Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: E/bEsKtr3OnsLj0Lc8C+YCbpPWudJILFHH/EH/5rC/I=
Subject key identifier: D6:F6:01:DB:19:6D:DE:42:00:C3:51:DB:BE:FF:DF:D5:F1:04:48:EC
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 019D9AABB169B3B3AA7EA40C15C7C96FF24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: 8nmID8YSgejdLQDU1TdrXV697zE.roa (hash: KrMGBak4/fIs5j7LDuELbl6SHABXQ17c4ySNducYIik=)
2: A2M66sw2tcycyLjgPTEhytJQnIc.roa (hash: +Km27RHetRVgDuAGLBqMHsKKPqRCEvEoFi3khHWhEj0=)
3: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: mnS6WyJ9hhzEeK4mimxLOhDDP9yQfY4ZazdOPGnulnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b1:69:b3:b3:aa:7e:a4:0c:15:c7:c9:6f:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=d6f601db196dde4200c351dbbeffdfd5f10448ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:22:90:63:be:1f:6d:14:a0:e6:45:20:a5:
21:20:92:34:f6:a6:74:38:6d:c4:68:61:78:5b:90:
aa:92:b8:46:bf:d4:b4:26:ff:20:c4:f2:74:6b:3b:
70:c7:8b:89:f1:12:96:e4:4b:c7:51:51:81:92:67:
e9:e2:8a:c1:a6:b1:f4:1f:75:5e:79:a6:03:c3:6c:
bb:b9:52:60:5a:7f:cc:87:79:bc:46:9c:4a:33:c2:
5f:95:9c:cb:f0:29:7f:eb:c3:8f:a5:03:0e:4d:c5:
c0:57:75:84:a1:0b:7f:47:29:e5:14:e6:ee:fd:3a:
11:d0:cb:06:89:de:3b:fc:c3:0b:ba:1a:42:46:1e:
86:1b:c5:03:37:2d:40:86:f9:cf:a0:0b:6e:60:58:
b9:b9:69:39:e7:ff:ce:01:0e:6d:8e:ce:86:9a:a7:
01:a6:a6:24:a2:fa:18:82:57:1e:b0:82:ba:02:03:
de:c3:61:fc:10:e5:e2:52:62:8c:3f:44:87:7e:d4:
aa:d3:7b:93:e8:ad:28:87:c4:72:19:df:d2:d3:e2:
08:04:dd:06:18:a3:02:45:e0:2a:2f:70:76:10:59:
4b:83:93:e5:7b:a1:28:bf:1d:ce:22:0a:1e:eb:a7:
5e:d2:ed:90:3c:ef:a3:ed:0d:4a:e1:b3:99:4b:f5:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:01:DB:19:6D:DE:42:00:C3:51:DB:BE:FF:DF:D5:F1:04:48:EC
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:fa:9f:5a:16:2f:29:d1:ad:27:c7:4e:34:07:f1:42:c4:
17:2b:2e:b7:f2:21:72:46:8e:eb:7a:85:82:21:9d:1b:45:0d:
1d:c7:fb:6d:a0:4a:20:87:9b:3d:73:4d:be:12:aa:9a:37:20:
ef:be:f2:a0:c3:06:d6:0b:07:a2:2d:d3:aa:49:c8:a9:40:43:
3a:5d:0d:31:d4:04:42:e6:82:10:b5:f2:ee:3a:20:6a:c4:d6:
ab:14:cf:28:3b:89:18:0a:50:39:8e:ee:b5:4c:d9:84:d8:e3:
51:ec:d1:d7:83:0e:54:98:c6:ce:d1:a7:97:9a:91:8a:df:a1:
a3:31:08:b8:98:5c:83:31:6a:b6:ef:0e:e4:4e:30:bb:46:d1:
6f:7f:92:cf:d9:fe:8f:46:47:2a:22:e9:db:ab:84:83:68:b4:
bc:8e:d2:e0:b9:7a:dc:64:c3:dd:62:3b:5a:a8:48:37:50:a8:
5e:11:d3:3d:5c:63:14:94:43:0c:d3:e2:ed:a3:4f:c3:f1:c9:
dd:24:f4:a1:c9:29:37:aa:32:d2:06:3a:7a:3e:e9:8b:72:07:
4d:11:5f:b2:6a:ab:d5:4f:86:d4:63:61:99:36:b9:54:c0:47:
f0:09:b0:5f:f0:ba:b3:9a:32:d0:b5:49:cd:00:ac:74:58:25:
f2:cb:bf:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7Fps7OqfqQMFcfJb/JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzk4MjViMjY3NzVlMTU1MTA3MmY0NTdkMWVkZmQ5ZDBl
YmUyZGYwHhcNMjYwNDE3MDkwMDM2WhcNMjYwNDE4MDkwMDM2WjAzMTEwLwYDVQQD
EyhkNmY2MDFkYjE5NmRkZTQyMDBjMzUxZGJiZWZmZGZkNWYxMDQ0OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxQikGO+H20UoOZFIKUhIJI09qZ0
OG3EaGF4W5CqkrhGv9S0Jv8gxPJ0aztwx4uJ8RKW5EvHUVGBkmfp4orBprH0H3Ve
eaYDw2y7uVJgWn/Mh3m8RpxKM8JflZzL8Cl/68OPpQMOTcXAV3WEoQt/RynlFObu
/ToR0MsGid47/MMLuhpCRh6GG8UDNy1AhvnPoAtuYFi5uWk55//OAQ5tjs6GmqcB
pqYkovoYglcesIK6AgPew2H8EOXiUmKMP0SHftSq03uT6K0oh8RyGd/S0+IIBN0G
GKMCReAqL3B2EFlLg5Ple6Eovx3OIgoe66de0u2QPO+j7Q1K4bOZS/UsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb2AdsZbd5CAMNR277/39XxBEjsMB8GA1UdIwQY
MBaAFH45glsmd14VUQcvRX0e39nQ6+LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUr6n1oW
LynRrSfHTjQH8ULEFysut/IhckaO63qFgiGdG0UNHcf7baBKIIebPXNNvhKqmjcg
777yoMMG1gsHoi3TqknIqUBDOl0NMdQEQuaCELXy7jogasTWqxTPKDuJGApQOY7u
tUzZhNjjUezR14MOVJjGztGnl5qRit+hozEIuJhcgzFqtu8O5E4wu0bRb3+Sz9n+
j0ZHKiLp26uEg2i0vI7S4Ll63GTD3WI7WqhIN1CoXhHTPVxjFJRDDNPi7aNPw/HJ
3ST0ockpN6oy0gY6ej7pi3IHTRFfsmqr1U+G1GNhmTa5VMBH8AmwX/C6s5oy0LVJ
zQCsdFgl8su/Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:41 2026 by rpki-client