Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: bWJr7/8pZKKoy0fQ0t2Qb2s4DpEo3x1p/ugZuuYTnNA=
Subject key identifier: F1:FA:47:EB:89:28:23:6A:88:19:93:6D:A0:FA:36:6C:83:21:EF:62
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019D97AA8152A0D02BBF18FCA2963D5ADAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 18BC
Signing time: Thu 16 Apr 2026 19:00:26 +0000
Manifest this update: Thu 16 Apr 2026 19:00:26 +0000
Manifest next update: Fri 17 Apr 2026 19:00:26 +0000
Files and hashes: 1: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
2: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: J7stkCObQ21d/1O5Dq4n6l7urOjv2ew0EbjWL8m/GAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:81:52:a0:d0:2b:bf:18:fc:a2:96:3d:5a:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Apr 16 19:00:26 2026 GMT
Not After : Apr 17 19:00:26 2026 GMT
Subject: CN=f1fa47eb8928236a8819936da0fa366c8321ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:c8:b3:95:59:9d:20:56:23:dc:cd:9e:72:
65:b8:6e:ea:b3:4d:de:b7:1f:88:2e:91:66:2f:94:
0f:db:b0:45:f9:50:9c:90:36:50:18:e9:e8:30:86:
e0:85:11:cc:76:ff:dc:8e:07:4f:fa:b8:6a:60:64:
41:df:7c:7c:b9:81:d5:2d:16:c5:3a:a2:80:2f:d1:
9b:fd:13:6d:f4:20:49:48:e3:4d:7a:fe:da:70:02:
1c:5f:28:69:2c:34:66:05:97:b2:dd:68:a9:81:68:
0f:32:7b:bd:e6:26:b9:83:af:1f:ac:7f:bd:88:f5:
89:54:65:79:43:e9:85:92:d5:76:bd:9b:6e:58:c6:
f7:03:1b:56:c4:4d:ae:11:48:53:06:eb:38:20:d7:
b8:72:e4:a8:33:b3:ce:e5:44:fc:8a:24:52:7f:fc:
7c:0a:73:ab:46:aa:2d:cd:1b:13:73:e1:b0:08:dc:
15:9b:32:9e:36:a2:7b:f7:92:3c:02:b2:58:3a:55:
cf:56:d9:a8:5d:95:8d:25:f0:d1:44:e7:83:ef:2d:
84:12:b3:62:fa:d8:17:04:a0:ab:dd:58:1b:ad:9d:
03:ab:b0:93:5a:c8:02:4d:c3:fc:3e:48:c0:63:dc:
40:fd:22:07:d3:05:81:8e:fb:e4:7e:14:01:05:67:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:47:EB:89:28:23:6A:88:19:93:6D:A0:FA:36:6C:83:21:EF:62
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:9a:6b:46:5f:3b:2a:6b:c5:c9:fa:89:6c:3f:6a:13:d3:
ec:14:c9:a9:ca:d2:c3:38:5f:0c:73:78:7f:b3:b3:d9:6c:d2:
b7:23:b0:4d:3e:ea:76:67:97:46:cc:8e:d3:5c:a9:9c:d5:37:
b7:0c:22:4d:21:27:fc:a8:a8:db:04:ef:b4:44:6e:4b:d5:b3:
93:ca:09:ce:3e:aa:8e:fb:fb:1d:a9:b0:c2:4d:fe:3d:88:36:
3b:b4:49:e8:be:59:a3:2e:92:c3:fd:3f:8e:38:f3:18:15:7c:
74:48:c7:41:95:bb:99:3d:e9:02:7a:b7:4b:7b:b3:6b:51:9c:
d1:19:d7:2a:8c:a6:ad:75:8e:d7:2f:e5:83:16:fe:87:f1:e9:
20:cd:43:ae:14:6b:2c:fa:ba:3d:79:2a:46:c0:4e:9a:db:7a:
85:a2:07:9a:f3:32:66:d8:8d:af:d0:3f:8a:d6:4d:0b:aa:2d:
e7:a8:af:a9:03:57:75:d0:18:2b:90:c8:8d:08:29:f7:50:61:
79:2c:12:f5:a1:5d:58:ed:73:9b:12:d6:56:8c:37:c3:e5:4d:
e3:37:b1:ee:a8:bc:42:85:fe:42:d2:91:47:59:f3:e0:49:b0:
36:b6:07:d6:23:87:a1:0e:3e:71:13:24:cf:ba:1e:88:6a:d3:
31:77:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:51 2026 by rpki-client