Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: CMQ+MfRAg3U8i3ubxt8ua94PtVXi28cJS1TsyJfIhcM=
Subject key identifier: 1E:3A:ED:20:F7:AD:D0:6F:5E:78:4D:46:14:8C:6A:A4:70:F0:53:F6
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019DA30A91E012FD95C6D38F11D3167F67CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 12EE
Signing time: Sun 19 Apr 2026 00:01:12 +0000
Manifest this update: Sun 19 Apr 2026 00:01:12 +0000
Manifest next update: Mon 20 Apr 2026 00:01:12 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: Y8Y0/jhQRm7D4zizFBCa8jFhCAO7xqbPboOC7PpecOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:91:e0:12:fd:95:c6:d3:8f:11:d3:16:7f:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Apr 19 00:01:12 2026 GMT
Not After : Apr 20 00:01:12 2026 GMT
Subject: CN=1e3aed20f7add06f5e784d46148c6aa470f053f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:17:7f:1d:bb:ec:9e:e9:a2:1b:3f:4a:8d:
98:2f:6b:98:db:ea:47:10:1e:04:58:e9:fa:a8:3a:
9a:3e:80:d5:3b:99:be:19:c2:80:a5:5e:91:f9:85:
0c:f4:dd:b7:02:97:1c:72:f5:43:5c:c5:e7:a0:b7:
84:59:1a:ee:f6:e2:34:64:1b:7a:95:f0:cc:b1:f0:
fd:07:c5:aa:8c:ef:1f:d9:d8:fb:26:be:81:2b:c4:
f9:14:55:6a:76:42:85:a6:3e:0e:e9:91:09:0c:1f:
37:6d:09:78:a1:bd:a9:72:9d:e1:fd:33:50:5a:87:
17:aa:47:95:21:1f:34:21:f8:3b:49:8c:aa:a4:a1:
28:e4:7d:07:80:51:65:02:83:00:65:72:67:ba:40:
c5:6a:4f:c3:09:f7:da:70:76:96:63:8c:00:8d:40:
b3:5d:28:cf:f7:e6:74:d8:21:b2:8f:02:38:85:f1:
da:de:6a:1d:f3:5a:9c:98:86:fc:a1:6c:d8:34:39:
7c:b5:03:e8:7e:04:ec:70:6a:ac:f1:cf:f7:f1:15:
46:1c:f5:90:2b:d2:51:46:1c:8a:77:82:40:80:ed:
06:0b:fb:c7:9b:ba:c0:e5:4a:8e:d7:3e:91:92:18:
a3:5f:5d:74:75:29:55:16:11:ac:50:ea:24:18:1a:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:ED:20:F7:AD:D0:6F:5E:78:4D:46:14:8C:6A:A4:70:F0:53:F6
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:89:86:06:79:b0:8c:d7:fa:8f:94:cf:77:fb:dd:9b:5b:
c7:01:41:ad:e1:30:33:58:8b:85:69:3c:3d:26:42:b6:5f:c7:
da:4c:99:1f:d6:7f:32:92:70:24:43:c5:af:02:14:c3:9d:57:
47:bb:0f:26:79:84:ea:b0:10:5a:c9:59:23:4a:b8:bf:72:c5:
31:ed:89:50:e5:bf:1f:c5:d3:1f:3d:1e:0c:a1:96:c2:30:c8:
df:b1:ee:4e:f5:ba:dd:10:98:6b:bb:0c:57:e8:a3:1e:50:c1:
ce:ba:24:3f:d6:05:83:95:dc:bd:b0:d5:52:94:89:a4:73:35:
43:b3:c1:1c:1a:19:a8:f9:ed:17:1b:3c:ea:0a:a2:a0:1e:0d:
49:97:65:6f:30:8c:78:1b:a6:f0:39:34:83:21:8c:96:36:7a:
ce:a2:73:5e:ad:b2:ee:82:48:1c:f0:b9:fb:4c:43:ff:48:ac:
0f:c7:ec:7d:b3:e6:77:79:8d:4d:bd:26:bc:f5:41:e3:36:26:
a2:72:7e:d8:0d:8d:e7:2a:96:e5:f1:2b:b4:98:fb:6f:70:28:
b9:cd:9e:56:cc:a8:e3:89:13:fd:16:a1:8c:06:db:65:a1:59:
42:b3:d1:39:ed:ea:b3:94:aa:f9:f3:4a:04:cd:38:24:66:8d:
cb:5d:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:17 2026 by rpki-client