Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: ciBsb77r5IPliAUCNdkt4VQNBlrQ8wE/hUjiDeIafQw=
Subject key identifier: 86:3C:89:62:0C:1B:5C:E5:F8:9F:C3:3A:86:44:D9:7C:59:7B:30:C1
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 019D99998D94EC672554FCF824A6A999401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0F77
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: HQ8bC/PiqI8WABvU471umTNsFiOs5QMjtGBEoHSO9NM=)
2: TF6uvKJoThoeL-6VAxiiIrXGTDE.roa (hash: Z1iMOswxtKc687KzUW15WbR0/w7lrYl+AKo5ErE1KtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8d:94:ec:67:25:54:fc:f8:24:a6:a9:99:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=863c89620c1b5ce5f89fc33a8644d97c597b30c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:ca:98:7c:ca:36:6f:5d:ef:45:fa:55:b5:
ba:c8:3c:a0:d9:25:d2:09:16:c8:57:75:3b:d9:4d:
22:f1:62:2f:59:69:99:1a:7c:ac:c0:76:c5:3e:ac:
37:ac:3d:63:94:a4:60:42:cb:51:eb:38:f7:dd:3b:
07:00:8b:cd:83:43:67:0e:89:98:5c:79:10:d0:af:
a5:c0:cc:da:68:20:d4:e1:70:d6:7f:40:35:46:0b:
ad:0a:69:77:e3:07:19:8a:80:a3:05:36:29:81:02:
b9:6f:22:eb:34:d6:47:d8:af:d6:41:61:90:44:8f:
d9:79:5b:81:eb:25:f0:e4:42:5d:50:57:83:8d:33:
0f:a3:6f:0c:0e:81:57:53:73:9a:4d:2d:74:f4:45:
8c:af:fc:04:b2:08:9a:33:45:36:7b:f4:ef:cd:0e:
0d:b3:2d:90:a3:18:89:5b:a3:84:4a:a7:6b:99:55:
bc:67:8f:9e:a1:36:b9:b7:f1:cb:ed:40:5c:2c:33:
19:8a:15:37:8f:8e:03:79:16:91:88:d3:6b:31:5b:
ff:05:b8:a0:64:b4:fd:b1:52:93:8a:1f:d8:0c:e0:
a3:24:76:63:70:c0:96:7d:54:61:48:12:37:55:1b:
eb:33:d5:58:cf:0c:9b:ff:33:9b:de:fd:37:98:33:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:89:62:0C:1B:5C:E5:F8:9F:C3:3A:86:44:D9:7C:59:7B:30:C1
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:f1:e0:65:40:06:8e:40:64:af:f5:a9:56:33:17:a3:c5:
13:a0:99:58:e4:78:b6:81:7d:7a:0a:50:e8:e5:80:f4:01:24:
9e:75:6d:3c:34:b4:d2:96:2a:ed:67:7e:f4:a6:46:a8:93:77:
7d:08:4a:07:4c:47:0c:3c:fa:36:c3:d3:00:e0:e8:7c:63:24:
e9:97:64:12:1d:8c:70:db:4d:a0:44:1c:8a:83:14:22:6c:67:
70:b8:44:cb:a3:a7:71:77:1b:c3:04:14:a5:7d:10:7c:cb:e0:
3a:e5:6b:ef:4a:19:57:2a:fd:81:d4:0f:39:2f:13:06:a9:e1:
32:68:42:38:ea:bc:28:c0:bc:da:c0:63:cc:17:39:5a:74:e6:
50:1a:2a:69:9e:35:7a:fe:65:c9:19:3b:21:f7:6c:0e:04:38:
c0:12:32:aa:ee:09:21:92:ed:7f:36:95:4c:5c:51:0e:0a:41:
bc:02:b6:8f:09:db:83:04:7a:c8:62:52:a4:86:a9:25:b6:f1:
4f:82:51:89:1f:70:8f:09:95:37:53:f2:95:7a:81:09:3e:a2:
9e:bd:ec:a0:bb:6d:d0:38:90:aa:55:a5:fe:3d:d0:94:fa:cf:
9c:3f:3f:ac:28:b2:c4:6c:fa:96:ec:90:e3:83:5e:02:ca:60:
c2:6b:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:39 2026 by rpki-client