
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: mWhSAW0hcfY0J6fKp+RVQR8O4iFHb9wHWfQC75nhuy0=
Subject key identifier: F8:AF:BE:FA:2A:10:34:C7:DF:2E:E0:EF:40:F7:FB:17:65:E2:ED:7D
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 019D9818DE96F2A5C01C7624E5EBB1599AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 1334
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: M-YtErUxsBexOppW_oy6TWvdZT0.roa (hash: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: /oENNjNVeCPbXmDt0RzUyFqbxughsSy8n8X7ERpwKCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:de:96:f2:a5:c0:1c:76:24:e5:eb:b1:59:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=f8afbefa2a1034c7df2ee0ef40f7fb1765e2ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:13:85:38:d2:a8:bf:df:0e:78:10:d8:c9:
49:32:00:24:f0:a6:14:3e:6b:8e:4c:ea:ec:0e:88:
4b:02:ff:23:1c:c8:67:90:0d:19:85:5d:80:8b:53:
21:d3:3c:7d:ab:ad:01:80:1a:8c:16:0d:6c:ae:5f:
9c:95:6c:d0:39:71:ab:ab:cb:ae:93:2d:7f:23:0b:
f6:46:e6:5a:ef:89:7f:83:9c:bc:f7:06:b0:df:41:
d3:31:00:03:b1:21:d2:89:b8:4c:47:6d:1a:fd:1f:
41:84:42:37:0d:3d:53:7a:80:85:46:80:78:1d:ec:
21:d1:8e:39:f8:96:a8:7d:c6:18:89:52:d4:ac:85:
7b:f9:f6:c7:04:69:5e:53:b0:a1:b2:8a:ee:68:b8:
28:1d:69:b0:cf:8b:92:2f:28:ad:0f:26:da:42:dc:
02:92:f6:d9:57:cb:a1:24:75:b4:71:1b:ff:ad:8c:
25:76:e5:78:77:b8:ba:ea:b6:de:bd:bd:2e:2b:06:
89:64:22:3a:9f:bb:90:a1:48:2b:91:87:ac:e5:e1:
06:11:38:20:92:c9:10:66:a9:d1:5d:e8:25:ee:23:
af:b0:1c:04:8c:92:bb:95:55:8d:33:fb:af:ad:85:
5d:a5:47:44:af:a5:d9:8e:7f:9e:89:d1:65:72:80:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:BE:FA:2A:10:34:C7:DF:2E:E0:EF:40:F7:FB:17:65:E2:ED:7D
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:55:86:dd:c0:28:bf:aa:09:42:26:f8:a1:c6:fc:e7:be:
da:7e:5c:39:14:8c:2d:8d:1e:97:f2:c0:21:1d:fa:59:e0:00:
eb:5f:1d:d8:b0:71:58:11:e5:9b:d0:23:8c:02:27:9b:f8:2d:
40:02:2a:bb:ac:d0:25:d5:b3:b1:c4:42:54:b0:fd:21:8a:22:
b9:d9:9c:b4:7f:10:74:6a:dc:d3:0f:6c:89:c5:6c:f4:0c:2f:
ff:98:12:f1:3e:bf:e7:7b:26:f1:84:d4:53:b9:5c:3c:da:c1:
c6:b3:1d:4f:bc:9c:78:c7:2f:a6:1f:d8:0e:ab:94:d2:cd:77:
36:8d:8d:40:b7:59:f1:00:57:6f:ae:90:35:2e:e7:4d:fa:0f:
e6:c4:93:88:b7:2c:91:ec:7e:9e:51:67:09:bf:8e:7a:51:59:
cb:a3:a9:7c:e2:d7:9f:87:ac:c7:b0:f9:f2:2b:34:27:82:de:
c2:b6:83:1f:20:f3:65:be:98:60:2d:fb:30:85:d7:3e:72:0c:
dd:e6:01:df:31:05:63:85:1b:18:ec:4e:c7:24:12:85:99:53:
75:9b:68:a0:d3:50:7e:cb:0a:dc:fb:d9:a6:38:b2:cd:3c:b4:
2c:69:d5:3b:0f:d5:d5:86:7d:98:79:4f:9d:12:fc:51:ab:cc:
dd:41:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:05 2026 by rpki-client