Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: bzeEE37HSYFjEGHvH/IZ2rDVDl0o/H4AKvdsdTZi4mI=
Subject key identifier: E6:5D:91:E6:E5:5D:BD:C1:82:B5:8D:B3:24:44:A7:00:0E:C1:51:CF
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019D9A3E1905CBF536D4E58E4050B4F5B4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 11D8
Signing time: Fri 17 Apr 2026 07:00:53 +0000
Manifest this update: Fri 17 Apr 2026 07:00:53 +0000
Manifest next update: Sat 18 Apr 2026 07:00:53 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: zv890IGcYuqWV95bo0JO6iVaR8svTOcQYGSs//bPmz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:19:05:cb:f5:36:d4:e5:8e:40:50:b4:f5:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Apr 17 07:00:53 2026 GMT
Not After : Apr 18 07:00:53 2026 GMT
Subject: CN=e65d91e6e55dbdc182b58db32444a7000ec151cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:6e:fd:f3:af:de:54:10:a8:89:e7:00:4c:
9e:d6:45:b6:e0:b8:91:9a:67:b8:e6:7f:5e:59:54:
d4:5a:c6:74:fd:b7:fc:ff:1c:b7:92:47:23:81:d2:
f0:7c:87:31:50:ad:1a:79:8a:2d:83:82:56:2a:e5:
23:ed:95:0d:eb:e8:59:2c:48:97:bc:85:13:40:a8:
14:22:59:c5:9a:5f:6c:f4:f8:61:95:bc:ac:2f:8d:
9e:6d:d0:cd:49:24:d0:06:08:6e:d8:db:23:6d:9e:
ab:d0:7f:75:0c:7b:82:41:b7:36:8f:54:f8:05:56:
e5:c7:af:42:e9:d9:bc:ff:5a:a8:80:05:7e:4b:40:
56:a3:5a:03:e8:83:1f:4d:59:a9:e0:67:16:1d:3c:
58:c1:96:71:8e:ca:3e:1c:2e:91:69:36:5d:7e:c8:
10:fd:03:52:73:c8:d9:c9:3d:5b:78:3c:73:f2:1c:
dd:e3:58:47:b7:26:29:a5:c3:79:9a:1f:59:25:b8:
d7:51:57:82:69:e8:05:89:aa:be:ee:6d:e4:89:b9:
d5:77:a9:e0:03:01:47:68:ff:c9:07:80:aa:7e:d1:
76:d3:e1:b5:64:45:17:49:c8:d4:df:de:9f:23:53:
a3:2b:7e:7f:ea:1e:e3:f2:9a:55:b5:e4:bd:04:a5:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:91:E6:E5:5D:BD:C1:82:B5:8D:B3:24:44:A7:00:0E:C1:51:CF
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:12:2b:51:3b:bd:ce:4d:7b:c5:c8:31:b7:76:e5:cc:36:19:
4e:0d:1d:1e:d4:e4:29:13:15:be:a9:87:83:66:cf:40:15:3c:
b9:50:ac:2b:5d:11:4b:06:d8:e9:0f:a7:23:d9:fd:39:25:e2:
35:60:47:c4:2a:8c:c8:70:0c:d8:37:85:a7:25:a0:c3:a2:06:
63:80:bb:6b:c8:72:09:46:7e:02:a3:e2:c6:7a:6e:07:63:fd:
33:52:b9:0c:62:2c:d3:d7:b2:fd:4d:42:5a:13:fe:a6:d5:e3:
80:6a:18:17:aa:5a:ce:50:65:e6:c9:42:b5:bf:09:be:9b:83:
39:cc:22:85:7c:88:e3:c5:68:0e:50:ea:c4:7b:3d:cd:7d:bc:
91:ce:61:dc:ec:4c:21:86:31:d8:9f:7a:ba:72:f9:48:5c:43:
17:1a:ff:ce:63:d4:bb:b5:63:0c:d2:f7:51:ec:9f:3c:6a:f3:
d1:42:1a:e4:3f:4c:47:2c:8a:19:38:c4:b9:ec:e4:61:88:e9:
03:62:6a:9f:e3:87:9f:fc:aa:66:61:fe:7c:30:89:73:de:96:
48:1d:45:12:95:dc:b2:69:4e:a0:a0:ea:af:af:10:e9:ee:67:
ba:b5:e0:72:2b:55:01:d7:f1:ae:7f:bd:6c:ce:65:0f:7a:a8:
f7:44:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:31 2026 by rpki-client