Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: ujsQCp6zJ8cYr9VGWIGrv+nsIZK5sSnuzzrC7K1IdyY=
Subject key identifier: AC:8F:82:B5:B8:EE:6D:90:30:F1:51:C1:7F:0B:14:85:C2:A4:A0:EA
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 019DA378F6550EC6C0487A0EF6C9328BD5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 13CB
Signing time: Sun 19 Apr 2026 02:01:46 +0000
Manifest this update: Sun 19 Apr 2026 02:01:46 +0000
Manifest next update: Mon 20 Apr 2026 02:01:46 +0000
Files and hashes: 1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: NjngDiQhXsNbAOPsVTP+bz38g+d2QkpSPMdtFEh5My0=)
4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:f6:55:0e:c6:c0:48:7a:0e:f6:c9:32:8b:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Apr 19 02:01:46 2026 GMT
Not After : Apr 20 02:01:46 2026 GMT
Subject: CN=ac8f82b5b8ee6d9030f151c17f0b1485c2a4a0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:e9:3e:cd:35:53:11:10:24:6e:90:ef:87:
b9:c6:de:40:4b:85:29:c4:39:93:01:46:65:34:2b:
0d:b6:fb:52:0a:4a:7b:44:0e:b1:17:11:7c:f4:be:
cf:6e:fb:b2:f4:3f:e6:f6:20:e4:73:26:64:05:36:
e5:f2:b2:6b:e4:11:ec:67:cb:af:67:1b:3e:af:8e:
d0:ca:94:da:29:32:23:a7:0c:89:b4:00:ab:c6:6a:
1a:d9:3e:ad:b8:00:6e:6c:16:f9:99:0b:b2:34:21:
e5:cb:cd:a1:cb:12:5d:fd:c5:70:9c:40:1f:81:46:
66:df:ea:2d:68:81:94:f8:38:89:81:5b:25:0b:1e:
6e:6b:b1:bb:b2:fc:1d:e8:c7:f4:76:92:da:6f:5e:
cb:80:dd:a1:48:bc:4d:67:45:d6:de:9b:38:69:d7:
63:ec:bb:c9:1c:6b:ea:b8:cf:ff:1e:93:17:17:d2:
08:59:a2:d5:23:47:38:e7:e6:4b:b7:ec:0f:30:2a:
62:31:cd:c7:38:e8:71:d5:45:f4:68:ff:7d:32:a9:
c7:4f:d2:17:f8:57:a1:7c:7c:7b:04:8a:26:c9:d9:
fe:3e:33:27:eb:b0:0c:f9:8f:e2:fe:07:7c:c0:55:
93:66:f5:9d:15:94:5b:30:88:1d:55:2c:f8:05:b6:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:82:B5:B8:EE:6D:90:30:F1:51:C1:7F:0B:14:85:C2:A4:A0:EA
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:10:29:54:b7:26:84:36:d3:b9:44:b9:32:d3:c2:a7:71:e1:
2c:2b:1e:0d:45:36:e6:e5:34:30:c5:12:b4:93:c7:3a:06:68:
37:3c:c0:a7:cc:50:b8:db:18:d7:8e:42:1d:b4:50:45:9d:0e:
52:ef:ca:32:6a:03:82:ad:ac:1b:29:4c:7d:b3:ff:ac:6b:96:
31:c4:63:a8:eb:30:80:61:b1:93:d0:77:87:45:6c:d0:d1:3e:
a7:31:5d:97:f8:ba:80:7b:d6:18:20:b5:52:df:2f:6d:f8:81:
b4:db:fc:57:d5:32:fa:e5:e1:4c:b9:03:6f:04:13:e3:e9:63:
7d:24:b3:26:ee:f5:4e:7e:a9:e1:ab:93:dd:99:2c:17:fa:c7:
bb:31:ee:ad:d0:9f:60:10:94:ae:9f:f7:6a:ec:da:0a:e6:ff:
f8:45:a7:69:40:c4:05:03:59:df:b3:07:55:aa:eb:95:c9:0f:
75:43:f3:68:d1:9c:61:89:47:ae:2f:42:0a:bd:36:50:c5:4b:
69:6d:8e:dc:62:a3:9e:94:84:17:c9:26:b4:e9:0c:b2:a2:d4:
7e:bb:04:4e:bf:21:02:87:64:dc:e2:84:91:f8:bc:ca:fd:3c:
cc:1e:a6:99:0c:19:3f:55:a2:d3:e7:5d:23:0e:0d:16:a2:5e:
62:eb:6e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jePZVDsbASHoO9skyi9XkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi
NTlkZDYwHhcNMjYwNDE5MDIwMTQ2WhcNMjYwNDIwMDIwMTQ2WjAzMTEwLwYDVQQD
EyhhYzhmODJiNWI4ZWU2ZDkwMzBmMTUxYzE3ZjBiMTQ4NWMyYTRhMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rbpPs01UxEQJG6Q74e5xt5AS4Up
xDmTAUZlNCsNtvtSCkp7RA6xFxF89L7Pbvuy9D/m9iDkcyZkBTbl8rJr5BHsZ8uv
Zxs+r47QypTaKTIjpwyJtACrxmoa2T6tuABubBb5mQuyNCHly82hyxJd/cVwnEAf
gUZm3+otaIGU+DiJgVslCx5ua7G7svwd6Mf0dpLab17LgN2hSLxNZ0XW3ps4addj
7LvJHGvquM//HpMXF9IIWaLVI0c45+ZLt+wPMCpiMc3HOOhx1UX0aP99MqnHT9IX
+FehfHx7BIomydn+PjMn67AM+Y/i/gd8wFWTZvWdFZRbMIgdVSz4Bba46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyPgrW47m2QMPFRwX8LFIXCpKDqMB8GA1UdIwQY
MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt
NzUyOTUyNTFiMWU4LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4
LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxApVLcm
hDbTuUS5MtPCp3HhLCseDUU25uU0MMUStJPHOgZoNzzAp8xQuNsY145CHbRQRZ0O
Uu/KMmoDgq2sGylMfbP/rGuWMcRjqOswgGGxk9B3h0Vs0NE+pzFdl/i6gHvWGCC1
Ut8vbfiBtNv8V9Uy+uXhTLkDbwQT4+ljfSSzJu71Tn6p4auT3ZksF/rHuzHurdCf
YBCUrp/3auzaCub/+EWnaUDEBQNZ37MHVarrlckPdUPzaNGcYYlHri9CCr02UMVL
aW2O3GKjnpSEF8kmtOkMsqLUfrsETr8hAodk3OKEkfi8yv08zB6mmQwZP1Wi0+dd
Iw4NFqJeYuturQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:59 2026 by rpki-client