:e5:34:
ee:3c:c4:ce:79:ef:72:5d:37:0a:76:42:10:37:f3:
f7:08:66:66:71:92:97:80:41:04:4c:fa:de:ea:52:
4d:99:9c:51:ad:dd:2b:6f:a6:a8:00:01:37:68:e5:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:63:A4:C4:FB:1D:65:F0:91:8C:EA:0A:5E:CF:FB:DA:B6:86:67
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3f:a5:10:16:cb:5b:93:bd:72:8f:82:e6:78:bf:cc:c6:23:
14:a7:c9:cd:b1:38:b9:2c:b2:d5:1d:a0:ab:a1:d2:f0:04:14:
4f:89:5c:1f:c2:92:c8:08:fc:01:fd:c4:07:b0:60:55:0d:eb:
7b:82:df:a0:46:63:a9:26:60:04:f0:12:f3:b3:f2:8d:dd:d5:
a8:b5:b6:c2:66:c0:53:f1:21:0d:6a:e6:1f:4f:92:27:40:b4:
6b:ef:0b:9c:19:6b:c4:52:43:23:83:bd:d0:db:e1:7d:10:8e:
98:cb:51:ee:4e:5a:9f:90:f9:f1:d6:85:e6:a8:da:28:79:bf:
fd:3a:db:6f:f7:45:4c:dd:b0:6d:93:a8:57:6f:e1:97:b3:fa:
72:64:0e:b9:63:57:ca:23:97:64:44:c8:b3:0b:24:63:30:2b:
4c:ac:2d:8d:2c:c5:29:8a:27:5c:ad:78:c1:46:0a:b1:e9:b3:
b0:85:d9:57:7d:b6:c3:d5:0c:c0:9e:4c:23:84:3c:4a:fa:d2:
a1:a3:9c:1f:c6:d2:9c:f7:b0:0c:c9:84:01:46:74:9d:b1:c8:
0f:8e:6d:b4:01:a6:97:eb:16:8d:43:2b:24:a9:d3:0f:2b:ed:
8b:e2:e9:9c:72:3f:d1:e0:62:c0:30:86:ff:8d:18:75:45:83:
ab:0e:78:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGcQ3B7uLIH8Oq3MLMiOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjYwNDE3MTEwMDUwWhcNMjYwNDE4MTEwMDUwWjAzMTEwLwYDVQQD
Eyg0MTlmNjNhNGM0ZmIxZDY1ZjA5MThjZWEwYTVlY2ZmYmRhYjY4NjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujRd53UmvH/ZmQIvrhGISVQtIXyj
19JTPJOGY9pi4eyx2deBMBq6JwEy7dbnQ1RKSo5MHl39sN01K+YnEbq9pXkWKdx2
nQcoEeXWy8epX0VpryR5nhOqZVQvWXDLnkILWKZXviF8Wx+yTVUeiVvA/wkjJsym
ph3TkUxXpKQFySota+lMz6MJ5/VQo7yVyqF4HI6KVYBWAFnDzVY1VGLOH4Z/S2ET
uqAG/gCu5olCiLIbR5zGVrDZ1yVG8YY4nOlQTOTbbgcU8D9OZ70e3BNH5TTuPMTO
ee9yXTcKdkIQN/P3CGZmcZKXgEEETPre6lJNmZxRrd0rb6aoAAE3aOX2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGfY6TE+x1l8JGM6gpez/vatoZnMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND+lEBbL
W5O9co+C5ni/zMYjFKfJzbE4uSyy1R2gq6HS8AQUT4lcH8KSyAj8Af3EB7BgVQ3r
e4LfoEZjqSZgBPAS87Pyjd3VqLW2wmbAU/EhDWrmH0+SJ0C0a+8LnBlrxFJDI4O9
0NvhfRCOmMtR7k5an5D58daF5qjaKHm//Trbb/dFTN2wbZOoV2/hl7P6cmQOuWNX
yiOXZETIswskYzArTKwtjSzFKYonXK14wUYKsemzsIXZV322w9UMwJ5MI4Q8SvrS
oaOcH8bSnPewDMmEAUZ0nbHID45ttAGml+sWjUMrJKnTDyvti+LpnHI/0eBiwDCG
/40YdUWDqw54Lg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:19 2026 by rpki-client