Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: m6+QkHH82tHXi4JQp3drX8Q88MC80Pb2wcgc3hW8bBA=
Subject key identifier: 41:EC:8D:6D:AE:B0:17:24:92:E6:B3:2A:C4:C3:42:A6:1F:2A:9E:EA
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019D98505E53F225188ABA7A5580C53D8A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0FD5
Signing time: Thu 16 Apr 2026 22:01:36 +0000
Manifest this update: Thu 16 Apr 2026 22:01:36 +0000
Manifest next update: Fri 17 Apr 2026 22:01:36 +0000
Files and hashes: 1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: XvJqT+eu6zVu15t00eMEwlN6kCEQFfYfX8crJO0dv+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:5e:53:f2:25:18:8a:ba:7a:55:80:c5:3d:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Apr 16 22:01:36 2026 GMT
Not After : Apr 17 22:01:36 2026 GMT
Subject: CN=41ec8d6daeb0172492e6b32ac4c342a61f2a9eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:e1:1a:cd:01:f8:b0:e0:96:08:d7:cf:f2:
6b:bd:4c:7e:e6:07:4d:72:22:74:70:18:20:f0:11:
df:60:c2:7a:45:ea:b0:72:13:65:50:14:5a:ed:42:
e7:5e:6e:df:a5:33:87:8a:c9:49:4c:29:4c:6b:dd:
8f:1b:e9:f5:b5:30:13:41:b7:76:90:f3:f5:1a:f7:
26:91:be:d9:68:20:38:3f:ba:8e:cb:0b:38:43:3d:
55:83:d8:2f:8d:bc:b8:79:c8:7f:22:ad:6f:2c:86:
7e:b9:fe:33:90:d1:78:e1:75:99:9b:5d:c4:b6:e5:
b3:26:52:27:e5:80:c9:89:3a:e5:a2:94:5b:38:c3:
96:55:18:2b:29:f1:bd:0c:e7:79:26:68:c4:73:b7:
4a:e4:41:be:b2:7a:f9:25:ad:53:8f:08:b3:d0:ad:
ed:15:b5:8b:e9:75:6d:eb:d9:b8:5b:16:73:22:f0:
a0:a7:80:fb:fb:2f:f7:10:fd:eb:d0:da:71:a2:b0:
2e:c1:5e:6c:ee:ae:4c:d3:be:f1:63:e2:f7:5f:be:
fc:32:d6:09:a7:d4:80:32:c1:7e:ba:ef:5c:56:7e:
e7:cf:32:2a:95:4a:5f:14:22:1e:87:dc:79:db:bd:
b9:0a:4e:7a:81:74:a4:80:42:9d:8f:60:c0:68:df:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:8D:6D:AE:B0:17:24:92:E6:B3:2A:C4:C3:42:A6:1F:2A:9E:EA
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:ca:87:1c:0a:a6:7c:3f:ab:46:92:9c:ab:8a:79:b2:f3:
f6:ec:3e:09:8f:d9:7c:38:12:01:79:d1:6d:83:18:11:09:d8:
72:65:55:75:cc:4e:80:15:a6:44:b3:eb:bb:12:c8:b5:90:bf:
de:db:43:1f:63:0d:f7:40:a9:cc:59:08:18:b0:4b:b6:cc:a7:
66:71:d9:bb:3c:96:0a:11:13:97:16:17:e3:16:5f:3e:0b:42:
3d:72:ef:c5:d2:da:a1:4a:5c:a8:6f:22:ab:e6:9d:c7:a4:d6:
a2:4c:64:39:17:fe:a8:df:19:e6:11:f0:35:f8:3d:64:c4:b3:
05:b0:de:36:cd:69:04:77:dd:ff:66:89:3d:99:bf:f4:ea:67:
62:fb:30:61:63:40:e5:49:08:eb:06:64:60:91:a8:20:0d:9e:
52:11:ff:1e:cf:91:f9:f1:51:49:b5:8f:8f:85:9b:dd:a6:b3:
58:63:50:64:86:4d:ae:f3:44:fe:61:57:8f:35:9a:02:df:48:
00:51:67:ec:88:46:9a:76:11:a7:f0:ca:fe:6e:c1:b9:fc:e5:
f7:48:04:94:8e:d7:a3:f3:ac:29:4f:12:3e:20:cf:00:4f:be:
74:e8:e8:9f:14:86:97:2a:c9:49:00:b1:7d:4a:d0:6c:d3:65:
e0:67:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:17 2026 by rpki-client