Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: xfDyz73LazqW55cexDwDPLFScxCHk/4R30Klc8pSRuE=
Subject key identifier: 1B:D6:3A:27:29:67:42:0E:C5:89:8C:92:26:E7:CB:A0:3C:D3:27:DA
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019D98862B828F03E01CCCFBFB8D7BF92566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: OKFROBFgzLbffl9FvVpaVF60FomohMnUoRf36oH700E=)
2: JmBNmBKIgqKO_ZhjRd9uDlu62G4.roa (hash: BFiumCe31FgvogRmYhZXe4XUH4NFOPl+f+uzimA8KGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:2b:82:8f:03:e0:1c:cc:fb:fb:8d:7b:f9:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=1bd63a272967420ec5898c9226e7cba03cd327da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:2d:6d:70:5f:ba:7d:dc:51:fa:fb:3f:9f:
8a:5e:b4:88:32:18:a9:de:b5:84:5b:a5:2d:ea:90:
0b:84:20:6c:0d:1d:d9:2f:60:89:4d:6d:20:6f:50:
50:3f:b7:b1:db:db:f3:9a:62:12:e0:4e:a6:de:f0:
65:3a:29:08:5d:1e:ff:be:ac:47:13:64:99:9a:4e:
93:fe:71:bf:23:d0:d2:5d:1c:ad:08:84:60:5a:5c:
63:7e:ce:eb:49:93:09:e6:e1:c1:76:87:45:ba:ad:
b6:73:42:01:43:ee:a2:69:a1:0a:4b:ee:c8:a4:f6:
56:f5:a3:76:7d:c8:37:ab:4e:5c:6c:35:64:97:69:
b5:86:1f:3e:67:7e:64:4b:a7:b8:d1:19:6a:fe:dc:
ed:b6:dc:fa:3f:f8:2f:e7:bf:e5:ff:0c:6b:f1:75:
70:ef:cf:86:c5:c0:46:e0:c9:5d:1d:3f:f8:69:da:
30:7e:cb:82:f6:99:55:ac:90:50:ae:ce:16:c3:04:
a7:69:1d:3c:9a:5b:ec:2c:6f:30:97:16:84:25:5f:
88:35:2b:b4:f0:db:77:69:c2:85:81:77:89:83:2f:
70:9c:39:6f:8e:13:2f:3a:4e:25:51:46:48:d0:c1:
26:01:02:87:e8:61:c9:b8:fb:8e:83:b6:49:73:ac:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:3A:27:29:67:42:0E:C5:89:8C:92:26:E7:CB:A0:3C:D3:27:DA
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:49:30:c1:01:ba:b9:1d:0d:5c:9f:fb:1c:a9:4b:02:e0:
48:f7:0c:62:0a:40:ca:44:21:4c:bb:a0:a0:fe:b9:52:fa:4c:
fd:aa:99:9a:c2:a9:ee:0a:0f:d1:93:39:a0:10:17:03:b3:ef:
fe:94:6d:10:ff:79:83:bd:46:e5:46:ac:05:12:60:23:10:0c:
5e:09:63:18:73:be:0e:37:56:d6:7e:9a:52:53:3f:a0:85:4b:
37:a0:33:05:3e:9d:b6:ec:9b:f9:d1:02:ce:21:45:4a:d7:5a:
d8:64:32:d5:f7:20:25:92:58:6e:56:6b:a7:65:9a:d8:ea:60:
a2:8e:ef:a0:d3:fb:17:e9:5e:b2:89:4d:df:4d:30:8c:fb:5a:
b8:d6:86:75:cb:f4:8d:54:94:fa:b5:ec:b3:1c:2e:45:36:e8:
33:c4:0e:21:a1:26:27:08:29:28:8c:bd:a9:b2:94:84:be:08:
a0:86:89:19:28:56:29:d5:84:4b:6a:01:bf:f7:9f:58:ba:7f:
c3:65:75:ee:12:7c:94:80:5d:54:d8:63:1d:89:e9:9e:1d:e2:
63:a8:42:69:93:16:0c:8f:f5:ab:55:35:51:43:d8:7a:9b:45:
50:fa:00:96:62:9c:85:3c:57:f6:7b:07:55:a2:85:7a:11:ea:
f4:bd:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:07 2026 by rpki-client