Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: I0txHNbIFqbjVunY1hhoVwNZAd9XqBtWWUrSZ1e5nTU=
Subject key identifier: 98:4C:8B:CA:E5:AF:23:A7:1D:9F:88:C4:BD:61:02:D0:8D:B9:55:43
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019D98F52403BD401B48695C5566DEE922EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: HYJ9iQwz2DMBpxTT71dJrOld/Oo3TqIyZQlNzbLtmwY=)
2: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (hash: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:24:03:bd:40:1b:48:69:5c:55:66:de:e9:22:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=984c8bcae5af23a71d9f88c4bd6102d08db95543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:fd:8c:7e:a0:3d:3b:73:60:b5:21:1c:8d:
c3:2f:cb:48:17:23:bb:a3:67:01:7a:62:34:f0:b4:
ff:28:aa:2c:d1:16:c5:d2:21:b2:2c:43:4a:5b:ba:
19:60:ae:00:6e:47:b4:da:d6:83:ed:28:65:45:b5:
7b:fe:97:c7:fb:3f:b7:a0:73:82:88:55:9c:ff:f4:
87:0a:32:33:8f:59:68:c6:48:f8:21:8b:16:00:0c:
9b:82:9c:ce:6a:d2:d4:30:34:c2:c7:8b:e8:bd:0f:
00:77:14:11:56:9c:da:5c:54:6d:d0:c7:fb:cb:6b:
90:10:6a:ba:10:16:9f:34:7b:b7:f8:5f:b1:df:b4:
37:92:8b:b1:8d:47:44:6e:84:16:c2:c8:94:58:19:
a1:d3:00:05:e8:da:3b:5d:65:51:4e:7b:44:1f:7a:
02:e5:6e:34:ad:d8:ed:ee:59:d2:ae:4d:cf:b9:e8:
6d:10:c7:3a:3b:1c:6d:b2:f6:ac:14:3c:24:0f:5c:
9a:0b:1a:da:1d:83:b2:25:a4:44:2c:01:7e:3c:18:
80:58:a8:cb:ba:b4:e7:32:ab:b8:5a:1e:6d:16:4e:
63:75:7a:5d:2c:b7:03:b1:fd:05:4e:cc:52:d8:1b:
88:b8:1a:49:a7:7f:c5:09:a3:66:63:59:ed:6b:f4:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:8B:CA:E5:AF:23:A7:1D:9F:88:C4:BD:61:02:D0:8D:B9:55:43
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:34:2d:61:1e:8c:97:6b:a2:c6:0f:37:4c:eb:2a:94:fa:77:
70:ec:2a:30:a6:e5:9b:38:42:84:8c:e5:73:1c:e8:c1:74:10:
4e:56:5c:7b:23:09:6d:83:25:aa:f4:37:b7:25:cb:6c:09:32:
98:6c:ad:81:f1:e5:c9:21:84:bb:81:b5:6c:f5:68:2e:fa:7d:
bd:8f:d6:64:81:ee:eb:da:cb:45:e2:58:db:a6:1b:4e:22:cc:
4d:63:1a:92:06:bd:5a:b3:b9:1a:0f:4b:c8:29:fe:92:00:58:
df:2b:24:21:15:dc:fe:f8:fd:72:0a:14:db:61:a8:f5:a0:a1:
b2:3a:e6:bb:ba:72:56:78:ab:13:1f:42:9c:50:4a:a8:1b:bc:
6c:e7:4e:eb:cb:e2:5e:4a:d6:59:20:ee:2c:d5:6c:dd:15:a6:
db:d1:ab:28:1c:7f:c6:ca:be:60:ae:a5:49:e6:cb:75:0f:1a:
87:ef:7d:c4:85:27:fb:30:a6:fa:6d:84:8c:d7:4d:b9:6a:17:
1e:e9:4b:7b:85:3a:8b:a5:f3:33:e3:cf:40:00:13:a7:4d:57:
91:90:6c:88:4e:3d:a8:cb:86:1d:96:63:23:5f:cc:e4:13:25:
7d:f7:5e:7e:a2:76:aa:dc:dc:9e:b5:12:53:87:a6:9d:0a:cc:
d3:f8:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:18 2026 by rpki-client