Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: /1qNWEIB75/QEcWvv0LdfDW7BHVy6ohZU63N/f5YEmg=
Subject key identifier: F4:F1:D0:CF:7A:C9:7C:40:17:B8:6A:B0:3A:1E:17:B0:3E:27:2D:4F
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 019D98F46B38D67F78AC674EBDC06217694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 123F
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: 6S5EnsEzpB77hLh2Ec27pq5AAmxRFcppV4beggL65H8=)
2: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (hash: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6b:38:d6:7f:78:ac:67:4e:bd:c0:62:17:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=f4f1d0cf7ac97c4017b86ab03a1e17b03e272d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:a9:0d:fb:65:ac:9c:9e:09:a8:ba:e9:b2:
54:cf:bb:b5:12:78:55:b4:e2:86:55:11:f2:eb:f6:
ed:3a:cb:07:69:0a:5e:5f:bd:ae:9a:40:bf:46:b5:
ef:ab:8e:70:5c:60:82:d6:04:2b:f4:f1:79:73:0d:
6b:78:d2:92:7a:a8:a1:e7:d2:0d:1e:d7:11:a2:01:
9b:86:90:13:75:75:ac:78:c0:1d:c6:4a:08:2e:8c:
c5:a3:05:6b:59:a0:6b:d1:13:26:67:e0:2c:96:b1:
4a:c1:6a:21:78:c6:21:d2:c9:d9:20:2b:3b:6a:5d:
c5:af:8e:75:d5:29:45:a5:24:2f:39:f4:a1:8a:67:
37:0b:11:48:7b:96:52:6a:b1:d9:79:da:7c:08:7c:
f1:02:1b:9a:22:57:3e:63:28:4c:89:3a:7c:cd:c9:
31:de:63:22:01:02:57:8f:c0:a5:67:49:57:fd:bc:
42:4d:a9:7c:bc:88:b9:75:66:99:97:36:41:88:ee:
36:f2:b8:98:e7:c7:4a:d3:b4:11:f1:b8:49:ce:41:
7d:76:2a:d2:7f:51:21:5c:1b:3e:77:df:7f:4f:48:
a4:99:48:41:99:c7:55:ae:cd:12:5b:3c:05:ad:3a:
65:1e:27:39:7e:c3:51:6b:db:91:8b:fa:17:52:0d:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:D0:CF:7A:C9:7C:40:17:B8:6A:B0:3A:1E:17:B0:3E:27:2D:4F
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f7:42:e8:ee:5d:c2:56:46:29:4d:a1:01:2f:5b:85:ce:b6:
c0:a3:60:e7:98:5c:da:f8:f3:8a:f6:cd:df:50:4c:cd:ac:c6:
18:34:60:86:dc:3f:dc:07:b4:e0:1e:0c:db:1d:b3:78:35:0a:
cc:60:7f:49:c0:ad:ed:7d:f4:7f:69:83:e3:30:26:18:0e:4b:
3f:90:b4:a0:74:52:24:63:9b:9c:bf:4a:20:39:cd:71:55:d9:
76:e3:87:c9:8f:28:70:cc:98:10:52:8f:3e:01:eb:09:ab:e1:
dd:e6:10:47:e1:fb:fa:2f:f1:e0:b5:22:d4:0d:44:d7:41:3c:
30:ed:f9:0d:1b:fd:45:92:6d:c8:76:fd:4d:bf:22:53:c1:51:
25:66:2d:2f:dd:91:b8:26:ce:5d:5a:01:d4:ed:ea:ea:0d:c2:
ba:72:f8:fc:3f:fe:9d:4b:41:be:bd:b3:3f:24:82:78:c3:85:
cb:84:62:a8:01:45:e4:72:3f:f2:4b:70:b2:88:87:b4:13:6f:
ea:8e:ae:82:a2:3d:d2:46:d5:3e:71:8d:4c:ce:d0:fc:27:d5:
51:ce:8d:f4:95:a4:e4:69:02:c9:ca:6f:58:f5:cd:2b:eb:c6:
0b:46:0d:4f:97:23:5e:3d:11:4d:78:5d:26:79:ec:58:c4:a9:
36:99:f0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Gs41n94rGdOvcBiF2lMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NzBlMWJjNTg2OWM2MDJiNjQyNDQ5MDMxZDRiNzExNmM5
ZGZhMjYwHhcNMjYwNDE3MDEwMDQ4WhcNMjYwNDE4MDEwMDQ4WjAzMTEwLwYDVQQD
EyhmNGYxZDBjZjdhYzk3YzQwMTdiODZhYjAzYTFlMTdiMDNlMjcyZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruypDftlrJyeCai66bJUz7u1EnhV
tOKGVRHy6/btOssHaQpeX72umkC/RrXvq45wXGCC1gQr9PF5cw1reNKSeqih59IN
HtcRogGbhpATdXWseMAdxkoILozFowVrWaBr0RMmZ+AslrFKwWoheMYh0snZICs7
al3Fr4511SlFpSQvOfShimc3CxFIe5ZSarHZedp8CHzxAhuaIlc+YyhMiTp8zckx
3mMiAQJXj8ClZ0lX/bxCTal8vIi5dWaZlzZBiO428riY58dK07QR8bhJzkF9dirS
f1EhXBs+d99/T0ikmUhBmcdVrs0SWzwFrTplHic5fsNRa9uRi/oXUg2dqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTx0M96yXxAF7hqsDoeF7A+Jy1PMB8GA1UdIwQY
MBaAFBZw4bxYacYCtkJEkDHUtxFsnfomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQt
YzBlYTI4YWMzNjdhLzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQtYzBlYTI4YWMzNjdh
LzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/dC6O5d
wlZGKU2hAS9bhc62wKNg55hc2vjzivbN31BMzazGGDRghtw/3Ae04B4M2x2zeDUK
zGB/ScCt7X30f2mD4zAmGA5LP5C0oHRSJGObnL9KIDnNcVXZduOHyY8ocMyYEFKP
PgHrCavh3eYQR+H7+i/x4LUi1A1E10E8MO35DRv9RZJtyHb9Tb8iU8FRJWYtL92R
uCbOXVoB1O3q6g3CunL4/D/+nUtBvr2zPySCeMOFy4RiqAFF5HI/8ktwsoiHtBNv
6o6ugqI90kbVPnGNTM7Q/CfVUc6N9JWk5GkCycpvWPXNK+vGC0YNT5cjXj0RTXhd
JnnsWMSpNpnw3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:20:25 2026 by rpki-client