Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: LQd4pFLg5jQZ9TNavQ1pIAuInwW5MJh0wvUzBquOAyo=
Subject key identifier: 82:D1:46:14:EB:0E:93:AE:45:1E:63:5B:9E:D7:C6:1D:EC:E2:6B:60
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019D98BDCE76C33946414CB9E1230362977D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 0B50
Signing time: Fri 17 Apr 2026 00:01:09 +0000
Manifest this update: Fri 17 Apr 2026 00:01:09 +0000
Manifest next update: Sat 18 Apr 2026 00:01:09 +0000
Files and hashes: 1: BwQVQ_CjJfdcPm0-S87mGB0Ours.roa (hash: Ta3LRpNzq0lEJK2G/WE3LSjK7WYr/aPEY/T1lVk/51A=)
2: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: zbJNZkmHGUgDdU1RbjN5+grsvGyBIR+u7bmyEgWFv7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ce:76:c3:39:46:41:4c:b9:e1:23:03:62:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Apr 17 00:01:09 2026 GMT
Not After : Apr 18 00:01:09 2026 GMT
Subject: CN=82d14614eb0e93ae451e635b9ed7c61dece26b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:73:d6:1a:ce:ed:e4:b2:61:dd:26:a8:9a:
50:85:55:86:25:da:1c:6d:95:48:3e:ad:fe:4e:60:
79:b9:39:06:12:c3:c1:d9:80:00:6b:53:e9:04:80:
4f:16:48:32:46:46:74:3d:ef:b3:ad:57:0d:8e:6d:
82:a3:b9:58:42:13:a2:da:be:30:1f:5e:3f:ea:a6:
d2:a1:6f:b5:85:22:f0:ec:b3:40:ad:a3:5d:e7:a5:
c4:ad:27:89:4d:84:a6:01:49:ac:e9:11:99:9c:9b:
96:db:66:76:4e:02:4b:c3:58:b2:d6:14:7c:76:e7:
75:0d:b9:68:f3:1f:e4:9c:5a:e6:fd:4a:d7:e8:2d:
70:1c:e3:12:c9:ac:90:fa:ec:7b:af:74:59:3f:9b:
1c:47:c5:41:4a:58:33:de:69:9f:45:a2:18:9f:00:
e8:a8:6d:77:17:5b:a9:ab:36:0a:0e:0e:68:52:98:
87:09:58:d3:be:6a:d8:60:f4:e4:4d:3d:c6:3d:78:
2e:bc:1e:d8:9a:cb:0c:a8:6a:9b:d9:fd:cd:94:96:
67:54:34:ad:76:ab:ff:8c:6d:b2:4b:6f:70:b7:7b:
a6:dd:91:12:cc:d4:a1:44:10:c8:e8:23:cc:ee:12:
df:80:91:de:0a:0b:7d:66:85:84:83:02:22:45:e1:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:46:14:EB:0E:93:AE:45:1E:63:5B:9E:D7:C6:1D:EC:E2:6B:60
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fe:db:8c:4f:05:ec:8e:36:19:93:1f:98:99:52:89:50:e1:
0d:03:79:a4:1a:45:3d:48:ec:48:29:6a:b6:ac:65:7d:ae:57:
38:3c:a0:af:47:15:ff:6f:f5:05:ff:6c:a8:27:04:85:ea:43:
9f:be:7f:e0:44:c7:d8:6f:0d:5d:4f:05:46:3f:62:6a:c7:6b:
d7:e7:8c:c0:d9:b4:49:fc:58:5d:48:7e:39:70:b4:de:72:58:
94:19:62:94:88:08:05:10:35:99:39:9e:29:42:5c:cc:9e:2b:
f0:5f:00:2b:0f:62:fe:d3:8a:cc:52:13:84:36:e6:87:04:dd:
89:06:90:47:b0:45:6c:f2:1c:36:7f:cb:d6:ce:78:1a:cb:61:
40:f3:7e:07:41:48:57:e2:88:df:0c:30:15:fb:14:16:ef:f1:
a4:1f:ea:2b:f6:37:26:6c:3b:85:88:b5:90:64:8c:d8:6e:09:
5f:0f:79:60:29:02:62:cb:6b:34:ba:b3:7d:70:7c:16:5e:06:
a2:1f:2f:77:dd:f0:9a:1a:84:e4:61:91:5f:d3:29:12:08:94:
e9:68:ef:c3:c6:28:af:cd:68:b7:a6:1a:a7:ac:09:61:2b:5a:
81:c1:d8:dc:2b:50:70:62:c3:a2:72:a2:27:a6:f9:83:52:22:
36:91:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:55 2026 by rpki-client