
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: 0bnHrH0GBUjp1Gz8VS2+ReMZiEjPmYtFcq6gUqm34A0=
Subject key identifier: 3E:28:B4:91:A9:E0:C8:AD:89:0F:8B:A3:C7:95:D5:F4:5F:AF:AF:04
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 019D98186311721F2EE916B741B3DBDF2D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 18D2
Signing time: Thu 16 Apr 2026 21:00:28 +0000
Manifest this update: Thu 16 Apr 2026 21:00:28 +0000
Manifest next update: Fri 17 Apr 2026 21:00:28 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: BFe8+Y1K3Xirko8b9+SjFwokHnS6656kXkva6tneFs0=)
2: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (hash: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:63:11:72:1f:2e:e9:16:b7:41:b3:db:df:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Apr 16 21:00:28 2026 GMT
Not After : Apr 17 21:00:28 2026 GMT
Subject: CN=3e28b491a9e0c8ad890f8ba3c795d5f45fafaf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:62:e5:61:8c:75:63:b2:fa:19:23:b0:fb:
f4:9d:4a:a7:bf:64:a2:43:28:e5:80:a8:1b:48:c9:
a4:ef:2c:0c:72:c5:ad:21:b9:d5:e0:f8:6b:36:1c:
8d:bc:1c:19:27:18:97:e6:82:70:9e:1f:ee:f5:55:
a5:8f:85:e6:e3:5c:9a:ce:ae:06:d5:be:38:12:cd:
2d:c3:9b:5a:63:7a:dd:fb:b8:ec:a7:97:5d:ac:69:
6d:29:a2:9b:9a:42:36:2b:bc:3a:2e:82:82:39:a8:
48:32:9a:cf:9c:c0:1c:08:9d:94:ba:9b:64:c8:74:
e0:80:84:e7:c6:fd:50:0b:46:84:76:f4:60:de:d5:
e9:11:f2:6d:ed:4a:be:50:4b:c9:8a:27:9c:4e:f9:
73:0f:38:2a:d4:1c:4d:b0:55:d8:6a:48:09:4c:02:
d4:1d:4d:19:64:95:a5:aa:3a:3d:73:b9:e9:39:e1:
9c:36:d8:9a:0b:01:32:2f:3f:d3:9f:24:f0:15:77:
cb:a0:bf:e1:d1:9c:e8:0b:4b:97:51:84:c1:7d:a5:
65:98:73:e1:93:01:5e:29:f7:67:8e:fa:17:85:97:
90:72:3a:79:83:6c:04:9e:a1:e3:ff:29:2f:f2:c8:
6f:10:77:72:34:2a:d6:48:de:8c:19:c2:23:07:f8:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:B4:91:A9:E0:C8:AD:89:0F:8B:A3:C7:95:D5:F4:5F:AF:AF:04
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:55:9e:26:59:6d:d7:b7:37:28:e2:b3:03:c5:c0:e1:79:
85:f9:74:9f:5c:a1:83:c9:38:27:a3:d5:05:bf:ce:33:af:6b:
26:cd:89:cc:d9:ff:c1:87:3e:87:d3:be:67:6e:86:2a:56:ef:
27:e0:89:69:23:c9:a2:75:a6:be:ef:0a:f8:29:6f:93:0c:ef:
95:5c:6f:07:42:09:de:f9:7c:b4:07:db:15:30:54:8f:b0:63:
87:10:96:40:b6:fb:82:43:89:e5:5b:66:cc:21:0b:43:dc:00:
dd:9e:92:9c:96:e4:bd:9b:77:d9:11:7f:38:50:0b:29:df:e1:
58:b9:a0:59:5d:6d:6f:07:6c:8c:55:86:3a:49:a9:80:59:5c:
f7:cf:a9:12:01:8b:40:67:84:29:70:56:60:b0:f6:6b:70:19:
af:14:04:4a:12:18:f9:2c:84:40:e8:e4:cb:15:ed:6b:9d:5c:
30:d1:c0:b6:0b:0d:5a:8c:63:c6:34:42:f3:6f:81:1b:aa:70:
7c:86:d8:97:59:db:f9:05:eb:4d:98:fe:51:66:e6:fd:c7:ec:
82:99:33:73:1e:f2:c2:db:08:16:d0:35:17:88:b6:2d:65:f8:
eb:47:ed:e8:68:21:81:f7:a2:4e:8a:98:00:90:bd:f6:c0:57:
94:d2:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:13 2026 by rpki-client