Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: BndqvM+qNtSDVO9KT7smicRL9zllB4dAgA8PZXPSrF8=
Subject key identifier: 35:04:2A:20:EE:29:F8:34:4C:A1:5B:D2:FB:F2:A7:E1:8B:A9:58:53
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019D9D07F86A15E23BABCAB4AC3FB0DACE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 20:00:38 +0000
Manifest this update: Fri 17 Apr 2026 20:00:38 +0000
Manifest next update: Sat 18 Apr 2026 20:00:38 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: K6ART4SWPBXcuC1xIU75flrVTzGPsmB0cVXxSJXtkY8=)
2: Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa (hash: aIxNkhwpmyzmF/3GFcRmbZ6fKr+QG1YWTaNKfwYICV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:f8:6a:15:e2:3b:ab:ca:b4:ac:3f:b0:da:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Apr 17 20:00:38 2026 GMT
Not After : Apr 18 20:00:38 2026 GMT
Subject: CN=35042a20ee29f8344ca15bd2fbf2a7e18ba95853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:39:08:be:ae:55:90:1a:9d:a3:de:36:91:
c2:7c:1c:bb:b2:f2:83:22:86:f3:4d:10:3e:40:1e:
65:c3:33:fc:9c:4b:07:40:25:14:e6:44:b3:1c:00:
23:25:ed:0c:5f:7a:a8:c2:ee:dc:fe:e8:83:0f:53:
89:28:27:84:14:c1:1f:1b:62:19:6f:eb:33:18:e7:
8e:06:f5:e0:b1:ee:d9:61:d2:24:d9:9a:79:50:e0:
13:f2:f9:3e:50:f3:2e:a7:2d:8e:79:5f:c7:33:c4:
88:4c:3f:f8:9d:f0:53:bd:48:21:b0:5e:54:89:39:
ae:8b:4e:92:32:01:af:98:6a:fb:77:9b:b5:fa:d1:
6a:bb:ca:b9:c9:25:73:d9:46:54:dc:75:f7:79:4f:
c7:17:2e:40:1d:51:b0:2b:ed:4a:c1:f8:b8:fd:fb:
35:79:13:0c:70:c9:a2:b8:29:9d:2e:51:ef:fe:93:
3f:ba:b6:df:84:81:a0:80:31:03:71:a8:34:91:93:
2b:2d:92:a6:6a:b7:18:56:35:50:21:80:ac:41:02:
4e:b6:33:41:0a:e2:ac:ac:bb:33:d3:87:11:85:52:
65:75:bf:47:12:f7:69:d1:94:1f:5c:8b:9b:89:84:
f1:f4:04:ae:52:9e:b0:2d:bd:15:a8:18:60:6d:0e:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:2A:20:EE:29:F8:34:4C:A1:5B:D2:FB:F2:A7:E1:8B:A9:58:53
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:44:ad:b5:a1:98:60:19:76:bb:3c:c6:1e:e6:e8:fa:c2:
39:81:27:7a:28:51:2d:db:b2:99:fc:28:ae:4d:01:d9:39:1e:
cc:17:93:71:c0:a8:29:4e:70:12:04:e2:ed:d0:03:75:92:21:
26:45:7a:23:28:ed:3f:4e:e1:1a:10:d7:a3:51:bd:90:c2:52:
3e:7a:95:9c:35:0b:6f:28:e9:f6:e0:60:0f:7a:43:76:e2:1d:
cd:6a:61:62:74:3f:60:11:89:c4:ed:e4:5d:b3:d1:9a:32:40:
af:53:39:cd:b6:5e:94:25:87:e7:f8:94:15:1e:22:fe:21:53:
71:56:8b:b1:6f:c4:d3:25:27:58:83:a9:8f:52:34:37:53:0c:
b2:15:71:1c:df:b3:81:0f:84:6f:66:ae:99:b7:7f:98:a6:83:
eb:ea:34:d1:16:28:8f:be:a1:f7:35:3e:70:59:05:cd:bb:17:
c9:44:d1:f8:80:3b:2b:19:07:b3:36:93:2e:86:a5:e6:e4:ea:
0d:5b:9e:2b:2e:7f:6a:35:ac:e9:9a:74:dd:9e:99:ed:3d:95:
75:4b:0f:d8:90:c4:73:25:f3:82:b7:f2:68:54:2f:e0:8a:24:
9e:a3:56:6c:56:2c:ad:f9:4d:82:2b:13:46:59:1b:dc:b5:5f:
c9:b8:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:16 2026 by rpki-client