Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: mr0Q2CMiZwtny0XMKB7XYupsBEIQIwb2OTISxjEwih8=
Subject key identifier: E8:43:85:1B:74:82:FE:F4:8B:20:8E:D6:11:D4:F2:E1:CB:EC:2D:CD
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 019DA48B3CC5A5C790E0F554776605EF8012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 07:01:21 +0000
Manifest this update: Sun 19 Apr 2026 07:01:21 +0000
Manifest next update: Mon 20 Apr 2026 07:01:21 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: ejeTIXp+1UGgNURTwE9u447R+ot2mznB3AnBzvm6Ka4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:3c:c5:a5:c7:90:e0:f5:54:77:66:05:ef:80:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Apr 19 07:01:21 2026 GMT
Not After : Apr 20 07:01:21 2026 GMT
Subject: CN=e843851b7482fef48b208ed611d4f2e1cbec2dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:13:07:fd:9f:fc:20:70:bd:38:61:0d:80:
4e:d5:67:a0:4a:df:dd:5a:e2:66:b8:98:3a:4e:d5:
3f:ad:0a:de:70:17:e6:71:42:15:f2:93:8d:83:4e:
85:71:9e:bb:40:bf:a5:1e:fb:0a:61:5e:04:aa:9a:
c0:08:73:c8:08:18:eb:14:de:87:d7:07:b5:84:e0:
37:ba:2b:4e:1c:5c:fc:3e:a8:b5:60:24:12:78:b1:
aa:ed:c8:6d:fd:05:e3:5d:ae:40:6d:de:82:87:ac:
68:53:3c:b5:fa:09:3c:26:99:a1:1b:3b:63:4f:16:
ff:11:50:6e:ea:d7:9b:27:d9:db:3b:4a:93:aa:4e:
a5:0e:04:a6:7c:b3:0b:34:3b:32:d0:66:80:b1:74:
dd:8c:e4:ea:a1:c1:a0:2c:6e:1e:f6:90:77:08:a2:
8b:38:18:d2:c5:aa:22:0e:73:12:4d:fe:91:7d:af:
78:16:bb:3f:38:c1:34:60:9b:84:b3:12:7d:75:a2:
14:11:20:f2:9c:f2:37:6a:cf:05:49:ec:20:72:ab:
07:8e:07:7b:2c:33:95:2d:1f:41:8e:04:2e:06:b8:
67:b7:67:48:9f:99:ce:75:fb:30:25:be:c5:79:07:
e5:3c:ac:69:ab:eb:f4:15:ee:d6:86:07:ba:c0:79:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:85:1B:74:82:FE:F4:8B:20:8E:D6:11:D4:F2:E1:CB:EC:2D:CD
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:e5:1d:8d:2e:33:9f:7a:ea:66:33:a0:1f:bd:a8:b8:9c:
15:b9:4e:e7:40:04:c9:83:cf:38:35:7d:d5:56:04:45:08:4c:
cd:1f:c2:c8:92:3e:98:a1:55:8c:15:e6:fd:ed:8e:93:aa:9e:
bf:c3:27:8c:1f:75:01:9e:37:5e:04:15:ec:4c:b0:0b:06:cd:
f2:01:d4:ff:de:68:57:4e:4e:2f:59:a2:2e:eb:ed:61:92:4c:
b0:26:13:b4:98:7c:5e:c7:6f:88:dc:48:dc:82:ab:69:51:3d:
8a:8b:df:02:95:c9:d1:d9:ac:f7:fa:93:c1:6a:1d:3a:85:12:
b9:8d:36:b7:c7:6b:34:02:bc:8a:47:52:6a:56:c3:50:c1:78:
3d:98:d8:09:5f:e5:de:de:0d:6e:a2:1b:53:11:f3:de:ec:59:
90:3a:ab:d8:de:6c:3d:41:73:b9:04:72:92:39:78:be:d3:40:
b2:f5:ea:9c:88:4e:b1:15:37:43:3f:6e:16:88:06:98:fb:90:
ca:75:8c:57:49:58:59:16:98:34:3b:49:61:fd:5a:a7:97:57:
28:25:fd:11:28:08:64:0d:ac:39:6f:68:02:1e:a9:85:22:98:
17:e0:3e:d9:96:7f:ea:4a:1b:aa:3f:24:d2:7a:93:12:d1:ad:
ee:33:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:19 2026 by rpki-client