Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: M8xHYwYbqPJ1QbYJIo2nSuWgOYQo+Im9UQGszEjYxT8=
Subject key identifier: F9:59:F6:61:35:AB:20:B8:39:DA:A3:EE:08:7B:22:F7:DD:A1:BE:27
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 019D9A06DDC2B7D3844A7A4E829ADA1D5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 096E
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: wYFUFJZjfuXRgTvF7EfbJx5W4slslGFL1gnPxcpkWrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:dd:c2:b7:d3:84:4a:7a:4e:82:9a:da:1d:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=f959f66135ab20b839daa3ee087b22f7dda1be27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:0e:fa:a7:9a:db:3b:7a:70:76:61:56:82:
11:e4:c0:49:f5:d0:76:35:4e:6f:13:ca:cc:51:2e:
72:4e:ae:1c:5c:fd:9c:7a:34:74:b1:28:de:e6:a9:
26:59:c8:6f:5c:5d:fe:7a:06:1c:25:1a:89:de:a8:
00:57:c7:f0:a0:fa:ff:f3:f6:44:0b:07:be:e4:d6:
ac:51:19:1e:3c:d8:43:77:38:f7:01:40:2a:98:51:
19:6d:ff:80:3a:0a:c2:a4:9e:af:a5:bc:21:f6:95:
1d:fd:81:97:9d:76:0e:7f:51:2d:33:ab:92:3c:07:
64:10:5c:f3:ef:28:d2:24:84:57:02:e1:52:6b:3c:
db:ff:bc:c8:d3:41:be:dd:ce:aa:e6:33:1c:15:d0:
83:4a:09:a3:70:c2:99:2b:4e:93:65:10:e7:e4:0a:
65:fb:94:5e:cd:58:61:d4:95:f0:4f:b5:b8:29:e2:
a8:e2:92:74:17:93:04:c1:3a:77:c6:ac:cb:1b:e7:
9e:e8:e9:d3:b9:3c:b6:9c:f8:24:2e:98:09:69:84:
ac:48:68:ab:18:e8:f1:a4:cf:de:87:86:45:56:e9:
41:67:28:a3:f7:c3:6b:ba:11:20:72:e9:e3:04:f4:
44:0f:04:4c:4a:8f:90:8e:9b:05:20:ac:79:e6:3e:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:F6:61:35:AB:20:B8:39:DA:A3:EE:08:7B:22:F7:DD:A1:BE:27
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:59:7b:f7:74:8d:a1:eb:53:65:ad:85:0a:6e:aa:a5:d0:f9:
c6:ec:26:ac:35:d2:d2:a8:db:2d:f7:c2:c7:7b:a0:ae:a9:3c:
b2:bf:54:bf:df:25:67:2c:ef:31:d1:cc:cd:34:5f:30:13:76:
88:ec:d1:21:c3:fd:9c:12:10:44:62:ea:6b:49:1f:54:b2:76:
7d:1c:81:60:16:04:47:77:8a:d4:54:d5:e7:ec:9c:e1:9e:4e:
62:ae:b0:de:66:2f:cc:86:ff:bb:24:fb:c1:7a:13:53:2b:e3:
15:2b:46:03:60:95:7f:b1:5c:2e:ef:30:b5:9f:d9:8f:c1:ba:
a8:2b:0c:4c:43:41:4d:6e:b1:c8:c8:ab:88:02:f4:12:bd:ba:
d7:2d:1a:15:e9:06:99:8a:f5:97:d5:85:fc:29:38:64:9a:fd:
e9:51:b6:81:ec:eb:0e:0f:8e:c6:20:70:de:71:d2:65:36:b4:
58:dc:fb:7c:2d:88:f8:fb:ff:78:51:6a:3d:bf:5b:ce:cf:6a:
9e:da:c1:b2:ca:f8:9c:1c:76:8d:3d:d1:13:30:59:13:1a:f6:
ec:96:45:a9:4a:c1:61:69:2a:da:50:dd:de:f8:fc:b8:3c:e4:
14:b0:af:5a:9f:18:44:80:f8:19:e9:03:cf:9d:b8:23:c3:0f:
6b:64:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:19 2026 by rpki-client