Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: WlBpQC4D24HA5tj7p+RT63L5z/tSFBghk4GYyt7PHmA=
Subject key identifier: 89:A9:23:E2:93:4F:1A:EF:1B:11:09:C1:E8:24:87:EF:12:6E:31:F6
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019D99CFF4A951951FA93F07F523D7ADD282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 11C2
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (hash: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw=)
2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: +TbErdPOKsnDWsL/U6uIO4s6Dadv6+c1H2b0gkyD9y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f4:a9:51:95:1f:a9:3f:07:f5:23:d7:ad:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=89a923e2934f1aef1b1109c1e82487ef126e31f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:e9:57:d2:79:f0:df:d8:30:b1:58:46:12:
ca:73:cd:51:d5:a8:26:cc:50:e3:05:d9:2f:64:8a:
c1:30:d6:65:b7:9b:fd:01:3f:37:a0:8b:58:59:f2:
a6:8f:17:63:c5:fe:57:39:ee:bd:4f:41:89:5b:f6:
88:df:ae:db:b5:9a:1c:7e:6f:33:7f:71:3c:3e:62:
0f:a3:19:56:7d:ac:7a:26:d8:d8:44:d3:fa:1d:1a:
55:a0:b9:c3:03:11:58:cd:7d:b4:51:b5:38:e7:dd:
54:e2:58:b8:79:34:0c:bd:6b:77:58:c2:6b:9b:bf:
ae:1c:5c:61:00:3d:8e:96:c8:6f:a0:19:0e:e5:46:
1f:a8:c4:22:97:60:bc:b6:58:1f:29:ec:b5:5b:fa:
ce:61:6f:dc:14:71:94:6d:09:b7:92:b4:32:64:22:
c6:27:27:1c:44:03:c1:27:87:05:7e:ba:86:96:d0:
00:5c:2f:25:07:80:88:83:66:f2:3b:c6:77:69:fe:
2c:c2:80:bd:ca:66:e7:2e:65:94:12:24:39:d6:4c:
b0:8d:0c:8e:41:e9:ab:f8:58:76:97:58:07:ef:be:
56:00:db:be:05:c2:13:a6:55:9d:8b:a1:19:ab:5c:
b7:c6:26:c0:21:8e:b3:2f:ce:00:13:ca:73:24:59:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:23:E2:93:4F:1A:EF:1B:11:09:C1:E8:24:87:EF:12:6E:31:F6
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:22:37:be:d1:ee:74:c8:37:62:1d:b0:2a:5d:0a:c2:61:e0:
a8:48:fb:54:84:63:3c:de:d2:5e:ec:f4:76:6f:c2:aa:ea:f9:
35:bb:45:10:b8:f8:cc:c2:d7:da:dc:c6:b8:24:bf:03:6c:17:
f7:57:99:bd:36:7f:c6:21:31:b7:8e:b1:d8:4f:0a:9b:4c:dd:
1b:22:68:5b:56:70:c6:22:5a:c2:14:9e:41:88:e6:a4:2f:8c:
bc:31:19:64:ac:a0:d8:49:d2:53:b9:89:7e:7e:9a:e9:09:30:
70:a4:8a:75:88:69:20:42:9b:cf:ff:8f:c2:6b:15:11:fd:5e:
c6:0b:5c:a7:e3:14:51:4d:fd:79:4e:62:48:ca:e6:c6:14:cf:
ee:6e:88:a6:61:e2:be:71:46:f8:2d:87:4a:d4:9f:07:f8:0d:
d5:45:c5:df:55:b5:06:91:a9:12:70:b8:6a:24:40:c0:95:74:
bf:af:87:48:8a:43:af:ef:1f:c3:34:07:67:61:3f:09:b2:e0:
c4:ed:50:ac:8a:78:9b:63:22:7d:50:b4:76:82:be:27:65:b5:
46:a0:04:22:33:51:8d:56:29:69:d7:b4:2f:81:a0:3f:0c:1d:
01:f7:4b:da:cc:a6:86:2b:b8:3c:e1:11:32:ea:71:40:df:22:
56:0c:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:59 2026 by rpki-client