Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: +VWg16ZZQTd1VEcU7HVvslMye25Zu+jWztRHZaqQ+l8=
Subject key identifier: CC:17:2C:56:09:99:3E:45:DF:CA:BA:3B:D9:09:14:B8:44:B6:B2:0B
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 019D9886B713ABD6B3BD2B0953C77A0FB3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 13C7
Signing time: Thu 16 Apr 2026 23:00:58 +0000
Manifest this update: Thu 16 Apr 2026 23:00:58 +0000
Manifest next update: Fri 17 Apr 2026 23:00:58 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: cCcH2nopW65hsRgJ7B6r0V+ikIFSwL2lnXqoLmeexl4=)
2: J4YLrLdwYgPSyWf3TDtozKJGYDA.roa (hash: oD8qfrXmhU5eXPYgfnLW4FbZh7wYxDBRIu7McpM1mGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b7:13:ab:d6:b3:bd:2b:09:53:c7:7a:0f:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Apr 16 23:00:58 2026 GMT
Not After : Apr 17 23:00:58 2026 GMT
Subject: CN=cc172c5609993e45dfcaba3bd90914b844b6b20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:50:9f:dd:de:31:12:f9:48:47:c1:39:1c:
43:4d:22:9b:58:e2:ee:8f:fd:43:d1:e1:81:ae:2c:
6c:0b:86:5a:c5:81:e4:e3:9e:be:72:9b:6f:81:46:
c0:c3:85:94:e7:9c:8d:9b:b3:7a:9d:a1:40:8c:d6:
16:f3:a5:3f:d7:fc:1c:d1:11:ad:e1:6a:42:d0:08:
b2:cb:62:50:a8:37:56:4b:c4:67:26:20:b8:7b:48:
bc:0d:f3:d9:3e:5e:44:9f:e0:f1:82:cb:a0:46:86:
47:88:9b:ec:e7:b8:32:68:89:b9:f0:77:27:40:af:
70:e4:97:71:06:ca:c9:84:e3:d8:80:9f:50:21:1a:
dd:a0:de:96:07:d6:b9:04:5c:83:ec:67:b4:c1:aa:
e7:a0:13:98:be:81:82:bb:01:2d:ca:3d:92:db:1f:
2a:2c:91:51:e5:7f:9b:e3:88:00:1e:98:ab:66:ef:
65:13:ac:57:24:90:0d:de:ae:84:cb:b7:dc:e2:35:
eb:7e:06:e1:ef:55:4d:ff:a1:18:91:64:35:42:f0:
d8:15:26:45:db:cf:17:87:1c:c6:19:9e:bb:37:fe:
1a:4f:e2:4e:ed:62:52:72:db:a5:4a:d4:80:e0:05:
aa:b6:6b:1f:76:50:fc:aa:34:b0:e1:df:1f:a7:7a:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:2C:56:09:99:3E:45:DF:CA:BA:3B:D9:09:14:B8:44:B6:B2:0B
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:c0:d3:74:1d:65:d9:9a:c4:87:19:e0:e5:ae:56:73:b8:
99:75:c3:c1:8b:69:77:ea:f3:bf:99:1a:e7:3c:e6:ef:75:21:
a7:45:dd:11:0f:97:81:fe:0a:18:0b:f9:75:be:c3:ca:7e:98:
7e:99:7b:eb:c3:d7:1d:a3:c7:d9:d6:23:eb:1e:1e:ed:08:16:
47:d5:dd:9d:48:4c:d4:09:ce:c8:ab:65:f9:f4:f3:a4:ed:42:
bc:02:d7:66:dc:4a:d6:d9:c3:ab:61:99:f9:2a:4d:9b:ee:7f:
38:04:1a:69:eb:f3:9d:b4:f2:fd:13:ab:8f:72:05:63:40:45:
04:93:8a:b5:22:c9:c4:37:c9:40:e9:d5:ee:f9:36:f8:0c:22:
ed:0d:d5:ec:74:3d:f9:ac:34:ca:94:eb:ac:53:bb:67:1f:9c:
5b:a2:b1:ac:a3:8d:b7:0a:eb:86:ca:10:1e:af:c6:de:ff:0c:
e2:a0:53:0d:a4:72:4c:c8:4c:ed:78:db:3f:1f:88:92:c8:c7:
e8:50:a0:8a:b6:1f:50:9d:c5:77:71:9d:d4:50:62:50:7b:22:
e8:a9:f7:f8:4f:7b:b0:60:27:36:b4:00:34:cf:0e:4b:b5:29:
c9:ed:6c:15:df:21:56:08:bb:62:f8:6a:55:bb:cb:bf:95:4b:
55:be:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:39 2026 by rpki-client