Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: D7caX864kfcsFpsAJc9aY/BLX99gdIBfIwnjzVnlZXM=
Subject key identifier: 6B:11:B9:7F:48:64:3F:D5:87:6A:E7:FC:40:E8:CA:DE:80:83:6F:42
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 019DA3E6904F58147BAC17FB186E7E2286C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 01AE
Signing time: Sun 19 Apr 2026 04:01:29 +0000
Manifest this update: Sun 19 Apr 2026 04:01:29 +0000
Manifest next update: Mon 20 Apr 2026 04:01:29 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: ZhO4lQGuZA9HmWPE5g+UiFBB2UNqBUoqePKs6DDwx3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:90:4f:58:14:7b:ac:17:fb:18:6e:7e:22:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Apr 19 04:01:29 2026 GMT
Not After : Apr 20 04:01:29 2026 GMT
Subject: CN=6b11b97f48643fd5876ae7fc40e8cade80836f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:4e:c4:85:b8:c4:a1:39:c2:26:c1:d0:2f:
ed:2f:fe:9e:9c:4e:b7:8f:b4:f2:64:4b:1c:6a:ce:
c5:71:a8:61:d3:35:40:1f:d5:7e:4d:c7:6c:be:91:
0a:9c:fd:41:66:f4:7e:05:1b:9d:e6:ca:4c:ce:91:
d1:a2:72:74:06:ad:de:97:98:b6:62:2d:fd:af:9e:
70:2e:3f:4f:86:43:d7:c2:a4:ea:8f:3b:51:9c:c5:
f3:7e:d1:c3:83:b8:c7:f8:60:48:bc:f4:69:08:a9:
92:54:d1:b9:99:bb:e6:bf:44:ee:e2:9b:b4:9c:cc:
29:54:59:9e:af:6d:3a:07:75:36:d8:f3:76:31:12:
5f:28:d5:f7:0c:70:e7:69:e3:34:69:6b:29:b4:91:
24:47:5a:2b:38:d9:e0:1a:b3:a8:f8:81:87:89:70:
a0:a8:00:f1:3a:ba:a5:08:c0:f6:fc:43:39:f1:7c:
a1:24:9c:8c:15:8b:b0:92:bb:9e:e4:5f:03:de:24:
ef:df:14:cc:3c:12:10:5e:6b:3a:02:d8:5d:dc:1b:
63:9d:4d:ce:54:62:d6:bf:70:f0:d7:78:d1:52:c5:
c8:42:c2:bc:64:66:b1:b1:fe:3e:8e:c3:34:ee:a7:
b9:44:06:be:52:7c:0c:39:e4:5b:20:1c:5b:de:55:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:B9:7F:48:64:3F:D5:87:6A:E7:FC:40:E8:CA:DE:80:83:6F:42
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:10:16:ae:76:82:88:71:1b:3d:1b:bf:b4:eb:ec:3e:31:d5:
08:16:83:f2:22:af:14:91:1a:4e:c3:26:3f:02:6a:e7:02:ea:
dc:6e:9b:61:e9:65:8c:01:f0:3e:c2:95:37:04:b4:59:2a:38:
18:8a:0d:c7:31:cb:2d:fc:5d:6a:2a:38:e9:35:e1:34:8b:62:
cb:d6:ee:1a:77:a3:54:52:f1:f3:fa:5b:fa:11:1f:8d:af:eb:
0e:b8:0e:35:85:8b:60:12:47:d1:3a:4a:28:c7:94:7f:40:87:
f7:4e:7a:f5:52:62:78:3d:e5:c9:4f:77:b0:d2:cb:1b:cc:01:
45:a9:30:c8:93:05:0c:bd:ac:bc:1e:71:6a:d7:a9:5f:40:4e:
82:98:26:53:88:6a:39:f3:6d:3c:a1:db:c0:7c:51:02:41:d7:
df:56:03:c6:5a:c3:ef:5b:19:bd:a1:8e:04:14:cf:bf:c8:af:
6d:bf:e7:63:51:7b:85:6d:33:e8:b4:8f:8c:48:c9:fb:b9:e0:
0a:18:19:a3:45:4f:f3:c0:a2:f5:78:6f:c3:7e:d9:1b:a2:f4:
3f:04:d4:80:08:06:1f:81:09:62:19:c7:87:75:ed:94:b8:4a:
8f:06:2e:3f:41:79:91:ae:b6:f4:4c:29:7f:e8:54:f2:28:d6:
48:94:91:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5pBPWBR7rBf7GG5+IobGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTkwMTZhZjc0OGE0OGZjZTg0ZjYzZjVlM2E4OTMzMTQy
N2RkOGMwHhcNMjYwNDE5MDQwMTI5WhcNMjYwNDIwMDQwMTI5WjAzMTEwLwYDVQQD
Eyg2YjExYjk3ZjQ4NjQzZmQ1ODc2YWU3ZmM0MGU4Y2FkZTgwODM2ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLZOxIW4xKE5wibB0C/tL/6enE63
j7TyZEscas7Fcahh0zVAH9V+TcdsvpEKnP1BZvR+BRud5spMzpHRonJ0Bq3el5i2
Yi39r55wLj9PhkPXwqTqjztRnMXzftHDg7jH+GBIvPRpCKmSVNG5mbvmv0Tu4pu0
nMwpVFmer206B3U22PN2MRJfKNX3DHDnaeM0aWsptJEkR1orONngGrOo+IGHiXCg
qADxOrqlCMD2/EM58XyhJJyMFYuwkrue5F8D3iTv3xTMPBIQXms6Athd3BtjnU3O
VGLWv3Dw13jRUsXIQsK8ZGaxsf4+jsM07qe5RAa+UnwMOeRbIBxb3lUBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsRuX9IZD/Vh2rn/EDoyt6Ag29CMB8GA1UdIwQY
MBaAFHyZAWr3SKSPzoT2P146iTMUJ92MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDIt
MTU1NGYxZDNiOWI2LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDItMTU1NGYxZDNiOWI2
LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRAWrnaC
iHEbPRu/tOvsPjHVCBaD8iKvFJEaTsMmPwJq5wLq3G6bYelljAHwPsKVNwS0WSo4
GIoNxzHLLfxdaio46TXhNItiy9buGnejVFLx8/pb+hEfja/rDrgONYWLYBJH0TpK
KMeUf0CH90569VJieD3lyU93sNLLG8wBRakwyJMFDL2svB5xatepX0BOgpgmU4hq
OfNtPKHbwHxRAkHX31YDxlrD71sZvaGOBBTPv8ivbb/nY1F7hW0z6LSPjEjJ+7ng
ChgZo0VP88Ci9Xhvw37ZG6L0PwTUgAgGH4EJYhnHh3XtlLhKjwYuP0F5ka629Ewp
f+hU8ijWSJSRUw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:35 2026 by rpki-client