Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: IQBAb4Nhq5Tbuvp5SvQa1Q/CYmz9Yvg/4E33Zkmu1l8=
Subject key identifier: D7:BB:5F:A8:3B:F8:48:2B:83:33:3B:A9:36:79:91:43:65:24:A4:D5
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019D9A3E0B2227742A828A48A2EDA91FECAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 1042
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: WncqTGcMrx8Yba1TTzlDMN0vUQKEqe+UCw4k9Nezw1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0b:22:27:74:2a:82:8a:48:a2:ed:a9:1f:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=d7bb5fa83bf8482b83333ba9367991436524a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:fb:f5:1b:08:ba:dd:fa:bf:58:70:7a:77:
04:fe:0d:37:06:a9:1f:06:27:c3:61:16:88:29:b5:
e8:e9:77:05:3d:36:ec:44:d2:38:0a:c9:b6:37:65:
d8:5b:3f:fd:fd:bc:3c:e3:8b:65:3c:d5:e3:b9:06:
ce:63:c6:2e:0b:aa:bb:92:09:3c:67:7a:62:57:06:
0c:2d:7f:fa:cb:9f:ac:c8:d8:15:f5:66:42:cf:d3:
0c:61:07:43:b4:ca:45:da:9f:67:57:7a:17:7a:07:
0f:0e:93:77:bd:c7:78:45:72:a7:28:76:c7:46:9e:
4a:f4:10:60:bf:85:dd:b4:4e:6a:87:02:49:b9:9e:
90:7f:e5:23:96:32:22:f2:f9:f3:99:1d:45:a6:b8:
12:ae:de:20:d0:99:9d:47:b8:13:d8:db:64:53:29:
6b:ec:75:ac:bd:41:24:22:50:c7:d7:21:72:eb:e5:
26:6b:76:8d:9b:15:2b:a2:7c:ad:3c:ff:23:b4:e9:
44:71:18:07:55:ba:c2:ff:ba:cc:24:b1:53:6a:54:
2f:04:53:b9:35:38:48:f4:89:43:d5:44:23:c8:ed:
38:32:78:72:a8:92:69:4b:74:93:0b:2a:b9:30:62:
d8:cf:dc:6f:20:94:27:71:66:64:40:59:2c:e6:bf:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:5F:A8:3B:F8:48:2B:83:33:3B:A9:36:79:91:43:65:24:A4:D5
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:7f:b0:ea:ee:00:1e:27:7d:b4:99:23:a8:a4:55:e9:94:
5f:af:6c:93:3a:c2:ba:06:a1:99:b3:c8:2a:61:6b:54:9f:72:
48:dc:df:8e:81:60:d6:8c:00:c3:1e:c3:f6:ca:e4:cd:06:12:
c5:eb:24:90:49:62:b3:ee:f7:9d:c4:be:d2:87:be:2f:0d:eb:
db:4e:f8:9d:e7:d1:cd:ab:a1:42:05:e3:31:72:87:7e:81:27:
22:e9:c2:05:65:d7:bd:2d:3c:a1:ff:b4:af:11:72:01:f1:2a:
96:dd:78:a2:2a:d9:6c:41:d1:c5:d4:74:6e:16:37:9f:d7:f8:
2b:50:65:6d:2f:ba:8e:2a:47:1b:28:4c:be:c5:44:66:cf:fc:
95:61:f6:b6:e3:d1:11:d6:3d:62:dc:a3:8d:35:6b:3b:f4:9f:
50:33:95:51:d5:5c:1a:8e:54:f3:55:bd:fc:86:6a:a2:4a:a6:
d9:22:11:e2:ec:33:cd:ed:66:51:9f:b6:52:2e:c4:a6:ac:0b:
ca:19:46:4b:33:8e:47:1f:92:44:16:84:9c:15:f9:21:7d:e2:
d2:71:c6:85:41:81:89:64:64:d6:79:b2:49:81:57:ba:b5:e9:
76:b4:33:17:82:d8:d7:74:a9:e5:c1:28:bd:f6:73:f8:49:57:
3b:06:33:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgsiJ3QqgopIou2pH+ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTdiNmY5MzIzOTlkNTg1MDkzZDE4NzMzOTRlYmZlMWIy
OWY5OGMwHhcNMjYwNDE3MDcwMDUwWhcNMjYwNDE4MDcwMDUwWjAzMTEwLwYDVQQD
EyhkN2JiNWZhODNiZjg0ODJiODMzMzNiYTkzNjc5OTE0MzY1MjRhNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNb79RsIut36v1hwencE/g03Bqkf
BifDYRaIKbXo6XcFPTbsRNI4Csm2N2XYWz/9/bw844tlPNXjuQbOY8YuC6q7kgk8
Z3piVwYMLX/6y5+syNgV9WZCz9MMYQdDtMpF2p9nV3oXegcPDpN3vcd4RXKnKHbH
Rp5K9BBgv4XdtE5qhwJJuZ6Qf+UjljIi8vnzmR1FprgSrt4g0JmdR7gT2NtkUylr
7HWsvUEkIlDH1yFy6+Uma3aNmxUronytPP8jtOlEcRgHVbrC/7rMJLFTalQvBFO5
NThI9IlD1UQjyO04MnhyqJJpS3STCyq5MGLYz9xvIJQncWZkQFks5r/GswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe7X6g7+EgrgzM7qTZ5kUNlJKTVMB8GA1UdIwQY
MBaAFH8XtvkyOZ1YUJPRhzOU6/4bKfmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUt
ODI3NTc3ZGY4ZWRjLzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUtODI3NTc3ZGY4ZWRj
LzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWd/sOru
AB4nfbSZI6ikVemUX69skzrCugahmbPIKmFrVJ9ySNzfjoFg1owAwx7D9srkzQYS
xeskkElis+73ncS+0oe+Lw3r2074nefRzauhQgXjMXKHfoEnIunCBWXXvS08of+0
rxFyAfEqlt14oirZbEHRxdR0bhY3n9f4K1BlbS+6jipHGyhMvsVEZs/8lWH2tuPR
EdY9YtyjjTVrO/SfUDOVUdVcGo5U81W9/IZqokqm2SIR4uwzze1mUZ+2Ui7EpqwL
yhlGSzOORx+SRBaEnBX5IX3i0nHGhUGBiWRk1nmySYFXurXpdrQzF4LY13Sp5cEo
vfZz+ElXOwYzLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:06 2026 by rpki-client