Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: bIw1yjzd5xdQy11pIDPKD7MrhDttyaGZUvD0187UbXA=
Subject key identifier: 4B:91:7C:22:10:A4:7C:F9:01:B3:78:10:4A:78:8B:77:34:B7:99:F9
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019D988693D6208ADA0279B9A349461D1C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0CCF
Signing time: Thu 16 Apr 2026 23:00:49 +0000
Manifest this update: Thu 16 Apr 2026 23:00:49 +0000
Manifest next update: Fri 17 Apr 2026 23:00:49 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: NqhWBKDs+9wxgmIELU/epcLRi0Jjiws8zVOAOqE0mcw=)
2: _skMItwD6Eu91kipg5Jm13IU69k.roa (hash: v6QmCXfDrAwGVhq/iR49FnGvFa53FGwkH8sDBGvrAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:93:d6:20:8a:da:02:79:b9:a3:49:46:1d:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Apr 16 23:00:49 2026 GMT
Not After : Apr 17 23:00:49 2026 GMT
Subject: CN=4b917c2210a47cf901b378104a788b7734b799f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:00:83:fc:0f:e5:87:11:e0:0b:ce:42:5e:
5f:49:a0:01:c5:ae:08:fe:e8:08:67:b7:3e:b7:1b:
19:63:5e:2b:c4:60:97:19:6c:b6:df:b8:3d:a6:13:
7a:ad:52:79:65:09:74:c7:b9:d1:c9:1b:73:0a:6a:
33:34:af:27:0b:9c:b9:86:55:02:ee:0a:c9:50:19:
82:9a:6d:bf:96:78:30:23:ea:74:e2:e2:5b:97:62:
60:ba:08:3d:30:a3:3c:d2:fb:1c:89:c3:a9:4d:ba:
82:23:55:5b:7a:9d:e7:4a:b4:13:26:23:4b:1e:9d:
47:92:67:8a:ce:91:7f:9e:f3:dc:6c:be:d1:48:66:
a4:aa:23:56:dc:9b:0a:48:a1:a2:93:a3:14:b2:00:
e0:37:2e:58:b7:13:9a:b4:f6:bc:80:c4:ab:1c:17:
dc:06:1f:49:69:8c:f4:12:e1:41:25:bc:ff:50:92:
be:db:ee:0b:58:08:03:98:73:0a:97:bb:ee:9e:60:
41:33:03:5d:ed:01:a7:0b:c8:2e:f8:4b:25:02:85:
1b:ba:ba:02:b7:f6:94:32:cb:68:f1:b3:a2:75:70:
46:c0:e4:b7:86:7b:f4:8b:8f:f3:63:aa:e7:35:9a:
60:4e:63:d7:88:38:a4:ed:f3:0f:54:c8:85:8f:d5:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:7C:22:10:A4:7C:F9:01:B3:78:10:4A:78:8B:77:34:B7:99:F9
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5c:4c:f6:7d:ba:e8:83:9a:de:f6:65:eb:52:19:e3:99:19:
a7:77:87:61:53:10:21:fd:e0:1e:b4:ee:e7:ee:7a:d0:da:fb:
41:e3:e5:1a:5d:9c:9b:5e:eb:10:bb:59:91:67:5b:b8:68:6b:
52:07:5f:a6:db:59:55:85:12:b2:25:4b:09:fe:91:3b:72:85:
dd:c7:f4:2b:40:9d:85:14:c1:b6:f4:07:43:0a:bb:7d:2b:f1:
23:74:97:f1:f8:0d:d3:ed:f9:3c:3f:08:0a:36:da:aa:79:d4:
e7:3a:ce:c4:f1:10:50:a7:b8:c1:0b:86:3b:15:c5:1d:b1:2a:
f7:c1:46:11:a9:78:bd:09:ab:90:1d:b8:05:ab:19:f3:21:bb:
39:97:94:81:6c:2d:93:bd:85:c0:4f:e0:89:7c:7b:38:4b:50:
93:b6:59:34:36:23:d0:ab:58:60:76:8c:2b:f7:9e:ef:0e:63:
ca:cf:bc:fd:e5:b7:0e:9a:7a:07:c8:e6:09:6a:45:5c:c0:07:
cc:21:ce:15:10:79:a8:db:7c:2a:47:6a:8f:a2:7c:47:19:e2:
eb:ee:f5:cb:4f:00:c5:de:75:87:dc:a3:e8:5b:71:6d:73:c3:
22:39:c8:b2:a2:82:d2:a4:0d:81:be:50:cc:e0:fc:77:91:fa:
36:10:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:24 2026 by rpki-client