
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: Z0XjiJOTjsL4r1OAP5gNHeJArQo1HBa953z+BWwbBu8=
Subject key identifier: A1:4A:FB:AD:67:AF:9F:FE:85:EC:32:21:02:36:14:9F:73:0F:CD:85
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019D99CFFFF457EF27F27A398B934B84D94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 094E
Signing time: Fri 17 Apr 2026 05:00:38 +0000
Manifest this update: Fri 17 Apr 2026 05:00:38 +0000
Manifest next update: Sat 18 Apr 2026 05:00:38 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: HtEDx+LW2QAfx1YfhucLmreLIGEoe2V3ZY/KUI6euY0=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ff:f4:57:ef:27:f2:7a:39:8b:93:4b:84:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Apr 17 05:00:38 2026 GMT
Not After : Apr 18 05:00:38 2026 GMT
Subject: CN=a14afbad67af9ffe85ec32210236149f730fcd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:72:35:9d:76:aa:ed:fc:0b:bb:46:0a:a9:
82:23:00:db:74:52:32:65:44:61:2f:e6:f7:48:56:
c9:4a:67:6d:38:6d:7d:c8:b8:a4:ab:3d:9a:5f:02:
2c:f8:61:3d:cf:a5:8a:b4:40:af:2e:f0:d4:cd:df:
61:92:a9:33:cc:25:5f:d6:81:7c:4c:95:e1:c6:63:
b8:c5:23:dd:d3:4f:1f:b3:cd:63:23:c7:3d:23:ef:
f9:12:ee:61:c8:2f:0e:43:76:34:ca:46:35:2f:29:
83:a2:b6:f7:55:a6:22:5f:7a:0e:1b:a8:76:bb:c0:
f1:e1:02:4f:07:b5:38:e0:32:e4:0b:82:e6:81:a9:
cd:8e:6d:ef:c2:c1:ed:00:4e:6a:f9:1b:2d:0a:95:
fc:5b:52:28:2e:2e:4a:86:07:dc:fc:d1:52:96:0c:
80:33:d0:0c:47:c4:06:6f:47:2e:fa:e1:18:27:16:
a5:40:c6:a0:59:a9:0b:71:02:fd:64:5b:f5:e4:27:
be:d4:a1:bf:57:2e:d7:a3:d8:d9:7d:dd:28:f0:12:
a3:6e:15:1e:d0:dc:75:5c:a4:e2:b9:26:2f:12:2c:
30:29:ca:ce:18:e1:02:9d:a8:86:9c:12:87:98:d4:
59:91:bd:4c:30:a3:cc:8d:8e:fc:de:fd:3c:0f:d6:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:FB:AD:67:AF:9F:FE:85:EC:32:21:02:36:14:9F:73:0F:CD:85
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:5f:f8:1c:ca:35:57:91:17:41:f2:f6:95:96:0d:9e:98:
4c:25:ff:ff:42:20:d4:8e:75:c7:c0:ef:25:11:1c:6e:86:c0:
f6:00:63:31:f3:98:f3:02:1d:2f:d8:eb:50:c9:25:88:5f:5c:
9c:d2:0e:5c:c1:f1:95:4f:a5:43:4e:14:3a:97:7c:4d:d4:6d:
84:46:b3:bf:ec:28:f0:51:7c:98:da:49:f1:e2:a3:53:c4:db:
d1:dc:39:cf:61:dc:70:d4:c5:96:ab:50:27:09:01:e3:53:b9:
94:32:7e:ec:97:11:8f:39:67:7a:ae:db:9a:a8:0d:45:78:42:
ac:07:7b:6f:cb:c6:ee:e7:72:67:af:b1:2d:54:74:73:3b:92:
ee:d7:7a:75:e3:07:d0:bd:18:fe:e4:a0:89:c0:39:ea:90:85:
ae:9f:c7:7e:39:0f:1b:68:12:91:51:3f:71:27:e6:da:bc:83:
0e:00:71:ab:7e:1d:1a:17:01:92:5e:98:70:4f:49:4f:5c:32:
7a:21:36:12:bd:1b:0c:a1:a0:0b:61:d9:28:3a:63:92:78:89:
c4:58:45:51:ba:15:ba:14:65:d9:a3:36:33:e8:0c:3d:0f:10:
40:d9:fa:04:f3:54:d9:01:63:40:e9:2d:ea:57:d4:bd:12:3b:
30:c3:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:22 2026 by rpki-client