Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: 0x+Z+OCXaJK2b5nIXNPVw3AepycUOx2Y27ziw62WNWM=
Subject key identifier: 4A:9D:1B:5B:9D:EE:92:53:32:1B:12:F2:2E:DD:2C:10:D5:8B:2F:64
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019D992B330AF4FEB6C7BC7AB27753F78F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 02:00:38 +0000
Manifest this update: Fri 17 Apr 2026 02:00:38 +0000
Manifest next update: Sat 18 Apr 2026 02:00:38 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: dTfuUn4r09IR/B4t9MfgaPEItrFh1QEMHtqplTPlJH4=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:33:0a:f4:fe:b6:c7:bc:7a:b2:77:53:f7:8f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Apr 17 02:00:38 2026 GMT
Not After : Apr 18 02:00:38 2026 GMT
Subject: CN=4a9d1b5b9dee9253321b12f22edd2c10d58b2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:50:93:21:d1:d9:18:cf:e4:f6:71:52:3f:
a2:98:64:23:bd:fc:73:fc:46:20:f4:4d:b5:b1:8c:
ef:7b:79:02:f9:a3:f9:50:b8:b2:8e:4d:f7:6f:d9:
87:ed:eb:8e:ed:54:ef:8a:c1:68:3d:0e:18:e7:b2:
8e:7d:af:5e:22:18:d2:12:83:54:23:78:14:85:a8:
63:d8:49:14:1a:49:16:34:8d:e3:89:33:4e:aa:46:
c1:b0:be:8e:c1:25:20:90:2c:52:8c:88:93:e1:f8:
21:ff:ac:34:c7:13:b5:26:a5:df:58:85:0f:c9:2d:
98:e5:1f:24:7f:1f:b1:53:c5:85:31:04:79:c1:fe:
73:ae:96:8b:86:ca:39:08:17:18:21:64:46:19:6c:
a3:b6:7f:15:d8:7d:76:07:1e:88:bf:2d:02:52:39:
cf:58:5c:2f:11:6b:cc:25:b2:f6:bf:cb:0d:0d:6c:
38:7f:0d:7f:9a:dd:d4:ec:e3:2a:d4:3a:da:34:7d:
67:c7:15:0e:25:8f:a4:59:d7:63:ee:2b:a5:6c:70:
96:e7:4d:15:e4:d6:8e:99:db:2b:de:c0:35:7c:b1:
77:d0:87:db:bd:15:2c:6f:b3:4f:d5:52:2c:8b:b0:
24:e8:b6:a3:3a:8c:1c:01:15:52:04:e9:64:36:cb:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:1B:5B:9D:EE:92:53:32:1B:12:F2:2E:DD:2C:10:D5:8B:2F:64
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:dc:74:1d:92:4d:38:b7:12:ab:41:44:21:3b:1c:43:29:
68:a8:0a:c9:6b:70:e3:89:9f:aa:d6:1b:fb:2b:ef:c9:9f:72:
3a:24:82:69:2e:2b:56:5e:c0:a1:d1:ea:8f:ff:60:5e:3b:cf:
a9:88:7c:b3:9a:d0:ac:b3:45:ea:93:4f:35:d6:e7:55:07:d7:
c8:ae:fa:44:d4:55:8b:d2:5e:51:5c:58:f5:01:b6:2b:55:d3:
09:d1:6a:38:34:40:9a:b4:92:e9:64:ec:df:d6:ae:43:5a:c8:
f8:64:dc:ad:e8:0b:53:c0:67:21:cb:9c:46:84:9c:13:b0:94:
18:15:cc:3b:2e:ae:05:0e:f7:fe:40:dd:f4:81:bd:1c:0f:b0:
64:65:ed:70:eb:b6:a6:4d:ba:6f:4a:21:da:d5:63:ab:ed:d3:
a3:2e:77:70:d0:26:c5:02:02:a9:84:7b:d6:fd:85:c5:38:b8:
1f:78:cc:5d:12:5f:70:ff:0a:1c:52:11:3c:6d:e1:09:52:f5:
18:10:b7:56:0c:56:52:c8:fb:4d:eb:0d:ca:c3:15:2b:28:e7:
45:65:31:3f:64:6d:8d:5b:fd:59:20:8c:fe:d2:9b:aa:bd:e9:
10:d6:f0:88:d5:0a:b5:61:bd:2a:04:d7:db:27:a1:70:a0:11:
2c:d0:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:08 2026 by rpki-client