Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: E9+J+k/gtqVq5s+kvSu5LPAPul6qy3M//59NToJx0xg=
Subject key identifier: 2B:EB:DA:1C:B5:C4:2E:96:49:DB:E4:4A:18:0F:B1:30:6E:3B:62:D3
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019D9C633F32E36000BDA21CC049FC0443BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 1296
Signing time: Fri 17 Apr 2026 17:00:43 +0000
Manifest this update: Fri 17 Apr 2026 17:00:43 +0000
Manifest next update: Sat 18 Apr 2026 17:00:43 +0000
Files and hashes: 1: 4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa (hash: QjIp1iiXD6vyZ0MdKvtInyszrVm18OrO8O3KBCQDfSQ=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: 6k9g2KopZ7QzvCeN3Tr/vVa4xvGcCmycfl8NbhAP9tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:3f:32:e3:60:00:bd:a2:1c:c0:49:fc:04:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Apr 17 17:00:43 2026 GMT
Not After : Apr 18 17:00:43 2026 GMT
Subject: CN=2bebda1cb5c42e9649dbe44a180fb1306e3b62d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:97:1a:dc:7f:1c:47:3f:99:31:8d:f0:ec:
33:40:38:77:18:3f:93:16:5d:dc:9d:1c:da:d6:85:
f7:66:12:cf:a6:f8:cc:a3:1a:e9:42:7a:ce:a3:47:
4c:86:05:21:b6:3f:95:39:cd:ba:27:62:be:a2:00:
be:fd:ef:af:ce:6f:f0:83:7f:aa:f0:62:88:53:9f:
31:31:15:13:3a:42:f4:36:84:f6:d0:74:a0:63:5a:
7f:13:d4:70:50:31:d7:94:72:08:67:4a:40:4b:87:
a8:81:a5:08:18:ff:f8:b3:83:f9:15:01:d7:f2:d6:
55:4e:80:ae:e6:11:d7:6d:22:da:0d:de:4a:ad:03:
05:6f:5c:77:04:5d:80:b2:93:6d:3a:e3:15:23:5b:
37:9f:fe:bc:96:3c:51:2e:61:f1:a9:df:0d:25:39:
d9:2c:9d:95:3b:e4:7c:7e:cb:77:2f:94:0b:c9:9d:
5c:7d:48:ca:04:b7:7f:bb:39:90:56:88:40:c9:a7:
2b:dc:b2:3f:e3:c3:3e:5a:ad:ca:02:68:0a:53:91:
96:bb:82:04:d1:a4:a0:ac:e1:ca:5b:42:fe:d9:fe:
97:b5:c6:58:c4:47:ad:3d:b0:6b:69:48:3a:4d:0b:
64:4f:2e:4c:3d:52:a9:b2:28:c2:bd:f5:64:79:26:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EB:DA:1C:B5:C4:2E:96:49:DB:E4:4A:18:0F:B1:30:6E:3B:62:D3
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:6d:24:ef:33:bb:bb:62:7a:eb:84:a4:48:10:68:f6:9e:
16:d1:42:f5:83:2e:58:d7:dc:a2:68:42:44:43:0a:d7:20:3d:
a1:21:45:5c:af:ba:ee:d0:1e:c2:73:b8:b9:0e:dd:e6:e9:4e:
44:07:e1:93:12:a1:99:67:4a:5b:68:46:ee:5a:e0:fc:7a:cf:
18:22:51:76:6d:e1:da:f9:d7:d7:0a:80:aa:db:08:8f:8d:89:
b7:a1:79:7d:c1:ac:01:66:3f:ce:72:91:82:4d:ae:e8:a6:cd:
55:79:b6:84:44:f3:84:74:56:ca:36:d8:f8:06:3f:16:4c:99:
0d:65:b9:aa:27:6c:c3:75:93:c8:1c:53:7a:d7:7f:27:68:83:
22:6a:3d:72:11:8d:e7:70:81:b6:f1:02:ef:28:4c:f8:34:43:
a6:57:5f:ea:5c:d5:e0:d2:59:50:79:dd:b6:12:0c:25:db:a0:
04:22:0c:e6:19:73:cd:59:17:66:11:58:73:67:b5:bb:94:24:
7f:d6:78:e0:0e:36:ea:5a:d2:85:f2:2a:9b:e8:98:60:6d:02:
5b:4d:7b:eb:0a:54:1c:4a:79:db:06:15:0e:e2:91:34:67:7f:
dd:2c:dc:23:7e:af:aa:f4:00:4c:02:f4:dd:90:01:e1:9b:bd:
c5:ab:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:58 2026 by rpki-client