Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
File: fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft (raw, json)
Hash identifier: 0t+Q7qlBZuNwHhh+uh+NBWlkgMG6YpIZlt1yzEDGC68=
Subject key identifier: 4D:D1:64:32:92:8C:B3:09:30:7D:F8:42:15:6E:A2:F2:FC:28:39:EF
Authority key identifier: 7C:97:B6:90:B6:1B:5A:4F:86:70:91:0D:DA:B4:C6:5A:A8:7A:88:34
Certificate issuer: /CN=7c97b690b61b5a4f8670910ddab4c65aa87a8834
Certificate serial: 019DA4C1D09458068538A60F71D9C5D1937A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
Manifest number: 35
Signing time: Sun 19 Apr 2026 08:00:58 +0000
Manifest this update: Sun 19 Apr 2026 08:00:58 +0000
Manifest next update: Mon 20 Apr 2026 08:00:58 +0000
Files and hashes: 1: EXc86XlHMghABmd46_9YhwTFqyg.roa (hash: STPylVHN69IxUeHu9IEtRDj3HWN1YmaxpLQkEiE+qf4=)
2: fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl (hash: ntFk0LhMdQNDejnE3FpGe6lyrbjKGKQCb93KOZy/+ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:d0:94:58:06:85:38:a6:0f:71:d9:c5:d1:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c97b690b61b5a4f8670910ddab4c65aa87a8834
Validity
Not Before: Apr 19 08:00:58 2026 GMT
Not After : Apr 20 08:00:58 2026 GMT
Subject: CN=4dd16432928cb309307df842156ea2f2fc2839ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:03:c3:95:b1:7c:56:ba:fa:39:74:f2:29:
22:62:76:9e:99:8c:48:0f:27:82:8f:50:58:f0:f8:
4d:64:76:af:31:6e:53:fc:cc:bc:5e:e9:14:bf:bb:
08:b0:fb:4f:9b:3d:dc:84:13:4d:52:6e:ae:7a:3e:
f2:db:b2:52:43:cb:a1:72:c3:38:18:ba:44:aa:6b:
0e:b4:c9:54:03:e4:4c:ef:75:05:91:81:bc:ee:a4:
09:f6:47:74:b6:a1:67:3e:e4:2d:49:cf:44:97:b4:
8d:b3:99:15:8e:7d:6b:17:59:fd:37:fc:ad:d5:91:
49:7d:6d:46:eb:8d:a0:b9:21:52:29:8c:f0:67:7d:
94:9c:14:8a:53:8a:1a:59:be:3c:5d:6d:a4:65:c7:
86:fc:26:e7:49:91:9c:09:fb:f7:5c:9a:56:28:ab:
f1:08:2e:7f:e5:b8:ef:45:5f:76:02:9a:53:09:fa:
0c:a8:54:d3:94:ba:b0:a3:19:fc:53:3f:5a:3c:f3:
84:0a:25:73:cc:97:e8:af:74:32:5c:35:b1:32:9e:
e6:76:a3:c7:2e:47:70:1a:75:af:eb:af:be:71:c8:
93:87:12:31:a4:0e:22:0d:32:d2:ab:71:88:55:65:
8d:85:85:d0:77:aa:8d:51:0e:a4:80:62:8f:b5:cb:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:64:32:92:8C:B3:09:30:7D:F8:42:15:6E:A2:F2:FC:28:39:EF
X509v3 Authority Key Identifier:
keyid:7C:97:B6:90:B6:1B:5A:4F:86:70:91:0D:DA:B4:C6:5A:A8:7A:88:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8f3b97-7bc4-4c8d-b5a5-296739745bdd/1/fJe2kLYbWk-GcJEN2rTGWqh6iDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:37:20:2e:f0:52:86:3b:bc:29:f1:b7:39:a6:27:08:61:
