Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: JynVycjYFBKEg77NbjwnyjH2LuiDpF6TBBHxYZJ6Foc=
Subject key identifier: 15:67:9B:87:CD:31:D4:D0:56:5A:47:99:26:0E:35:47:A6:3C:CE:F8
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019D9AABF089F923F6D6B006F047E7CD2CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0FD6
Signing time: Fri 17 Apr 2026 09:00:52 +0000
Manifest this update: Fri 17 Apr 2026 09:00:52 +0000
Manifest next update: Sat 18 Apr 2026 09:00:52 +0000
Files and hashes: 1: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: aaRw8llC0owULVeieS+xkLQdDOYQj0un4ApGI89cJgg=)
2: oBjKq8D7YtanGgUooThZNZJBCfY.roa (hash: Q8Mc9EtbMAXUED7OkrFkGjXFG36weOz2FmafoAYIkKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f0:89:f9:23:f6:d6:b0:06:f0:47:e7:cd:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Apr 17 09:00:52 2026 GMT
Not After : Apr 18 09:00:52 2026 GMT
Subject: CN=15679b87cd31d4d0565a4799260e3547a63ccef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:69:1b:70:d1:69:27:9f:7d:07:2a:7a:51:
55:ff:70:ef:d3:72:67:47:a8:cc:a4:86:81:72:6e:
1e:0d:d8:7c:53:c9:3b:5e:dd:60:5e:13:0f:af:fc:
43:e4:ee:d7:d4:3d:f1:b2:45:60:9a:f4:a6:a6:04:
e1:71:eb:b7:94:32:f6:22:2f:ba:2d:a7:b0:b7:c1:
e5:8d:ad:a5:aa:c8:82:e2:04:09:fc:ce:1c:e7:7a:
b2:3a:fe:5e:e8:7d:5c:24:5c:cc:8a:4a:72:18:1b:
06:b1:35:19:a1:a1:af:e3:4f:c7:0e:2a:53:b5:81:
08:7c:b2:92:39:bf:77:b2:0e:7b:9a:44:cb:7f:58:
ca:aa:9f:26:51:2a:63:4a:b8:e8:81:36:b7:77:42:
e1:d6:15:b6:ee:61:ea:d6:29:22:88:ef:ae:cb:05:
cb:50:2f:7c:57:75:3b:cb:57:15:8e:d9:11:b0:3d:
02:af:a4:46:c3:7e:d3:c4:81:23:d5:3b:43:ca:10:
70:2a:fa:3b:12:a2:1b:ed:73:b6:ac:60:4b:6f:3d:
10:62:dd:3c:9d:94:12:a3:16:8f:d1:bf:2c:0b:bb:
e1:5d:29:92:c3:73:53:76:c7:0f:50:b6:09:f7:67:
18:c7:a6:01:18:62:1a:b5:14:41:90:17:0d:63:ad:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:9B:87:CD:31:D4:D0:56:5A:47:99:26:0E:35:47:A6:3C:CE:F8
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1f:b1:e3:75:6b:f1:46:44:e0:9a:d1:4f:50:85:d2:06:ce:
7b:53:c3:b5:8e:44:26:fc:e7:86:fb:18:a1:05:df:e2:74:8c:
28:3c:7b:3f:13:8f:6b:fd:48:76:6a:24:3f:5e:bb:1c:05:cb:
fb:9d:7a:ae:09:a0:11:6a:0c:12:99:78:f9:4a:6e:2b:97:62:
2a:23:48:ab:1a:22:9a:5a:12:ef:62:f4:ec:71:71:b9:20:56:
eb:ff:69:b0:15:52:ad:3b:4e:f9:a5:f8:de:46:81:f6:d2:1f:
58:1d:39:89:95:4a:8d:98:ba:c5:c1:9a:5b:51:e2:7a:bc:58:
ee:65:fe:d4:d9:53:9e:d6:c8:77:c4:6e:77:31:db:9b:e9:9d:
2d:61:6f:fe:16:1e:d1:b7:39:d7:ad:91:4b:98:c8:31:5f:23:
a5:81:22:c9:aa:41:10:f7:ef:65:53:35:22:c8:88:9f:9e:d8:
1f:52:ec:0b:d4:86:31:ae:8a:11:07:0d:8d:fe:f3:a4:2c:f6:
ab:c9:df:bb:4b:00:82:7b:5f:0d:5a:c6:f2:76:90:e2:ac:c5:
ac:07:41:9e:af:aa:1f:9e:62:16:33:75:61:46:a4:c3:66:f1:
b9:31:5e:a2:c3:e2:04:e4:2e:81:5e:8d:0f:bc:c6:ff:26:2f:
53:09:83:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq/CJ+SP21rAG8EfnzSy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1
MTFjNzAwHhcNMjYwNDE3MDkwMDUyWhcNMjYwNDE4MDkwMDUyWjAzMTEwLwYDVQQD
EygxNTY3OWI4N2NkMzFkNGQwNTY1YTQ3OTkyNjBlMzU0N2E2M2NjZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnBpG3DRaSeffQcqelFV/3Dv03Jn
R6jMpIaBcm4eDdh8U8k7Xt1gXhMPr/xD5O7X1D3xskVgmvSmpgThceu3lDL2Ii+6
Laewt8Hlja2lqsiC4gQJ/M4c53qyOv5e6H1cJFzMikpyGBsGsTUZoaGv40/HDipT
tYEIfLKSOb93sg57mkTLf1jKqp8mUSpjSrjogTa3d0Lh1hW27mHq1ikiiO+uywXL
UC98V3U7y1cVjtkRsD0Cr6RGw37TxIEj1TtDyhBwKvo7EqIb7XO2rGBLbz0QYt08
nZQSoxaP0b8sC7vhXSmSw3NTdscPULYJ92cYx6YBGGIatRRBkBcNY63akQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVnm4fNMdTQVlpHmSYONUemPM74MB8GA1UdIwQY
MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt
OTE2NTFkOWI4NTZhLzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh
LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtR+x43Vr
8UZE4JrRT1CF0gbOe1PDtY5EJvznhvsYoQXf4nSMKDx7PxOPa/1IdmokP167HAXL
+516rgmgEWoMEpl4+UpuK5diKiNIqxoimloS72L07HFxuSBW6/9psBVSrTtO+aX4
3kaB9tIfWB05iZVKjZi6xcGaW1HierxY7mX+1NlTntbId8RudzHbm+mdLWFv/hYe
0bc5162RS5jIMV8jpYEiyapBEPfvZVM1IsiIn57YH1LsC9SGMa6KEQcNjf7zpCz2
q8nfu0sAgntfDVrG8naQ4qzFrAdBnq+qH55iFjN1YUakw2bxuTFeosPiBOQugV6N
D7zG/yYvUwmDmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:27 2026 by rpki-client