Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: f8nPwgVlPf2DX2yPlR9L8pSUspD7y/FSX0haPzsujGc=
Subject key identifier: B4:09:57:1A:08:8C:34:AA:45:6D:A6:4D:15:E5:1E:9F:97:68:5E:80
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019D9AE2EAD0AAE982DC53D1B619FE8ED96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 03DC
Signing time: Fri 17 Apr 2026 10:00:55 +0000
Manifest this update: Fri 17 Apr 2026 10:00:55 +0000
Manifest next update: Sat 18 Apr 2026 10:00:55 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: hH2aQMS8KEA0lWUVPfuVdn3tzRuuIxtlcFNubCCLxvM=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ea:d0:aa:e9:82:dc:53:d1:b6:19:fe:8e:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Apr 17 10:00:55 2026 GMT
Not After : Apr 18 10:00:55 2026 GMT
Subject: CN=b409571a088c34aa456da64d15e51e9f97685e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:0c:15:e7:c4:32:0d:5d:ff:7d:7c:94:be:
70:f4:1f:60:c8:bd:64:09:63:27:60:78:9b:4c:22:
4e:9c:25:d8:69:7f:4d:51:a3:88:5e:10:2b:29:8b:
6c:f3:f3:6f:92:ff:51:8b:b8:31:56:46:26:47:fe:
bc:63:c9:c5:88:0d:0d:2b:a6:1a:6c:ec:79:db:0e:
55:51:51:a8:b1:08:37:7f:cb:6b:54:e0:ae:9b:0e:
7f:04:ef:34:4a:c6:ee:4d:8f:7d:8c:43:59:40:81:
83:31:30:5f:e1:a7:99:6f:8c:6d:b3:f6:19:7a:e8:
a1:75:13:53:69:83:60:8b:2d:1d:ad:a3:09:03:a1:
1f:24:ca:2a:19:7e:b0:67:ae:56:be:28:ab:8d:73:
1e:dc:c6:0c:6c:77:49:a6:f6:33:59:fe:f1:1b:6f:
6f:2f:0e:86:a7:0b:bb:a4:92:a1:bd:0e:cf:83:07:
6a:a6:85:f8:63:ea:df:00:4d:22:d6:c2:47:33:79:
42:48:54:3a:ac:44:e8:e9:80:82:4b:81:c9:c8:91:
78:02:6b:ef:98:f1:12:d8:ad:8e:2f:fe:4f:82:e7:
d8:19:77:76:50:5f:46:e6:8b:3f:ef:46:4d:47:9b:
6a:3d:7b:d3:e2:c0:d4:68:d2:de:bf:0b:0e:76:be:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:57:1A:08:8C:34:AA:45:6D:A6:4D:15:E5:1E:9F:97:68:5E:80
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:57:c1:98:37:b5:44:6d:6d:c5:8d:ff:e3:c0:02:7e:e3:0f:
93:cd:c4:20:c9:be:dc:1d:f3:19:12:b9:bb:d8:2f:5c:2c:30:
e2:37:81:38:03:e5:9b:e8:51:47:d6:99:dd:28:4a:b9:54:d8:
91:19:6e:19:bc:fe:a5:67:a5:e2:81:41:6c:69:e6:6c:23:eb:
0e:26:27:b5:e3:91:cb:42:62:0f:1e:13:5a:a3:af:b1:10:c2:
9a:23:54:c8:42:e1:bf:50:1b:2e:65:89:e7:d6:db:d8:e4:fb:
48:94:28:1e:8d:df:9b:fc:9b:a1:93:f1:a2:49:b3:81:6e:02:
b4:43:72:af:ab:4e:19:8b:1c:0a:ee:c5:ce:52:b5:56:d9:fd:
e0:7a:15:03:f6:b2:07:28:ad:86:cd:c1:8f:ea:6f:28:c8:a6:
88:42:c8:98:3b:5d:af:c7:39:7e:1f:1e:9d:af:c2:d5:88:0a:
d1:e4:c5:58:d6:cd:6a:61:75:35:06:87:3a:f3:63:7c:d1:91:
ff:7c:d7:4a:b0:94:a9:c1:cc:bf:00:aa:3f:cd:a3:9b:30:e3:
eb:e8:8a:98:c4:10:1c:53:73:6c:51:04:49:9c:b4:47:43:ba:
cb:6e:4a:60:32:22:ad:15:a8:14:42:a9:c0:7e:08:ec:ca:2f:
40:aa:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:42 2026 by rpki-client