Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: FDUIeebc9bLOnFiLDHtOgSs/kQLlQmPpZcQfkX3Vg0o=
Subject key identifier: DD:D6:51:70:21:8D:C4:68:57:AC:05:CB:39:A7:9F:49:DA:72:31:34
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019D98F52CE9C56A40E5B2CEE8FD34249318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 1806
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: XFclfzTCpXlYis8+sFdr8DENl8z+KI0kt61HlVzNpM4=)
2: MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa (hash: Pu3fjnw+yegdjONecUUu8p5b5PIQ+jy3LKoUoEMvgbg=)
3: V50bPPxe9__9PdVaWrp4pIj1_3U.roa (hash: IVLdcVsUqYG9MQEXxQ1iKoQ3JRljtxzT2Wh5hJYRUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2c:e9:c5:6a:40:e5:b2:ce:e8:fd:34:24:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=ddd65170218dc46857ac05cb39a79f49da723134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:0b:dc:b8:f2:aa:4b:03:f9:94:2b:d6:c9:
59:94:9a:ff:f2:21:d5:45:39:88:ce:99:0d:51:b2:
de:58:9b:e0:ab:3b:59:30:fd:f2:ca:53:db:22:70:
eb:3a:0d:88:2c:ed:45:ac:15:53:d5:5b:8a:4c:6c:
72:b5:b2:84:7d:cd:3f:cc:6c:15:f1:4f:73:1b:27:
9b:78:46:fb:3d:98:71:bd:7d:f5:61:29:b5:c5:9b:
3f:4f:2d:01:0a:c5:e1:7b:60:9e:03:07:96:59:04:
11:15:f6:42:e2:6f:c1:b6:db:c1:c3:a0:27:3e:0a:
b0:6a:07:b3:44:de:ae:40:2c:e0:34:d4:18:20:c0:
cc:0f:24:5a:5e:64:fa:b1:be:67:62:b8:e6:eb:14:
59:04:37:ba:45:d9:79:27:c6:63:3e:e7:3b:34:02:
02:7d:2b:0f:13:66:a0:26:00:84:f1:5c:d8:21:11:
af:1e:3a:4d:2d:f2:4f:ea:97:bc:49:4f:46:ed:9a:
40:bd:0a:86:4e:01:19:aa:24:54:ba:ba:d4:1e:49:
03:45:66:53:42:99:62:96:1a:32:2e:76:d8:87:27:
81:2d:c6:c5:b6:e2:a8:cf:36:1a:7a:c3:4c:4f:e6:
5a:a9:94:5f:2c:9e:f2:68:15:73:98:53:87:54:df:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:51:70:21:8D:C4:68:57:AC:05:CB:39:A7:9F:49:DA:72:31:34
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:6c:b3:8e:15:bb:44:20:39:3b:57:a5:aa:73:14:ed:6e:
e5:ea:fe:aa:ff:df:db:c5:a1:6b:11:37:4b:8d:b5:65:8d:fd:
6e:97:2a:38:13:48:70:d3:02:24:f5:70:b7:ce:f1:5e:96:3e:
7f:34:a1:71:b0:60:69:49:1e:be:31:ca:cd:29:d0:84:8c:b8:
2a:90:5a:7d:31:b0:67:3c:b1:a6:fd:3d:14:e9:ea:c3:a3:5b:
da:ea:be:d8:ff:97:44:dc:97:ed:21:0f:7d:78:93:9a:7f:67:
c9:43:b6:db:f9:2a:65:0f:f5:d8:55:66:31:16:c6:0c:b4:22:
67:84:31:fe:cd:ae:83:f4:ed:84:23:6d:a6:12:c2:ec:5c:75:
a7:bd:ee:02:f1:87:1f:a8:b2:d0:53:45:4f:e1:4d:f3:75:1f:
e8:51:18:1d:f2:0a:a2:d0:1b:02:45:7d:e5:0b:ff:83:1d:c9:
57:80:db:d3:4b:8a:8b:fe:9b:62:94:ee:89:98:f7:72:99:71:
e3:fd:5f:7e:bb:92:ec:96:38:5d:fc:ff:87:c2:2e:13:88:c4:
c9:3c:db:99:a7:01:cf:ea:f3:0c:c6:92:a5:4a:ec:f5:8e:06:
14:14:eb:49:85:41:4d:1e:f9:70:e8:87:80:4c:f6:e0:95:9d:
47:15:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:32 2026 by rpki-client