Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: 30O/dReLxOZRkOdARx2TNt/soB3OYPupIXA0PNj7zLw=
Subject key identifier: 2A:39:3D:0D:43:C6:20:A9:FE:BB:C6:07:E2:27:E7:94:15:7E:1B:C4
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 019D98F4145DA3ABFFDF5EF9220D601BD1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: spLbjuhf11wlD3AveCBF6w9ETgFbM+tTa7OlJrrWYAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:14:5d:a3:ab:ff:df:5e:f9:22:0d:60:1b:d1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=2a393d0d43c620a9febbc607e227e794157e1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:64:bb:25:97:29:20:46:d1:b7:2f:5c:fb:
fb:a6:30:07:ea:2c:06:21:10:21:9e:59:6c:7b:f9:
b7:f9:9c:8c:82:0e:7d:da:e2:10:d9:c2:5b:9c:37:
1d:52:b4:4b:d8:0a:59:6f:f3:e4:a6:61:f7:09:ff:
7e:48:9a:dd:aa:c5:46:ac:f6:40:4e:64:21:60:14:
48:8d:fc:10:86:24:c1:19:5a:11:9b:a0:6b:31:98:
2a:0c:71:c9:95:a6:6f:9c:cc:37:34:8c:0a:71:d4:
4d:7e:bd:4c:4d:9a:b9:e8:28:72:6a:09:01:7a:8d:
fd:85:d7:ce:cd:fd:b9:4b:76:a1:d3:c4:7a:66:f1:
1a:fa:b0:bb:f3:ad:bf:a8:6a:0f:8b:31:9c:16:3c:
b4:91:90:78:83:90:cc:50:4a:40:6e:92:89:02:b0:
c3:25:aa:a3:77:03:cc:a1:dd:a6:cd:9a:0f:d9:e0:
c0:c2:fe:b9:49:e3:25:8a:30:0f:96:85:e8:3d:a3:
1c:28:3c:fd:9e:24:9e:4a:76:a2:c7:78:02:96:43:
b6:81:28:c3:c4:4b:aa:a0:d3:97:e1:bc:cb:8e:cf:
2a:4d:3b:97:4d:37:25:49:a3:75:2c:a6:66:7e:92:
10:c4:0f:f7:f4:e6:9f:ca:eb:d8:ca:13:c3:20:40:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:3D:0D:43:C6:20:A9:FE:BB:C6:07:E2:27:E7:94:15:7E:1B:C4
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:f7:87:88:1d:f9:74:e4:de:c0:71:50:01:b6:66:19:e4:
0a:68:e2:8a:5b:12:ad:f5:6a:74:cf:af:e1:a6:d7:60:72:23:
df:9a:6a:8b:c6:f7:01:87:19:c9:64:8f:93:0c:95:3a:2e:ef:
37:49:b2:76:4d:27:b5:31:43:c7:5c:0e:3a:ee:77:16:da:23:
8e:65:f2:6d:50:57:1b:97:02:44:4a:f1:b6:bf:a1:06:fd:2e:
9c:67:53:c9:fb:18:2b:d1:44:cb:a6:70:67:39:27:87:b9:80:
e4:aa:ed:2f:56:98:3b:c2:11:74:03:36:71:ba:11:ef:d2:8d:
65:18:67:52:62:85:01:09:67:31:fc:bf:92:ae:47:a3:ee:97:
18:e2:cf:19:e3:58:eb:91:e4:e9:eb:ef:b3:53:e7:49:36:de:
61:f2:4a:c2:41:71:f6:bc:b6:fb:c7:e8:d5:31:8e:b8:55:df:
31:2c:5c:46:e9:d1:59:0a:f4:00:c9:42:e9:14:29:11:1a:df:
58:f3:d5:c7:ea:93:ac:e8:19:63:fa:f2:15:be:2e:64:e7:10:
54:74:7a:77:bf:11:f7:db:7e:b8:80:06:04:7e:00:28:e7:eb:
5b:1d:58:f1:7b:47:48:1d:79:4d:d7:b1:28:52:88:34:3e:82:
7b:d7:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:45 2026 by rpki-client