Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: x0AziR38ojyV17mZe0XbvLT/yra/G+00X4J0UpqlAGM=
Subject key identifier: 75:C0:8F:BC:3F:26:EB:3B:D7:6C:39:97:B6:72:5A:87:A9:8A:7A:C2
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 019D9B514DC4663E514A3FED90541D2FC54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 0709
Signing time: Fri 17 Apr 2026 12:01:29 +0000
Manifest this update: Fri 17 Apr 2026 12:01:29 +0000
Manifest next update: Sat 18 Apr 2026 12:01:29 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: 2RCOtGSz9qa8WQMv65m3eETrNebIuGecaOknDSkwvSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:4d:c4:66:3e:51:4a:3f:ed:90:54:1d:2f:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Apr 17 12:01:29 2026 GMT
Not After : Apr 18 12:01:29 2026 GMT
Subject: CN=75c08fbc3f26eb3bd76c3997b6725a87a98a7ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:52:e9:13:7f:d9:6d:2b:36:84:2d:7a:fa:
68:2c:2d:2d:d7:53:20:50:41:0b:c7:e2:92:99:29:
08:7f:e6:5a:27:d7:b8:23:a6:f5:c0:09:8d:c5:0b:
7e:b1:57:d9:73:c0:67:8c:6e:c8:2e:f2:b8:18:6b:
56:e2:2b:70:75:ad:3d:bf:bf:33:1b:65:3e:95:dd:
6c:4b:4e:44:85:e8:1b:b4:9f:2e:88:a2:9a:cf:28:
0f:84:2b:23:7a:92:c6:64:d2:e2:7e:07:cd:a6:bf:
14:b7:16:88:72:a5:d3:6b:10:91:72:8a:e4:14:ed:
db:e6:46:d7:c0:3d:24:8b:81:a5:6c:24:8d:a3:a5:
82:ff:3e:03:42:ae:44:45:0f:d5:79:9f:4f:05:f7:
ec:e0:57:fd:71:97:d7:51:eb:b0:66:ab:91:6d:a8:
6a:3b:99:3b:ec:7c:9d:64:2d:74:1d:0a:14:19:4c:
a7:a7:04:3e:a8:96:06:9c:33:3c:28:a2:25:b4:11:
c0:d8:f6:b1:85:62:fc:7b:d0:6f:8f:34:66:60:63:
40:ee:ee:0f:4c:d5:a9:9f:12:2f:09:5c:2c:8f:b7:
1c:17:f4:f1:70:66:ca:1c:52:21:18:b7:35:64:c4:
71:c3:46:fd:dc:30:05:68:83:4e:1a:13:84:3d:8e:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:8F:BC:3F:26:EB:3B:D7:6C:39:97:B6:72:5A:87:A9:8A:7A:C2
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:c8:29:0d:46:15:32:ef:b3:bc:07:33:39:98:66:a6:c6:
89:af:46:0d:76:dc:3c:8e:64:f7:94:01:ac:2d:ec:22:e2:fb:
c4:2f:04:46:5b:32:70:e2:a5:b5:cc:52:0f:c1:75:6a:82:aa:
3c:3a:10:15:07:7c:ed:fd:b6:da:5e:5c:76:1a:13:25:39:28:
e7:6a:5d:b6:dc:bb:e0:5a:2f:8f:f8:12:c3:1b:70:95:65:73:
50:c3:88:1a:42:7a:84:92:97:de:c3:5a:1d:6d:b0:7b:08:db:
ac:bc:6d:13:5c:f7:28:e4:a5:3e:81:b9:87:a8:47:28:85:73:
a5:bb:e3:b5:ef:8b:f8:a4:da:61:e6:24:fd:40:5a:fe:97:da:
32:b7:0b:f7:26:e0:7d:76:5e:ce:07:cb:ef:7d:d2:d6:6e:34:
6e:00:5b:3e:0f:3e:56:ae:98:ff:6d:7c:db:59:cb:8d:c6:19:
b5:11:e9:29:52:48:c0:c7:b8:d0:f5:47:3e:a6:31:83:b0:55:
6e:5d:14:41:e1:1e:52:df:70:b3:e9:04:c1:b0:b1:f4:a2:43:
b9:46:ce:58:05:ca:bd:bc:1d:2d:09:c0:45:15:45:ad:9a:3e:
ad:87:f0:4e:8c:59:09:ba:03:47:2c:51:71:bb:e8:89:c4:65:
65:76:50:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUU3EZj5RSj/tkFQdL8VLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTVmZjdlN2UxYWFmMzhlNTk5NjlkNjA5ODA0YTNiM2Yw
NWJlODgwHhcNMjYwNDE3MTIwMTI5WhcNMjYwNDE4MTIwMTI5WjAzMTEwLwYDVQQD
Eyg3NWMwOGZiYzNmMjZlYjNiZDc2YzM5OTdiNjcyNWE4N2E5OGE3YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4tS6RN/2W0rNoQtevpoLC0t11Mg
UEELx+KSmSkIf+ZaJ9e4I6b1wAmNxQt+sVfZc8BnjG7ILvK4GGtW4itwda09v78z
G2U+ld1sS05EhegbtJ8uiKKazygPhCsjepLGZNLifgfNpr8UtxaIcqXTaxCRcork
FO3b5kbXwD0ki4GlbCSNo6WC/z4DQq5ERQ/VeZ9PBffs4Ff9cZfXUeuwZquRbahq
O5k77HydZC10HQoUGUynpwQ+qJYGnDM8KKIltBHA2PaxhWL8e9BvjzRmYGNA7u4P
TNWpnxIvCVwsj7ccF/TxcGbKHFIhGLc1ZMRxw0b93DAFaINOGhOEPY4RFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXAj7w/Jus712w5l7ZyWoepinrCMB8GA1UdIwQY
MBaAFBal/35+Gq845Zlp1gmASjs/Bb6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2It
NjZkYWRlYTI5YzRhLzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2ItNjZkYWRlYTI5YzRh
LzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfPIKQ1G
FTLvs7wHMzmYZqbGia9GDXbcPI5k95QBrC3sIuL7xC8ERlsycOKltcxSD8F1aoKq
PDoQFQd87f222l5cdhoTJTko52pdtty74Fovj/gSwxtwlWVzUMOIGkJ6hJKX3sNa
HW2wewjbrLxtE1z3KOSlPoG5h6hHKIVzpbvjte+L+KTaYeYk/UBa/pfaMrcL9ybg
fXZezgfL733S1m40bgBbPg8+Vq6Y/21821nLjcYZtRHpKVJIwMe40PVHPqYxg7BV
bl0UQeEeUt9ws+kEwbCx9KJDuUbOWAXKvbwdLQnARRVFrZo+rYfwToxZCboDRyxR
cbvoicRlZXZQUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:11 2026 by rpki-client