Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: +jjCOWm4iSN/84CjxtVnw+KMXQpdytpHP5BhTbunHuI=
Subject key identifier: 0A:1B:7B:57:9D:17:E6:F4:FB:4A:F3:C2:33:36:5B:09:9F:F0:A5:CE
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019D9A3EA1C40A102976B1764B00809902B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1556
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: M8OK7rDCqAN6UW5EIp21+E6jxMvljoZbi6zWefgPADQ=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a1:c4:0a:10:29:76:b1:76:4b:00:80:99:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=0a1b7b579d17e6f4fb4af3c233365b099ff0a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:d2:e1:4b:b9:13:87:b8:24:8c:b3:b5:95:
98:94:9b:99:75:ef:ae:8c:74:f9:7c:b2:30:8d:9b:
d4:4f:79:eb:73:74:c0:cc:49:b5:c6:48:f9:b8:84:
16:0a:dd:2e:39:04:93:e7:40:1d:89:d0:06:35:92:
1a:5d:8c:c0:32:49:94:b1:02:4f:22:d5:c2:c9:90:
57:63:97:30:b4:7c:7a:e9:32:c2:e9:67:b4:eb:af:
ac:ed:41:d4:0f:dd:41:6d:65:4a:90:31:45:68:84:
70:95:42:18:1c:d8:73:7c:34:8b:34:48:05:bb:41:
cc:96:ae:80:66:dc:2c:69:27:42:15:80:b8:9a:0a:
80:66:fc:a8:0f:0d:33:95:03:63:80:65:11:1a:43:
df:56:4f:02:94:73:2a:52:4a:55:12:9a:90:d7:8e:
54:37:6d:98:27:25:f9:66:03:3d:6e:ad:e8:75:0d:
59:9a:7c:2d:3d:fc:7d:66:63:bb:c9:a1:95:35:be:
3d:4b:11:d3:b9:c6:56:fe:be:b1:a5:f6:7b:6e:ec:
48:93:34:62:d7:ec:06:59:32:61:4a:c7:d1:0b:02:
d0:cb:7d:43:4e:62:57:97:8b:34:32:a1:61:13:d4:
b0:25:09:24:2d:c2:1d:2c:32:db:af:64:14:f2:24:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:7B:57:9D:17:E6:F4:FB:4A:F3:C2:33:36:5B:09:9F:F0:A5:CE
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2d:42:6d:5e:8a:fd:05:7c:c1:bb:d0:6a:14:a6:8d:1b:7a:
c7:70:ae:67:0f:d7:36:de:58:c5:74:5b:5e:8c:b1:fd:30:56:
32:f6:a2:91:5d:5c:6b:06:26:ed:c5:0b:01:06:cd:cb:60:c6:
41:7d:d3:ce:5d:15:61:d8:8f:c4:a3:11:01:51:e1:60:98:a6:
60:ea:a0:db:20:4c:d0:b0:3b:c0:2b:1c:c9:cf:0a:72:dc:8c:
9f:27:c1:28:6b:f2:88:b3:4f:e4:c0:df:18:8d:06:04:b0:a6:
7a:45:d9:55:ea:cd:ec:ac:99:cd:6f:10:b0:4f:83:ca:b6:e7:
ba:9b:a6:7a:62:83:2f:90:26:e4:d4:dc:35:0d:44:ec:f2:5a:
44:9e:cf:08:31:6b:bf:82:99:35:2e:71:8c:7a:58:b7:b6:51:
1e:34:15:14:fa:51:ee:41:a7:80:4a:d9:ca:18:7c:05:8c:09:
78:d8:4a:00:a9:94:9b:66:8d:2d:cf:cb:df:8a:90:0a:7e:4a:
1c:f2:b1:b9:f1:e2:2f:ca:c2:2d:a2:70:d3:79:74:e2:1d:1e:
12:ee:1a:50:1a:4f:0e:18:04:cf:31:d4:f8:ed:59:25:c1:bb:
85:bd:bf:f4:ac:5a:f3:62:87:0b:df:ef:be:19:af:89:fd:81:
01:9c:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:44:02 2026 by rpki-client