Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: HPULFXPE3UIwCT6uY3Pr+7f0fBKPulTIPSljxwwVUxQ=
Subject key identifier: 0A:2F:48:B6:DC:34:A5:18:29:90:E6:43:6E:2A:59:B7:22:17:71:65
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019D9B872F458A4B1BA2A0C443E7DD65D1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 02EB
Signing time: Fri 17 Apr 2026 13:00:21 +0000
Manifest this update: Fri 17 Apr 2026 13:00:21 +0000
Manifest next update: Sat 18 Apr 2026 13:00:21 +0000
Files and hashes: 1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: cDohxaEc86a5YHNf/rHLtjnLcyohsGb9gTQvVCdfUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:2f:45:8a:4b:1b:a2:a0:c4:43:e7:dd:65:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Apr 17 13:00:21 2026 GMT
Not After : Apr 18 13:00:21 2026 GMT
Subject: CN=0a2f48b6dc34a5182990e6436e2a59b722177165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:31:8a:40:e0:7f:e6:d5:30:f1:d1:bc:8f:
9a:fe:74:14:52:10:de:4d:cb:73:6e:a0:12:55:75:
51:6f:ff:67:92:65:96:b4:74:42:d8:9d:7e:4c:24:
43:5c:84:d8:d9:cf:40:39:5d:d3:fc:03:56:f5:a8:
6e:f3:7d:c8:41:48:2d:34:6d:58:5c:22:eb:6c:b0:
80:5c:d7:fe:c7:3d:09:ca:b5:4d:ac:55:70:ec:34:
56:95:38:68:41:a1:e4:cc:4c:7c:a7:15:24:fe:bd:
7f:d3:97:25:c3:f1:22:d9:ba:30:97:ef:8a:a9:9d:
ca:4a:c1:e6:92:ca:c4:b3:a6:f8:f2:a8:78:e7:e4:
0f:42:66:23:0c:c5:21:c6:89:8a:cb:b4:58:0f:0c:
4c:cf:b8:76:54:4a:95:2b:35:d0:be:2d:7d:51:55:
90:1a:ee:70:8b:f8:07:39:78:b3:03:b3:a3:e4:9d:
48:25:1d:a7:cd:d2:f8:79:da:39:2e:7e:b8:fe:45:
b1:fc:37:b6:86:79:fa:21:da:a4:84:77:81:8a:1f:
14:b6:77:f4:d5:31:1c:ba:ce:70:8f:15:71:d6:ab:
8f:15:f7:8c:6b:93:f7:c9:f9:dd:70:9d:ab:06:fa:
d2:f2:82:5d:53:eb:d9:1e:c0:74:57:44:92:c8:91:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:48:B6:DC:34:A5:18:29:90:E6:43:6E:2A:59:B7:22:17:71:65
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:c4:c2:ff:88:a6:b5:0b:3b:92:34:f6:45:a6:ef:cc:0a:
0a:3c:4a:10:a4:07:10:19:23:b2:e0:8c:58:6e:7c:9c:77:4c:
ff:fd:5f:89:fa:72:dc:40:bd:67:45:24:a4:7e:c3:0f:6d:79:
f1:b1:b3:1a:7c:78:2f:71:53:a3:66:ac:77:65:41:41:17:ba:
71:b7:f3:62:03:e7:40:e1:3f:7e:2d:f0:63:9c:58:72:21:7c:
e1:f6:f8:c5:f9:1a:34:37:34:cc:7d:6e:a0:63:34:2f:2a:e9:
98:b0:68:f9:bb:29:32:b7:4e:a5:43:c4:8e:54:4a:eb:1b:27:
8a:8a:e7:ad:e8:21:e3:4c:82:ec:b8:26:fd:26:33:21:13:dd:
f4:b8:a6:f7:25:55:bc:94:dc:da:17:28:95:bd:44:38:4c:4e:
a4:d6:57:0a:e4:f3:13:cb:54:7c:2d:ea:39:a7:91:64:a4:1d:
e8:c2:e6:15:d0:11:00:04:f5:4a:99:ed:47:5a:5e:4a:55:cf:
a6:6c:a1:c0:6c:86:c7:23:94:06:82:83:ef:58:77:75:bb:21:
3c:3a:ed:b1:82:22:1d:5c:f1:47:61:8e:15:2f:15:0f:8d:a0:
52:0a:38:7b:c1:27:ce:bb:fa:82:2a:0d:72:08:b3:e6:96:d1:
61:b1:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:30 2026 by rpki-client