Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: WGgEHt1SLiPrc2EDbldkiNR2j3bnZDly+uuI96kKrXw=
Subject key identifier: A6:E0:38:31:01:6A:E5:C5:F8:00:BF:23:83:05:CE:D6:5F:37:88:1B
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019D97E1BC6B4CA2712FC32B313C6A8E6A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 15D5
Signing time: Thu 16 Apr 2026 20:00:46 +0000
Manifest this update: Thu 16 Apr 2026 20:00:46 +0000
Manifest next update: Fri 17 Apr 2026 20:00:46 +0000
Files and hashes: 1: 4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa (hash: H9IZSHKQQb+XSiam4n6FXPX7X+NUo4iyE9Bfz0ZsuCI=)
2: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: 0kfD+xJgQyniT9kytJyifqe+kPN9+YDqruHX+xUIqDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:bc:6b:4c:a2:71:2f:c3:2b:31:3c:6a:8e:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Apr 16 20:00:46 2026 GMT
Not After : Apr 17 20:00:46 2026 GMT
Subject: CN=a6e03831016ae5c5f800bf238305ced65f37881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:57:9e:da:c6:ba:31:88:bf:fd:06:41:b5:
ce:df:e8:02:f9:ba:11:15:51:2b:a2:61:4a:6d:a3:
39:76:03:bc:52:a7:9c:18:4e:d8:af:b5:01:f1:82:
8e:8b:a6:74:d7:a7:03:9d:cc:e7:fb:3c:22:ec:07:
ac:ca:37:e5:c5:5e:83:8d:3e:2e:4f:63:00:aa:cf:
f5:54:6f:9e:13:82:25:a4:77:65:aa:89:68:f3:96:
47:8e:12:a0:0e:6e:54:b2:60:97:e8:bb:35:6c:77:
2a:3e:6a:63:94:ac:21:3a:ff:36:a3:a8:bf:00:59:
87:72:78:47:86:0f:6f:8d:21:f8:cf:ff:2c:d5:98:
66:f3:cf:b4:ff:7c:0d:a2:80:3e:08:5c:f7:fc:08:
9f:47:1c:09:fe:f8:88:d8:4d:ff:db:7d:8e:4d:d6:
7c:8d:c3:a5:6c:a5:cc:e8:70:6d:da:ee:e5:53:fa:
1a:be:d4:de:3b:d0:0d:12:84:09:e1:c5:ea:73:c3:
22:96:62:00:e7:50:48:23:74:3d:09:63:d8:3c:af:
73:74:d9:67:5f:a5:01:6b:56:2d:9d:4e:43:48:b8:
54:0a:d7:87:2f:48:be:e2:ee:32:fb:55:31:aa:e6:
7c:a3:e6:02:63:69:9a:ee:80:9a:9f:37:72:67:b5:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:38:31:01:6A:E5:C5:F8:00:BF:23:83:05:CE:D6:5F:37:88:1B
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c5:1a:6f:46:27:e7:c8:54:0e:53:d5:ff:3c:3e:a0:12:c4:
a5:32:dd:4e:8b:e2:fb:77:57:13:6a:3e:92:33:5e:ad:c0:71:
9a:7f:96:e1:ac:a0:cf:ca:88:c5:53:78:d6:1f:42:31:a2:11:
f0:86:26:6d:cd:78:84:99:2f:47:b9:d7:fb:82:3c:97:e8:84:
ac:f7:7d:e1:51:51:b1:d8:7e:b6:ec:53:ef:f3:d7:72:f8:5c:
a2:b0:3d:f4:2a:b6:0e:b9:ee:f6:cd:f2:ce:79:8f:38:4b:5f:
37:8a:f6:4a:24:9d:82:6a:94:31:ae:ba:87:8b:0e:2e:16:5d:
45:d4:9c:60:a7:98:d4:8c:0b:e5:5e:3a:73:4f:13:bb:d3:30:
4d:63:88:bc:80:46:6f:05:16:47:ac:4f:54:16:fe:2e:49:62:
06:e4:b1:f7:46:29:ee:2d:85:0d:99:17:cf:80:eb:fd:16:88:
4c:3e:6e:e9:11:63:c1:51:56:78:71:2e:8d:41:73:22:4a:d2:
09:2d:c5:24:e6:e2:3c:cb:2f:20:ab:ec:55:c5:51:a3:70:c6:
19:f3:b3:a2:17:1c:d8:52:94:14:e3:7f:31:be:4f:6e:da:55:
0e:3d:df:54:8c:99:25:7b:62:17:20:9d:9e:a1:24:2c:36:17:
b2:42:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:51 2026 by rpki-client