Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 7mOOVGURAfijksOHQmh1SsYCKt61HT1eBZfqf9WhuNY=
Subject key identifier: C7:17:98:21:8D:B8:C7:A6:6A:C1:4A:8A:1E:2B:99:06:E8:5C:74:2E
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019D992B488ADF0706B5FD4C37D8B76F3A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1809
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 9802Ia6mnUEdrejnOCXiScF8N7UhXX/2T3pbDmp8JPs=)
2: HvJoh_J563JWnIBpkcZqWaGiBuw.roa (hash: 5EmXJWWwzgqHx3fgQLLAjtkhJ90g8NJqu27jUl1kKhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:48:8a:df:07:06:b5:fd:4c:37:d8:b7:6f:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=c71798218db8c7a66ac14a8a1e2b9906e85c742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:79:9f:7c:82:0c:b2:c5:98:f5:24:d9:96:
49:0c:a5:19:7a:51:50:13:7b:eb:39:3a:a9:f2:f2:
67:94:ff:9f:e1:8a:96:bb:14:3b:90:9e:d5:63:27:
d0:92:e3:d1:29:54:fd:c0:91:53:78:a7:09:5f:76:
47:1c:be:5a:73:c8:c8:38:3f:b1:54:9e:c3:5d:29:
9f:82:c9:3e:16:f4:1e:9c:89:40:c5:88:cd:14:87:
1f:38:40:e6:10:21:fa:d3:96:ea:a9:9e:1c:16:7b:
46:57:fc:e5:6b:e0:d5:8b:67:65:83:de:9b:ea:7d:
c0:b0:a8:59:1f:12:af:c7:f8:90:6c:82:4c:85:15:
65:fe:39:ea:f9:e8:a4:45:45:47:f1:21:34:fa:ba:
aa:29:87:20:42:75:6b:5e:33:ad:36:37:27:13:87:
8e:99:12:0c:45:1e:a8:39:4e:83:4c:f8:38:f9:09:
4e:89:cd:69:20:a1:c4:4d:a3:5d:a8:04:e6:a4:3e:
a0:62:21:ef:c7:50:e2:b4:e8:22:72:db:49:1a:3c:
1c:e5:3c:25:f5:ee:50:62:e8:c4:fc:21:ec:9d:7e:
ee:aa:26:20:12:f2:40:f2:11:d2:c6:16:f3:9b:16:
f2:0a:a7:d8:c4:8f:a0:02:7f:8c:8c:4e:41:2a:cd:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:98:21:8D:B8:C7:A6:6A:C1:4A:8A:1E:2B:99:06:E8:5C:74:2E
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:36:12:e7:57:8e:21:9f:6a:73:66:54:b9:63:73:07:37:6e:
df:b5:f7:10:1d:88:b0:a7:7c:ae:f3:c0:6f:87:2f:b1:85:9c:
ab:6d:56:a2:77:b7:4a:f8:82:82:53:e8:b2:e8:c7:95:c5:a4:
46:9d:bd:ea:49:bb:e3:ae:93:98:9f:d1:1e:17:67:f1:e7:cd:
41:09:d1:97:f8:69:95:14:ab:6b:8b:3e:da:93:e6:89:70:2b:
82:d8:90:b7:c3:f7:11:23:80:90:0e:c9:66:97:98:81:18:a3:
17:4a:db:be:0b:ca:9e:4c:ba:1a:fa:f1:93:d7:c6:4d:86:38:
72:99:74:39:b0:a8:9c:68:2b:c6:09:85:67:0a:3e:12:0f:de:
b4:6e:8c:5b:24:ec:9f:38:73:db:f3:ce:12:49:d1:65:ce:ee:
51:6e:f5:0a:71:13:70:0f:2b:ba:5f:42:87:67:a9:50:10:dd:
7d:48:44:46:1f:07:f1:83:e4:7f:77:da:91:e2:12:b4:f0:bb:
f7:3a:f0:b8:d7:93:a7:93:91:46:25:6e:a6:c9:94:18:78:ab:
36:0d:0d:d1:95:1f:ad:ec:50:ae:58:f9:ed:2f:fb:20:95:c9:
f9:2d:ba:b3:06:1f:23:22:cf:75:20:f5:a7:8e:b1:81:f6:13:
f2:e3:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:32 2026 by rpki-client