Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: eRanav2RoHqmyMupO/dCRqcRqRdySMhSQzpMThSIcd8=
Subject key identifier: 83:9E:A6:2D:10:E3:64:84:D0:B9:8F:45:B9:C6:F6:35:AD:63:7B:6F
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 019D996320262C5928E5B86668A374507D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:43 +0000
Manifest this update: Fri 17 Apr 2026 03:01:43 +0000
Manifest next update: Sat 18 Apr 2026 03:01:43 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: 6M7ksSFQe8Pb4fOny9XNWpsZ8aDamtIGGJ5z1R4+E6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:20:26:2c:59:28:e5:b8:66:68:a3:74:50:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Apr 17 03:01:43 2026 GMT
Not After : Apr 18 03:01:43 2026 GMT
Subject: CN=839ea62d10e36484d0b98f45b9c6f635ad637b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:16:09:64:ff:37:d7:e6:6a:7e:d6:ea:f4:
fe:ab:d6:97:8a:a5:ed:da:60:45:5b:d4:8c:f3:74:
70:45:36:58:e8:af:f5:1e:b1:78:08:ea:a2:0f:3c:
48:aa:97:f4:e5:7a:29:ba:68:ca:ca:c6:23:b5:3d:
7b:df:1b:80:0e:39:83:f2:cd:25:98:79:49:26:61:
4e:ed:57:9b:f7:91:f0:67:78:2f:58:12:f8:a9:92:
f7:cb:38:7d:c1:9c:54:bd:e1:9a:16:7d:9f:bb:f2:
24:3c:56:93:1d:de:52:61:f6:6b:47:d6:d8:4c:4c:
77:37:d5:c5:93:b6:75:e9:83:d6:a5:4d:b3:c0:f7:
09:88:47:76:13:5e:74:81:91:ef:ca:66:84:3a:19:
a1:a9:fb:5f:31:c0:0c:77:ff:3e:01:e3:2b:46:c6:
28:68:69:42:3e:c8:05:f9:7a:eb:ac:64:d8:e0:56:
9d:21:0a:ec:55:07:4b:a3:2c:31:3c:48:05:a4:a2:
85:d8:5e:a2:12:3a:3c:57:65:74:12:87:ac:3e:c6:
7d:9b:62:10:6d:bb:f5:08:7e:41:4c:fe:b1:15:fb:
04:e9:f7:eb:c8:05:3d:9c:82:45:63:15:03:18:38:
5b:c9:e7:8d:78:b6:f2:13:f5:ff:af:b6:a2:fc:bb:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:A6:2D:10:E3:64:84:D0:B9:8F:45:B9:C6:F6:35:AD:63:7B:6F
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:2e:71:12:30:0e:00:38:17:95:c2:02:ff:09:50:3b:8d:
76:08:7e:79:df:34:10:d9:31:29:1d:44:4b:ea:09:6d:d2:71:
d3:14:b5:a6:c9:1d:89:d5:c7:ca:d0:90:b0:97:b6:a5:42:79:
b2:54:3e:2b:95:05:a8:d9:81:12:8f:85:05:fa:21:2d:87:9d:
0b:ea:48:b5:f4:05:b5:a2:40:1b:d7:4a:6c:fb:50:f0:c2:5b:
56:1c:18:f8:56:cd:32:02:b6:9d:df:bf:5c:98:fe:27:b6:95:
46:75:b6:82:bf:76:8a:7c:af:e9:dd:3b:36:a6:fd:2a:39:f1:
b1:fd:6a:b5:93:c3:c9:c7:10:f4:34:ec:9f:f3:cc:be:a6:4e:
de:f4:0d:fd:0d:56:ac:e0:cc:d5:d0:25:58:f4:73:dc:79:4a:
49:53:5a:8d:98:c1:08:ff:75:f4:7f:38:c1:e1:20:ae:c8:a5:
cb:a8:f9:cb:1d:ec:e8:9b:82:49:1b:77:ba:d3:aa:02:b0:c2:
64:26:a9:82:bd:a4:fd:d4:70:26:46:49:ac:46:94:be:c0:9a:
bb:b0:17:16:c8:6d:51:77:4f:8e:be:8e:3e:a1:7e:3c:01:a7:
e1:30:5f:d3:75:96:55:f2:b9:bb:e3:4a:bf:0f:2c:da:d1:52:
2c:50:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:41 2026 by rpki-client