Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: +yEfnBgJLpMZYD2d8Ki5zAe+QjSAn7mUMvf83meFl1w=
Subject key identifier: 76:DE:F0:A8:D8:20:DA:31:60:59:6E:CA:67:96:E5:C0:76:9E:13:45
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019D9998DD432C66C84A58F15722EC4C1F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 130A
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: OepybF61fp4rm0iRRkoVQxhDJeOMLEw0cSytB1/Hiys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:dd:43:2c:66:c8:4a:58:f1:57:22:ec:4c:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=76def0a8d820da3160596eca6796e5c0769e1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:e8:85:41:6b:1c:27:8c:87:74:15:c6:a2:
ef:a6:cc:4b:62:97:94:29:e8:6e:d6:c7:7b:c6:9c:
18:08:15:70:a9:d1:84:13:44:b7:e5:ce:a0:d4:8f:
58:71:fa:dc:bb:70:47:62:dc:8c:a2:89:f4:13:33:
4d:a8:57:41:f6:73:37:95:50:b8:12:cc:05:4b:ed:
4b:fe:43:81:d6:17:46:31:e6:51:c0:6b:34:d0:f1:
98:cf:3c:59:b9:92:af:f9:29:60:78:7f:31:dc:2f:
ff:4f:4b:bc:90:6c:52:6d:47:45:73:c8:6d:33:1b:
33:9c:4c:f5:ec:e6:6d:7a:63:fd:7e:16:0d:33:b5:
72:2d:ae:f8:dc:2c:f7:f9:73:a7:09:5e:eb:90:b5:
2f:3f:36:15:29:43:5f:24:1e:6a:c8:34:08:2f:50:
8e:72:0a:01:34:58:18:de:d0:df:01:71:ae:13:b0:
30:48:1c:bd:9c:88:45:c6:ad:48:1a:4b:63:e3:8c:
71:b7:2d:f3:12:3c:03:ab:71:23:4e:29:c8:b5:9f:
3b:6e:c8:74:3e:d1:f8:8f:6b:fe:7b:2a:2a:19:47:
7b:45:5c:6b:8f:35:02:44:3d:af:db:56:88:c1:82:
6d:53:27:4e:01:55:74:c0:b5:50:c7:56:2e:3f:e1:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:F0:A8:D8:20:DA:31:60:59:6E:CA:67:96:E5:C0:76:9E:13:45
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:da:eb:5b:4e:45:65:e0:9c:fa:92:1a:3a:9d:6d:a5:4b:a6:
8e:bc:cc:b3:9c:76:91:64:92:cf:bf:ff:0f:3f:5c:e8:31:14:
a9:17:a0:cb:60:dd:4d:39:08:e5:a2:70:0b:d8:6c:8b:0c:82:
31:24:23:9b:8e:33:8e:99:a6:b0:80:c0:db:12:51:a8:4f:6d:
24:05:0e:bb:e7:c5:74:e1:60:64:ce:27:55:f5:af:8f:a7:0e:
06:41:25:16:64:23:c3:b3:fd:75:9b:50:de:f7:69:5f:65:17:
3a:6b:f9:fc:47:2b:fd:e0:bb:52:a0:fd:33:24:af:5d:91:56:
c8:49:04:56:da:b9:f0:ef:87:6a:3d:0a:e0:2a:1e:b0:2c:17:
76:ce:96:19:2a:ff:fa:4d:a9:f5:e3:41:1c:7b:06:bf:d6:8c:
c8:bb:45:47:eb:b0:ea:f1:27:8b:5c:2e:09:c7:26:ad:95:04:
0c:31:e9:72:65:a1:2c:2d:86:cb:22:64:31:99:96:60:6b:1c:
84:14:b0:17:c0:ca:40:d4:e8:26:5f:aa:06:23:43:ac:ce:32:
d7:89:88:f2:ae:fa:a8:9f:84:5e:ef:f9:b2:99:7e:c6:db:0f:
98:1b:23:e7:7e:42:c0:42:2f:fe:a1:ad:08:90:1c:52:a9:eb:
81:fe:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:39 2026 by rpki-client