Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: jljn+850d6Nwf0jnuo7g55/UWj4RfVV2ZHpcc1dFPrE=
Subject key identifier: FA:88:5A:81:EB:DF:8F:39:81:E2:A4:D3:1D:86:35:C7:12:9C:D9:F6
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019D9AAC3B3B2B507211804AD6334B2BA91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 119B
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: gI99TJWyf6GbE6eCN+IS9qxf9W2FkiUbf4T/RA9Li/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3b:3b:2b:50:72:11:80:4a:d6:33:4b:2b:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=fa885a81ebdf8f3981e2a4d31d8635c7129cd9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:f0:71:c6:37:fa:17:ed:55:27:23:43:9f:
52:f4:5b:f5:33:1f:da:95:68:17:06:e2:2f:db:39:
3d:56:08:33:1b:21:3a:cf:e9:6f:3a:36:73:28:42:
0a:29:77:e6:76:af:0a:5f:45:56:1f:2e:56:54:a2:
d0:58:0c:cf:ab:5e:7c:2b:2f:25:f7:a3:2b:4d:a2:
0a:ad:f5:69:8b:fa:ad:38:81:3d:86:ec:4e:e9:5b:
ab:f6:22:2b:00:3b:d2:f5:81:f7:10:a2:91:47:6a:
dc:c1:a1:57:92:fd:53:98:90:9b:78:1a:62:a0:1a:
8d:84:2a:46:2e:d5:89:b0:9f:fd:af:45:7b:e7:0c:
2c:a1:fc:10:a8:c4:c5:65:29:44:44:8c:b4:26:30:
e4:72:d3:98:55:74:81:3b:8e:9a:26:a0:62:8f:ca:
49:3a:d9:8e:fc:68:53:1a:76:20:14:a0:d0:b2:77:
e9:af:85:95:55:70:53:6b:6c:84:ff:8a:0f:e0:c2:
bd:d2:1a:92:7b:47:8c:ce:51:76:99:3b:de:49:50:
15:c9:f6:df:57:ca:c0:37:fd:f1:1e:43:fb:ab:cf:
22:9c:f4:78:7a:d6:7f:c3:71:b5:54:6c:30:e7:8b:
25:24:42:19:f8:6f:f5:fa:91:3d:74:b4:ee:35:29:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:88:5A:81:EB:DF:8F:39:81:E2:A4:D3:1D:86:35:C7:12:9C:D9:F6
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:df:e2:20:87:71:27:54:12:1e:47:87:82:47:37:d2:c1:
be:d8:5e:a1:f6:84:19:d8:35:ff:6f:1e:17:bc:f0:c3:2e:e9:
e5:4c:95:8e:cf:d4:d2:73:24:2d:6a:5e:59:a9:ea:07:2f:35:
6e:c6:1d:02:75:88:c5:9d:04:4a:2e:00:a7:36:c2:db:6f:aa:
c8:7b:45:85:96:0c:11:71:83:3d:15:a8:fd:14:a5:36:74:b9:
21:78:70:08:17:dc:a8:d3:ec:1a:fd:cc:01:5a:56:4e:ce:d1:
3d:4e:7a:64:e3:e8:35:f5:a6:36:da:5b:74:cc:c0:ba:f1:03:
ed:3d:d5:6d:2a:56:4d:cc:d9:95:fc:5d:6b:98:5f:c5:75:17:
0a:1b:88:52:e5:bc:fb:2c:26:60:75:3d:fd:c9:a2:e2:24:a3:
21:af:8b:e2:84:73:45:1e:32:82:f3:37:e3:0f:9e:4f:8c:8c:
63:a2:ca:96:e6:02:95:36:38:a1:18:9f:f5:95:10:1a:41:6a:
03:c2:0b:fd:8e:76:f5:fd:76:66:5e:37:af:5f:d3:eb:3c:16:
15:8e:09:8d:1d:92:62:cf:ce:91:89:24:cf:bc:a0:11:20:02:
0b:4d:e1:1a:d0:18:ba:be:6a:e2:a7:1e:2d:03:be:6e:30:f2:
a5:fb:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:34 2026 by rpki-client