Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: dRCDO7YA+MFbqL0GxJmH7ZqMCaCLGSYCFWBR6P6tjVc=
Subject key identifier: EC:0F:E0:56:8A:34:F8:CA:BB:7A:D0:00:16:36:FE:62:05:DC:4B:CF
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 019D98F407EEC6D201777C187884653D1B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 0958
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: yvTq5rptz2aSyzoakxkmHrJ1C5cfyBom1KYkbPM87Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:07:ee:c6:d2:01:77:7c:18:78:84:65:3d:1b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=ec0fe0568a34f8cabb7ad0001636fe6205dc4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:b7:57:24:23:93:ef:68:a1:2c:86:25:df:
1d:eb:9b:a9:52:14:47:0c:8a:12:31:14:c5:a6:d5:
f3:4f:31:17:90:0c:9e:8e:5f:fc:e1:2f:9b:ac:e5:
0b:f5:49:90:f6:c4:7d:b7:45:cf:2a:a0:0f:ea:96:
9c:15:4c:ca:76:29:a3:0b:1d:35:7c:b9:56:34:f0:
b2:fb:4c:97:64:09:04:39:50:ce:48:50:04:fb:b7:
7a:47:3a:f7:02:48:28:07:96:95:5c:57:f3:8f:07:
40:70:05:d5:a5:b2:ad:72:60:11:ac:13:22:0a:a1:
f4:13:7a:cf:b7:14:a6:78:bc:26:a5:00:51:6b:86:
c1:ec:d0:e4:92:0c:87:0a:ce:5f:ce:25:7a:f6:fb:
d3:bf:d7:43:fe:33:27:7d:06:43:fc:30:40:7e:ea:
de:37:ce:0a:29:5b:25:88:dc:30:cb:ff:c5:ab:9a:
e2:1b:5f:cd:9e:5b:8d:2b:bb:41:7d:59:a6:48:d2:
97:ba:28:54:7e:45:a0:28:b7:af:56:58:99:75:b1:
29:14:87:64:5d:e2:0c:b9:86:61:e4:27:cc:4d:19:
42:0c:a9:9b:4c:a8:c9:e9:fe:1a:5a:09:99:0a:b4:
08:b6:a7:26:92:41:aa:48:b4:39:39:8a:10:7f:a8:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:E0:56:8A:34:F8:CA:BB:7A:D0:00:16:36:FE:62:05:DC:4B:CF
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:38:c4:a5:de:84:f7:78:8a:70:16:e6:30:0b:9e:58:46:
50:e5:a6:62:51:2f:28:9d:f9:04:1f:ea:d0:87:66:17:f5:0b:
bf:06:32:0d:57:99:04:e1:64:98:08:5e:93:6c:d9:7c:9e:bf:
ba:d4:41:3a:41:66:8e:54:2f:c7:98:7d:bb:d9:78:a4:44:1c:
cc:c7:37:f5:d5:05:64:f6:24:0b:51:41:8c:d5:a0:f2:f5:a6:
13:36:57:94:d1:fb:43:37:4b:e2:f9:19:c9:94:82:f2:d9:c2:
63:fd:e0:7f:f5:a2:35:70:50:fa:f4:da:7d:fe:f2:ac:a2:96:
a8:4d:76:41:d1:84:15:92:a4:ef:35:57:bb:cc:24:d4:9f:1c:
f3:f4:6e:c2:4b:9a:47:f9:c0:40:71:97:9d:68:03:f9:72:11:
85:81:bc:2e:c2:78:99:4e:fc:9a:cb:97:e9:74:f0:e2:7f:e8:
07:4b:f8:61:55:f2:33:9c:00:f6:a8:ef:04:b0:90:9b:9e:82:
b9:cc:24:02:ac:f0:6d:0f:49:42:78:c3:5a:3a:c9:f8:69:80:
27:1e:2b:93:f5:73:7a:0d:18:5f:69:64:fa:6a:c6:0f:b1:65:
7c:3a:b6:47:0a:74:a2:b9:9d:38:1a:d7:33:b6:e5:7e:f1:f2:
ff:27:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:11 2026 by rpki-client