Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: jSjoHHfw8WYVxx0+Gr8x0hHT/rqTY8yHsOexc3rrwck=
Subject key identifier: 91:8B:B5:26:50:8D:DA:E5:68:9C:35:4D:86:CF:67:35:9D:CA:D5:6D
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019D9850913AE1E3D27F0A33D3BFE41774BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1616
Signing time: Thu 16 Apr 2026 22:01:49 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Fri 17 Apr 2026 22:01:49 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: WLcDyxJrrkS0Y6DLcjgigVt4dh0PSffYF2Abgv81DhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:91:3a:e1:e3:d2:7f:0a:33:d3:bf:e4:17:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 17 22:01:49 2026 GMT
Subject: CN=918bb526508ddae5689c354d86cf67359dcad56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:96:6b:89:13:c8:1f:40:10:9b:8e:3b:ad:
39:66:e8:30:96:50:1c:a2:03:9b:45:09:34:40:66:
30:db:04:c6:1d:fd:ef:ca:58:b9:ef:8c:f4:3d:15:
ab:a5:1c:dc:29:6e:cb:ed:3f:67:93:78:e2:3c:dd:
61:83:9b:ac:7c:b7:6c:f1:e3:b5:e0:c3:b0:dc:c4:
88:dc:d9:44:94:59:7a:42:c5:9a:44:b3:ce:1e:c1:
23:2c:7e:83:f7:81:85:b1:2d:44:50:a6:bb:01:09:
ec:f2:27:63:44:41:80:b5:ff:f9:36:49:1c:1b:d0:
be:e0:f3:6f:62:42:fb:ef:cd:e3:8a:5d:2b:4d:14:
97:68:2c:ab:43:67:34:8e:63:d6:ad:cb:fa:a0:94:
1a:fd:d8:8f:e9:b2:a9:5c:77:aa:52:9b:8c:ab:bc:
df:aa:82:50:14:ee:71:8c:bf:af:71:81:7c:3b:30:
30:20:ef:a7:08:0f:ab:7a:1f:73:bd:c7:9f:e5:a0:
8e:0f:47:07:7e:00:96:4e:d6:2e:71:42:31:92:c5:
e8:a3:16:e8:d6:4e:a9:0e:8c:aa:24:38:39:1c:96:
5d:d1:73:91:c1:b7:e5:a4:3f:58:e4:a4:9d:c1:ed:
4a:ab:fd:60:8d:13:e8:83:26:5f:a8:6d:20:e1:2d:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:B5:26:50:8D:DA:E5:68:9C:35:4D:86:CF:67:35:9D:CA:D5:6D
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:9d:fa:d8:8e:6c:e3:16:8f:3e:23:a4:b9:9f:80:ce:63:
3e:05:55:af:c5:99:39:65:81:68:94:00:fb:3e:46:c9:17:7f:
08:f2:e5:0a:af:c3:64:69:17:0f:62:4a:03:6c:00:a2:48:05:
c3:91:f0:8d:fa:85:61:66:00:74:1a:35:dc:15:b5:aa:52:9a:
88:74:08:fb:df:e4:6a:2c:e9:ba:32:ab:9a:9a:e4:3d:f6:da:
3d:17:31:93:92:0f:7a:ff:c1:f9:1d:54:10:5d:40:eb:e8:4b:
4a:be:69:2f:4d:7e:da:ad:75:4e:27:21:22:f4:de:80:1f:d3:
2f:dd:92:b0:ad:e1:57:8b:22:e3:48:2e:fe:fe:31:8f:95:18:
81:8e:5b:b0:09:48:e2:78:93:e1:4c:4f:d4:3c:bb:29:fa:7d:
7e:ee:cd:77:a3:b6:5e:c5:0d:d0:ec:32:37:a2:88:1c:79:2e:
86:4f:ba:7b:54:3c:33:d6:84:b4:2d:18:6c:53:6f:3f:b9:7b:
b7:51:7e:f9:d4:1c:4a:2f:ec:5f:18:2f:32:08:69:43:5d:df:
9b:a7:0a:a2:c3:a9:cb:ca:ba:5f:5f:e8:14:09:e3:64:a1:86:
3c:5b:9f:50:95:ea:48:dd:be:33:0c:08:dc:0c:e9:72:67:49:
cb:14:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:55 2026 by rpki-client