Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: ZOgoPgJ4LemrWfokajCakKZXMlxxyZF5CMRjHir2A0Q=
Subject key identifier: F4:A8:75:21:C0:AA:60:FF:EA:E3:88:1A:32:B1:D5:05:1E:D6:B3:D3
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019D9886774EA0DA8D6E4B0DE173BF5021DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:42 +0000
Manifest this update: Thu 16 Apr 2026 23:00:42 +0000
Manifest next update: Fri 17 Apr 2026 23:00:42 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: f+Shy+iPzAiljPNov3HMo/tPlS6NlDtAykEDDoSiPx8=)
2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:77:4e:a0:da:8d:6e:4b:0d:e1:73:bf:50:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Apr 16 23:00:42 2026 GMT
Not After : Apr 17 23:00:42 2026 GMT
Subject: CN=f4a87521c0aa60ffeae3881a32b1d5051ed6b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:58:b5:11:a5:f0:ea:39:db:5e:5a:1f:18:
8a:17:b7:c4:57:15:35:84:c7:05:4a:18:5b:fc:65:
b3:a0:a4:1c:62:b1:6b:fe:cc:36:e3:d4:ac:ab:58:
8d:9c:4d:7d:2e:82:ca:c0:04:93:50:f0:ab:8a:b0:
a2:79:0d:bb:1d:32:e8:9c:c8:83:61:47:fc:17:21:
ee:53:2f:69:05:8a:f9:3c:b4:62:cb:e5:4d:55:d3:
86:ed:43:4e:cd:bf:fb:b3:b3:77:c7:8f:bb:42:7c:
4d:4f:84:54:11:62:0d:b5:06:32:6e:66:fe:49:bc:
74:da:1f:f7:8f:f4:6d:57:06:00:a8:41:2b:74:de:
a7:50:92:f2:71:46:47:ce:a1:e3:20:b9:06:ff:a0:
a9:d0:e1:6c:51:81:de:30:b6:0d:1f:c3:be:16:40:
49:b4:63:02:1b:9e:fd:2f:6e:f2:ef:f4:b4:9b:d0:
43:24:0f:cd:2b:b3:83:d8:fb:63:2c:1e:f2:36:b2:
a4:e3:db:2e:e8:5a:20:65:41:3a:ed:eb:ba:6f:ad:
e5:0c:cd:15:9a:a8:83:5d:e6:fb:74:02:e0:c4:96:
a1:3b:64:23:87:14:04:dc:63:9b:28:55:e1:93:66:
a3:25:83:96:ef:85:6c:c9:a1:ba:34:87:1c:5e:6d:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:75:21:C0:AA:60:FF:EA:E3:88:1A:32:B1:D5:05:1E:D6:B3:D3
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:89:4b:1d:9f:a0:47:e9:0e:91:5c:bf:08:c4:ae:52:92:
3e:cf:d8:01:2e:4d:03:e1:99:90:7f:24:d2:08:9a:42:fe:f8:
a8:c6:f0:56:17:c3:a1:ce:62:75:18:0e:89:ba:88:16:6a:b1:
bd:21:c3:a6:2d:f1:e2:d5:bd:89:1f:b3:41:24:c1:c6:5d:5d:
a1:0e:70:57:21:35:ad:85:b0:5c:f4:c4:06:34:19:68:0a:ad:
bb:5f:2d:6c:a6:ff:a9:b9:ae:11:e3:5c:5f:a0:b5:05:61:19:
a9:37:81:f1:38:f5:be:31:e7:b3:d8:a5:f9:b9:4b:15:06:3c:
b8:f5:cf:22:4c:83:49:03:d9:36:6b:6a:39:5e:f9:4d:54:46:
9b:cd:97:a7:d2:f0:a2:6c:9e:5f:e7:ec:77:63:da:5c:19:bf:
fc:38:ec:25:4c:95:6e:92:03:20:2a:c7:5a:90:f2:6d:22:de:
2e:98:11:f8:eb:67:1e:f4:c6:fc:5f:1f:6b:4e:f5:4d:3b:04:
e9:0a:4a:30:ab:a5:4a:af:d0:ff:eb:f6:bf:74:56:c6:1d:2f:
43:81:02:b3:df:05:43:b4:e2:95:d0:07:70:39:73:75:a3:86:
20:e3:60:ae:28:d6:5a:27:ba:2f:d8:38:2e:6f:6b:36:f4:20:
e8:4b:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:35 2026 by rpki-client