Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: YVSh+T8ayVHJUcrwi7KGFvKYDck5ZEklEMqdoHVM/Ro=
Subject key identifier: FB:58:EC:A4:6F:1D:85:65:69:5F:4A:12:63:80:12:F6:54:4D:8C:96
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 019DA59DC69C0458E4996E3D6A9163B0153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 6A
Signing time: Sun 19 Apr 2026 12:01:13 +0000
Manifest this update: Sun 19 Apr 2026 12:01:13 +0000
Manifest next update: Mon 20 Apr 2026 12:01:13 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: MteLSBo8gOWzvlVqSuxzPX6FZ2Yl7/jGm0PHEeXmpuc=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:c6:9c:04:58:e4:99:6e:3d:6a:91:63:b0:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Apr 19 12:01:13 2026 GMT
Not After : Apr 20 12:01:13 2026 GMT
Subject: CN=fb58eca46f1d8565695f4a12638012f6544d8c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:09:db:d4:ae:c7:bc:a6:d7:2b:c6:e5:19:
3c:2d:98:e1:7f:d6:9c:da:fb:bf:bd:96:ac:1f:ec:
a0:9c:d7:4c:e1:3d:2d:65:7d:65:a4:e1:8d:68:98:
a6:2d:6f:95:ae:55:c7:76:a8:88:82:2d:59:62:6a:
1c:2b:6c:84:91:21:cf:ed:75:b6:e3:2f:29:7d:77:
92:e5:0c:29:08:6e:79:b1:ab:57:c2:ad:23:d2:63:
72:3c:5b:48:d3:ec:0c:13:bd:a3:cd:bc:56:6f:0e:
23:e5:ac:5f:2b:4d:d5:15:06:ff:bf:19:f8:cc:75:
10:21:30:bd:1c:3b:92:c5:46:58:9a:1a:80:86:7b:
74:07:a9:01:fe:4c:6c:85:9a:1a:df:e9:7a:ca:d4:
57:19:3f:9a:4c:df:13:9b:84:63:fc:ff:63:aa:0d:
57:cf:14:5c:a0:88:ac:be:f5:6c:2b:28:82:67:f3:
b5:80:83:35:12:f3:31:2d:c0:ff:bc:3d:d7:ef:7e:
c0:14:7d:80:76:53:8a:6f:e2:9e:cc:d5:f2:c5:d6:
67:57:49:83:da:4e:86:43:3e:56:c3:fb:42:0b:5f:
9c:d5:35:33:a6:af:43:4b:11:80:20:c3:2c:93:a2:
06:af:26:7e:ba:98:e9:b6:d6:1f:eb:43:b4:a6:1e:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:EC:A4:6F:1D:85:65:69:5F:4A:12:63:80:12:F6:54:4D:8C:96
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ba:37:31:0c:f0:11:59:0f:60:39:9d:87:2f:4c:c4:ff:0f:
46:af:f0:74:42:ae:73:c0:85:37:bb:3e:f6:0a:df:2d:80:91:
20:fc:59:43:59:2b:58:0a:17:3c:ff:71:2c:88:20:cc:44:ef:
d0:7f:4e:cd:6d:ac:6d:fa:76:ad:05:7c:72:9c:11:4b:64:02:
67:c3:75:64:2d:b0:00:d9:01:04:f7:e4:cb:7e:69:05:63:5b:
54:4a:67:cb:35:a6:f5:22:9e:2a:45:f7:fa:79:c3:20:89:02:
a5:dc:e1:fc:52:93:03:82:9d:e1:7c:84:c8:94:c6:8f:25:bf:
12:5f:7c:9b:30:ea:53:8e:e9:df:64:73:fe:8e:8b:47:ff:5a:
45:f2:24:f2:f7:de:29:bd:f2:bf:51:c9:fe:87:f5:26:94:90:
ce:1a:47:03:b3:e9:b8:fe:b8:0c:79:e4:b3:61:b1:90:77:16:
68:9d:3f:c4:7b:56:45:21:2a:d8:72:1c:a2:e5:4e:5b:b8:00:
64:84:1b:46:40:10:07:9b:1b:73:70:37:e1:f2:f0:3d:a4:4f:
a9:a9:d9:3a:29:af:76:60:cd:af:bf:1b:9d:f4:69:46:6b:c7:
55:5a:d8:37:00:ce:b1:2a:36:3e:c1:1e:f2:82:b8:81:0b:c6:
a3:9c:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:18:58 2026 by rpki-client