Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: syAvPQKPA+QWKmlawqSM4+H7kUlH9j+2HvCh+BnMrRs=
Subject key identifier: 43:9C:EC:CF:79:9D:A0:7D:D8:84:20:83:88:21:E8:7C:8E:2D:01:70
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019DA41CB923FF7ABA0010F20E6D989B3FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 05:00:38 +0000
Manifest this update: Sun 19 Apr 2026 05:00:38 +0000
Manifest next update: Mon 20 Apr 2026 05:00:38 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: N5u2zURssh49izV87zMa/u+kzaXNBkXNQOOETuWH36o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:b9:23:ff:7a:ba:00:10:f2:0e:6d:98:9b:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Apr 19 05:00:38 2026 GMT
Not After : Apr 20 05:00:38 2026 GMT
Subject: CN=439ceccf799da07dd88420838821e87c8e2d0170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:9d:fa:a1:8a:24:7c:74:b5:50:50:42:47:
2a:52:61:27:98:b6:83:b9:4e:a9:41:2e:f7:92:5a:
37:54:3a:f1:bf:f7:cb:21:f6:98:f7:dc:79:58:20:
dc:e7:b8:21:6c:aa:99:a1:1e:82:c8:ba:cd:e1:09:
0e:0a:bb:48:47:47:ee:45:66:16:47:21:be:e9:5b:
28:62:8d:f2:00:5e:63:27:97:c9:41:32:37:16:1d:
01:a0:ba:bc:1a:2b:b9:e5:d6:63:87:80:c8:de:5a:
c1:7c:13:0c:4c:16:97:64:ba:73:10:31:64:44:3c:
bc:9e:51:08:99:c4:f7:34:34:19:7f:f0:bb:a1:84:
22:43:81:5c:7c:dd:00:2e:6e:bb:da:d9:02:51:dd:
81:7e:85:8f:5b:97:c5:d5:5b:8f:5f:32:f4:30:18:
9f:61:91:7c:f4:2b:e9:b3:7f:27:30:91:15:7a:0e:
ce:0c:3b:07:d1:b5:0d:b9:9a:f3:18:2b:a5:c1:67:
66:16:92:16:a1:f4:b3:0d:4d:df:2b:e0:b5:c5:8f:
01:7a:1f:3d:84:b4:64:62:1b:ba:89:ad:07:dc:6c:
89:c1:45:1b:19:75:2c:b9:e2:cf:f8:25:19:2c:c5:
48:6e:c4:4c:6e:6f:75:4e:bc:c0:83:8b:72:ea:dd:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:EC:CF:79:9D:A0:7D:D8:84:20:83:88:21:E8:7C:8E:2D:01:70
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:74:33:4e:ff:70:8d:ff:ad:88:9a:a6:72:31:bf:81:69:
5f:67:2e:92:bd:c4:b6:4d:6b:96:5c:72:eb:a1:2a:5c:a8:83:
03:bb:55:6b:bf:d7:46:23:8a:e2:81:44:e8:e0:bc:93:7b:6d:
77:f7:e9:7a:8d:69:14:0d:c5:35:2a:a7:74:13:17:fb:6b:c2:
72:27:4d:be:44:03:8e:a2:47:f4:8f:aa:1e:a9:3b:3c:aa:e4:
a1:23:e3:da:39:66:ac:c8:7a:fa:24:48:8b:f9:18:f2:4e:01:
68:a1:aa:c0:31:bf:a6:9f:55:29:31:40:ad:ef:03:c1:43:63:
f2:86:f3:10:43:f7:aa:16:a9:30:81:be:2b:b7:d8:e0:ab:9d:
3d:88:1e:30:92:fd:ac:66:73:29:29:7c:f1:9b:95:08:58:f8:
0a:31:74:6e:b3:d2:ea:63:c7:58:01:4b:33:01:45:49:3e:ef:
ab:4f:1f:6b:dc:59:e5:3b:32:e0:03:0b:d8:a3:e5:21:ce:1a:
c2:46:63:52:3f:df:b5:07:5f:1d:f5:90:4f:0a:e6:0e:04:d1:
ee:57:88:b7:94:50:b8:c4:06:f2:27:1f:e5:e6:b2:e3:5c:f1:
89:3d:e3:1b:7a:51:c2:ec:da:64:55:cf:6f:8f:a9:fb:68:8f:
93:b0:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:55 2026 by rpki-client