5d:28:3b:a7:a9:8f:ba:ab:f6:6c:b6:a6:28:27:66:ac:e5:e7:
e4:6e:3a:06:c1:5c:52:59:a7:9b:a9:6d:88:5d:26:ca:03:f9:
95:92:f9:aa:9d:cf:11:07:61:92:40:59:99:84:77:e3:e2:4a:
09:bf:5b:8e:48:c9:4a:41:d6:aa:86:50:07:cb:91:9b:39:0a:
f0:2f:0c:c2:82:7e:e1:ef:55:5c:35:88:89:77:08:b0:a8:be:
e0:a2:de:02:db:aa:bc:5e:7f:2b:7a:18:27:d9:f0:43:f1:6b:
bd:40:c8:4c:a9:ab:01:65:65:56:a3:8e:b2:b4:4a:93:b7:f7:
74:22:7d:30:5c:87:b6:05:89:b8:d9:9c:e6:f8:6d:78:ab:de:
84:63:9d:f3:a8:97:30:84:06:fd:f5:a0:54:7e:d7:c3:16:60:
9e:7d:c1:48:ba:93:bc:a4:fd:6d:4a:11:9d:7c:54:7f:a0:02:
e5:a1:bb:26:39:ee:b2:86:ea:e1:08:c9:9b:7a:ff:5d:9a:a5:
89:5d:83:48:18:48:95:80:df:68:85:58:ee:cd:a4:da:25:1b:
f7:b5:ae:e0:30:d1:47:05:50:d5:c7:79:ba:ed:d8:31:2c:c6:
58:91:d5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwdCUWAaFOKYPcdnF0ZN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTdiNjkwYjYxYjVhNGY4NjcwOTEwZGRhYjRjNjVhYTg3
YTg4MzQwHhcNMjYwNDE5MDgwMDU4WhcNMjYwNDIwMDgwMDU4WjAzMTEwLwYDVQQD
Eyg0ZGQxNjQzMjkyOGNiMzA5MzA3ZGY4NDIxNTZlYTJmMmZjMjgzOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUkDw5WxfFa6+jl08ikiYnaemYxI
DyeCj1BY8PhNZHavMW5T/My8XukUv7sIsPtPmz3chBNNUm6uej7y27JSQ8uhcsM4
GLpEqmsOtMlUA+RM73UFkYG87qQJ9kd0tqFnPuQtSc9El7SNs5kVjn1rF1n9N/yt
1ZFJfW1G642guSFSKYzwZ32UnBSKU4oaWb48XW2kZceG/CbnSZGcCfv3XJpWKKvx
CC5/5bjvRV92AppTCfoMqFTTlLqwoxn8Uz9aPPOECiVzzJfor3QyXDWxMp7mdqPH
LkdwGnWv66++cciThxIxpA4iDTLSq3GIVWWNhYXQd6qNUQ6kgGKPtcv7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3RZDKSjLMJMH34QhVuovL8KDnvMB8GA1UdIwQY
MBaAFHyXtpC2G1pPhnCRDdq0xlqoeog0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkplMmtMWWJXay1HY0pFTjJyVEdXcWg2aURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84ZjNiOTctN2JjNC00YzhkLWI1YTUt
Mjk2NzM5NzQ1YmRkLzEvZkplMmtMWWJXay1HY0pFTjJyVEdXcWg2aURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84ZjNiOTctN2JjNC00YzhkLWI1YTUtMjk2NzM5NzQ1YmRk
LzEvZkplMmtMWWJXay1HY0pFTjJyVEdXcWg2aURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH43IC7w
UoY7vCnxtzmmJwhhXSg7p6mPuqv2bLamKCdmrOXn5G46BsFcUlmnm6ltiF0mygP5
lZL5qp3PEQdhkkBZmYR34+JKCb9bjkjJSkHWqoZQB8uRmzkK8C8MwoJ+4e9VXDWI
iXcIsKi+4KLeAtuqvF5/K3oYJ9nwQ/FrvUDITKmrAWVlVqOOsrRKk7f3dCJ9MFyH
tgWJuNmc5vhteKvehGOd86iXMIQG/fWgVH7XwxZgnn3BSLqTvKT9bUoRnXxUf6AC
5aG7Jjnusobq4QjJm3r/XZqliV2DSBhIlYDfaIVY7s2k2iUb97Wu4DDRRwVQ1cd5
uu3YMSzGWJHV+w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:59:56 2026 by rpki-client