Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: OnbRGpkOIlPAMIzT8eO0s/VV3qpQMYS0qyZHv0Gu+mg=
Subject key identifier: DD:32:4C:F4:B1:AD:7C:47:5A:D6:0F:7D:EF:0B:2A:C0:44:04:14:E0
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019D9D3F12DD4F195D53B62E5675F6B42CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 21:00:49 +0000
Manifest this update: Fri 17 Apr 2026 21:00:49 +0000
Manifest next update: Sat 18 Apr 2026 21:00:49 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: Eqz8O5sObKsWWf9GC74Y/d8NmeUgABkHBwORlhbMxdg=)
2: R8GC6AMTH-Hxqzb_tHLOqN1Dy-4.roa (hash: sjpipeUhURBvNL7hQYR9otIU9f5zXHfGn1dPphfh+uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:12:dd:4f:19:5d:53:b6:2e:56:75:f6:b4:2c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Apr 17 21:00:49 2026 GMT
Not After : Apr 18 21:00:49 2026 GMT
Subject: CN=dd324cf4b1ad7c475ad60f7def0b2ac0440414e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:4f:54:40:7a:e9:9f:ff:3b:e7:b7:c2:9f:
c7:e5:97:fc:cd:9a:5e:e3:79:16:6b:1e:61:20:54:
37:be:07:d9:79:b1:75:85:e4:28:a3:a9:8e:05:92:
f4:1c:c4:a7:73:5c:5a:b6:84:f1:a4:31:68:88:0e:
26:71:9e:62:42:5e:23:2a:2f:48:79:3c:aa:14:ab:
39:5e:e9:19:ac:80:33:c4:d6:da:c6:a3:28:25:1f:
f1:ef:da:2d:79:27:c3:44:f4:0d:26:fb:45:be:d3:
4a:bb:87:0b:a3:da:fa:d7:bd:58:f8:31:b2:b7:da:
92:ec:a0:99:ba:5e:85:b3:6d:9e:fa:f9:55:07:b7:
3e:de:61:31:d7:64:ac:93:c8:7c:fc:53:f3:39:58:
91:cb:15:59:f2:2d:3f:6a:d3:bc:fd:e0:d9:84:27:
03:a8:8b:70:1c:7b:cd:4b:2c:c3:be:bd:ca:50:ee:
5c:5c:b8:f6:44:c0:b9:53:90:d2:3b:78:0a:15:77:
01:ab:17:e7:b1:50:f5:e9:0b:7b:90:93:80:3e:43:
0a:0a:67:fc:27:8d:e5:4e:e2:65:f2:04:1a:21:81:
0f:e1:4b:11:9f:42:47:03:de:cb:a6:71:a1:69:e2:
6a:fc:75:6d:9d:4b:31:a4:06:80:52:22:53:11:cc:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:4C:F4:B1:AD:7C:47:5A:D6:0F:7D:EF:0B:2A:C0:44:04:14:E0
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:18:7f:66:ec:36:26:0f:f5:f5:3e:e6:d0:91:54:9f:ce:f1:
53:a7:3a:3c:42:d7:a1:25:e2:f5:57:5b:2f:80:6b:f0:4a:1d:
c9:81:fe:b2:0b:a8:04:9a:d9:2d:ed:7a:a3:9a:d5:80:b0:b4:
d7:f9:6b:d4:c7:7f:dd:4c:5a:80:ed:f3:22:bf:c1:b6:cf:bf:
14:58:43:b8:88:24:e7:37:c9:f7:f4:be:da:d2:8a:70:50:43:
f8:f2:c0:92:67:a2:fa:be:ef:ab:59:d4:08:ba:80:fb:6d:7d:
b0:05:0f:b6:a2:db:43:3c:c1:36:c9:e4:58:0d:06:d3:fd:0f:
69:57:ed:6c:75:75:d2:5e:da:5f:86:bc:da:6f:6a:cc:c9:33:
dd:c3:a4:35:28:9f:c9:74:df:8b:b7:ce:f4:26:1f:1d:a3:b5:
6f:e9:72:08:28:8e:80:55:5f:87:50:2b:2b:cf:84:1a:67:cc:
ad:83:3b:b6:44:2c:d8:5d:f9:c9:ce:d3:00:30:c4:c7:ab:4f:
3e:50:db:5d:ac:3f:6e:e7:37:09:18:17:d1:3b:e6:39:23:e8:
5f:c5:9f:94:d5:ce:44:62:a1:49:dc:b5:46:03:00:70:17:ee:
6e:c0:56:ec:bf:77:76:e8:29:0c:6d:90:b1:38:f4:87:4d:d8:
2c:a5:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:53 2026 by rpki-client