Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: IVPYgB5+ZG7hiG3bvhQZYtQdnssWJdVyKQ+X1+L0grI=
Subject key identifier: 10:FB:39:23:40:CC:C4:4D:8E:0E:73:8D:50:35:A0:52:B4:53:12:D7
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019DA4C16D19260A82FF1B3B88B955A99F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0458
Signing time: Sun 19 Apr 2026 08:00:32 +0000
Manifest this update: Sun 19 Apr 2026 08:00:32 +0000
Manifest next update: Mon 20 Apr 2026 08:00:32 +0000
Files and hashes: 1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
2: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: +TLGiA3eg+uIJhoVPQ+bhLlUf3IAOUp57hVvVJYKOsk=)
3: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (hash: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:6d:19:26:0a:82:ff:1b:3b:88:b9:55:a9:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Apr 19 08:00:32 2026 GMT
Not After : Apr 20 08:00:32 2026 GMT
Subject: CN=10fb392340ccc44d8e0e738d5035a052b45312d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:77:35:b7:c6:d0:4b:6d:09:28:43:13:c8:
1c:cd:6e:1c:06:60:b7:d8:1a:8d:e2:05:18:ca:59:
02:76:d5:e2:04:fe:30:7c:ca:92:aa:67:36:31:63:
73:95:dc:de:6f:08:44:6d:d1:e2:3d:63:38:16:07:
17:59:fc:e8:f4:bb:aa:1c:98:df:04:ac:c8:e0:95:
5e:54:ca:9e:26:3c:13:02:68:0a:bc:7f:77:85:b9:
0a:9c:e3:4b:72:1e:72:19:71:2e:c5:c0:27:5c:57:
44:50:d5:5e:6d:20:68:45:b7:72:88:12:91:12:f0:
5b:fa:fa:44:a3:6c:0d:87:15:68:8b:6e:a8:30:db:
4d:8e:95:f0:43:ec:ac:fd:bc:be:3f:58:4b:aa:45:
84:51:b4:9e:22:24:32:37:ca:8d:5d:6a:ef:46:80:
85:47:12:bf:d0:ee:6c:df:d5:2a:e6:8f:81:05:ba:
0f:e8:fb:4d:a1:b1:b3:7d:92:9e:29:68:a1:31:a6:
b5:25:e8:3b:66:c2:57:7a:09:19:6f:19:2c:18:94:
49:e3:94:fd:db:f8:cb:86:9c:6e:e1:e8:65:8a:88:
9e:a6:06:41:08:3b:08:2d:87:f9:be:ee:a3:1e:f4:
f3:d5:45:f8:c5:c4:77:de:89:f6:5d:b8:e5:2e:d9:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:39:23:40:CC:C4:4D:8E:0E:73:8D:50:35:A0:52:B4:53:12:D7
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:56:fc:1b:90:fe:d3:1d:d1:41:69:ae:66:d6:29:aa:5b:
39:15:75:f4:7f:7b:56:42:2a:e5:fa:2b:60:77:eb:55:82:5e:
df:54:a5:be:ef:8e:7f:e4:d9:34:01:a9:c2:a3:4f:06:81:70:
77:54:b7:9a:50:fa:ca:a3:a3:d3:fa:db:52:d6:b2:54:68:0e:
24:b8:cc:7a:91:7f:a8:00:67:dd:ff:c7:12:37:d7:62:f4:7d:
fc:0e:24:6d:a1:1b:78:cb:e1:ab:fc:3a:4f:c5:d0:b8:79:44:
c2:43:0e:48:76:f6:c4:ba:f2:73:bd:c2:98:07:6a:79:2e:f7:
96:28:73:51:5b:c2:94:06:18:4a:16:77:b3:d2:ab:1c:74:60:
5f:3d:42:4f:32:ad:c5:6a:b8:cc:b7:06:d7:3c:b4:fc:65:4a:
c6:ba:21:8f:c6:44:f7:42:a4:ef:61:87:58:f2:37:20:7c:bc:
6a:6d:67:82:e0:38:84:c3:ee:b4:3b:8d:5e:d5:48:32:be:f8:
ba:9a:30:96:af:5b:9b:e8:52:97:8f:bf:ee:f2:3b:f5:9a:19:
07:4d:5b:ef:bc:a7:22:59:ff:8d:23:5a:a9:67:b2:4a:1a:e6:
f6:69:91:ff:57:d4:50:1d:29:2d:38:79:af:ca:15:d4:23:57:
f8:50:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:54 2026 by rpki-client