Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: 5zN54zbnbxzBHiv5GkNhz8lSXKZflnfztxldTCohOQQ=
Subject key identifier: 21:6E:2D:72:D8:10:1F:16:1C:F0:A3:C6:3F:05:94:33:AD:64:AC:43
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019D9774A1A75C4B6F7F7DC3E388800F9AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 167F
Signing time: Thu 16 Apr 2026 18:01:36 +0000
Manifest this update: Thu 16 Apr 2026 18:01:36 +0000
Manifest next update: Fri 17 Apr 2026 18:01:36 +0000
Files and hashes: 1: 6HTx2YeWwDr3S2VVILbwB2Jafj8.roa (hash: hsBw1ez3yUj6UmH6NZMF2hQl/djg3G8hjk0Okprj7r0=)
2: VqGEMx7_g1oCR5PMih3sF1ICV0I.roa (hash: 2XQimBCsGUGReAdNUI71pDg4FSroIYJhgCkB4L3gVZQ=)
3: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: sa+mrjxxMS8bFAW56vNZgdKWYWWHMJnWD2GP4Me205A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:a1:a7:5c:4b:6f:7f:7d:c3:e3:88:80:0f:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Apr 16 18:01:36 2026 GMT
Not After : Apr 17 18:01:36 2026 GMT
Subject: CN=216e2d72d8101f161cf0a3c63f059433ad64ac43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:66:bf:a1:20:84:89:01:3f:44:7c:b7:61:
b5:99:64:62:0c:c3:61:bc:cd:4c:27:7b:7a:10:ad:
75:d8:9f:66:d0:41:3d:c3:29:39:dd:ea:b2:ce:da:
55:c2:99:0b:47:0e:e1:81:f4:3f:07:46:eb:5f:d2:
b6:77:79:4a:0f:16:2c:81:a1:0f:56:39:e9:3b:ff:
f2:24:b1:74:ba:4e:cf:28:69:2c:4f:45:45:e0:a4:
d1:93:1f:03:50:cd:6a:c6:a8:4e:77:34:bf:c3:00:
ec:28:51:2d:a7:76:92:88:23:67:52:93:10:46:38:
55:e5:19:27:87:26:44:11:cc:d2:ff:c9:69:52:b5:
82:db:0d:83:ae:8f:61:cb:2d:ec:0b:07:79:04:99:
88:1e:43:0e:e3:47:e1:2e:9a:13:87:e3:a0:38:d3:
fb:84:97:da:cc:e3:4d:ea:63:c6:da:42:8a:bb:a7:
5e:a6:2e:27:cd:fe:50:f2:ec:d0:af:05:27:b4:fe:
bd:f7:dd:11:64:d3:71:fe:39:0f:89:6e:7f:e7:06:
14:5a:6e:78:90:f4:2d:54:fc:f7:06:59:a8:7e:60:
2e:0b:6e:3f:40:c0:f6:6b:15:a9:b3:33:57:60:c0:
45:eb:1a:fd:1b:84:8c:dc:f5:40:32:1c:cd:a8:ed:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:2D:72:D8:10:1F:16:1C:F0:A3:C6:3F:05:94:33:AD:64:AC:43
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:02:9c:b4:54:44:e4:90:bf:ab:bd:da:1c:41:51:62:24:1c:
2a:b0:c0:e5:d1:bf:0f:9f:de:9c:15:8b:e7:a9:23:a5:2f:7e:
d8:38:8a:90:5a:bf:ad:55:c1:b3:34:a3:0e:da:f5:b1:1d:f7:
15:85:21:0d:9c:99:56:0e:c7:08:db:5e:b4:af:f2:d9:0a:7d:
77:44:5a:0b:8f:82:0b:5b:aa:2b:8e:a9:b7:7a:55:72:1e:d5:
0f:b6:5d:bb:e1:7c:2c:cf:5d:25:6a:39:19:40:8e:60:cf:2f:
ae:0f:90:37:34:86:b5:5f:32:63:44:5b:c6:c5:f8:d1:18:7b:
3f:8c:2c:e2:27:6e:a7:ab:2d:6c:62:f8:d6:26:5d:20:59:4f:
c4:71:88:44:d5:80:b0:25:15:4c:2f:66:98:ee:c6:ed:b7:ca:
74:57:8b:f7:49:69:97:70:c8:a4:72:3e:bc:ea:c9:fd:5c:62:
31:7f:aa:65:87:75:fa:05:a7:54:fc:a0:44:f4:f7:d9:bf:9d:
f5:00:11:e5:e8:70:32:64:56:73:78:3a:57:b1:c3:c3:43:9c:
8f:30:fe:8d:78:9a:ff:42:d9:5a:34:7c:a1:e5:00:04:b9:dd:
03:c1:86:96:29:bb:6c:ba:2e:c2:75:a0:90:0d:3e:87:6c:a7:
02:53:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:11 2026 by rpki-client