Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: DYerPT91Smyq1q27H4u7Z9Pe+xY8LJO0y1TeCp4lE5A=
Subject key identifier: 59:5D:CD:9B:DC:5F:84:C1:E3:4E:AD:00:6C:8C:F2:C8:1F:03:27:AE
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019D9A74E4B16D9B9B39A26BD533E18DA721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 1237
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: h6HbNbFjZezTXDG96EtgqCl07UR05+IbuseTr0Tqmx0=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e4:b1:6d:9b:9b:39:a2:6b:d5:33:e1:8d:a7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=595dcd9bdc5f84c1e34ead006c8cf2c81f0327ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:7c:0a:78:68:6d:52:52:ba:78:3d:ae:80:
96:b5:82:ed:44:11:60:e0:88:b7:0f:51:d8:21:9e:
6a:b8:01:e4:9d:54:1d:ab:65:15:60:d2:55:1c:0d:
6b:b5:72:4d:6b:e6:df:65:2c:60:de:48:94:5a:77:
c1:7b:37:1e:60:b2:a2:c5:4b:dc:c0:73:c5:2f:bf:
28:06:0c:b9:e1:5d:4f:49:60:4d:91:c2:16:de:12:
10:29:ce:44:04:18:46:4c:01:ff:57:62:62:1a:f8:
08:62:fe:ac:f3:a1:67:a5:33:73:18:c6:ad:7f:2b:
40:b7:eb:5d:c9:29:7c:9c:a3:11:48:cd:07:4f:28:
38:ee:12:32:be:00:f0:e7:c1:98:28:1d:95:d2:4c:
b2:26:8f:dd:28:6e:87:75:dc:a5:70:f3:8a:1b:66:
2a:02:87:b7:ee:c5:7e:47:19:84:9a:03:64:f4:ba:
c0:7f:ca:03:24:98:c9:92:0b:99:1b:e8:e4:bf:ac:
38:79:7c:16:13:e6:79:5c:28:b7:96:73:52:fa:e8:
93:ff:6e:fe:40:83:20:f5:63:55:22:4b:66:48:03:
4f:1e:8a:34:75:c1:54:58:cc:ff:05:5d:5b:96:73:
10:01:7e:79:58:2e:7e:9a:55:c5:f8:a2:26:af:bc:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:CD:9B:DC:5F:84:C1:E3:4E:AD:00:6C:8C:F2:C8:1F:03:27:AE
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:43:56:8b:01:6b:0d:df:31:01:b6:c7:1c:98:80:7e:b2:
08:13:bc:62:5b:44:10:aa:71:d6:ff:5a:76:d2:ab:e1:c3:5a:
6e:88:c1:c4:11:f3:23:fa:22:04:94:64:2f:11:e7:24:c7:2a:
8e:78:88:fd:74:80:68:65:ba:a4:ef:b3:6e:9c:bf:6f:7b:e9:
cb:45:51:ad:4b:68:ec:b6:4a:cd:a2:50:45:54:f2:1b:cb:e2:
50:bf:55:16:3e:71:fe:e1:74:03:10:71:c2:9a:65:84:6e:fb:
4a:92:08:4c:99:85:60:61:30:a5:da:2c:ba:ab:7b:ad:98:7d:
fd:c8:b8:c3:64:8e:4f:75:bc:bd:20:38:74:50:36:02:ab:98:
7d:8d:82:26:97:5a:f6:17:55:99:3b:f4:e6:b6:e4:9c:44:a0:
ae:73:19:60:ba:e4:ef:a2:e6:6f:f0:c2:aa:c1:7f:8b:1a:0b:
12:b0:cf:a6:fc:64:6b:34:46:4a:8c:38:0d:71:e1:9c:66:78:
44:f6:37:32:0b:57:7a:0b:27:0d:49:d4:ec:a5:87:54:4f:71:
f7:22:48:85:88:57:32:7d:85:37:b4:a0:39:b8:4c:7b:74:2a:
8e:a5:84:1e:cc:8c:4e:7d:e1:8c:ea:86:66:34:77:29:f8:c2:
c1:77:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:17 2026 by rpki-client