Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: OiIzEHYU1nlWsnALcHODVD/Y9vdZfdsluW3b69F2s6g=
Subject key identifier: 12:C5:A3:29:A5:A0:80:B5:6D:BC:30:00:4F:DC:EB:6C:4A:31:EA:44
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 019D9C62FAF83658B244145E0EB829206657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 05A9
Signing time: Fri 17 Apr 2026 17:00:25 +0000
Manifest this update: Fri 17 Apr 2026 17:00:25 +0000
Manifest next update: Sat 18 Apr 2026 17:00:25 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: evRoAcJbqiGMRtu8YOJE2HRRye5iVUyjzafH5PnLei8=)
2: r49ZEDE6WWxNrXEhESIxvZobJt4.roa (hash: DK7S0gOLstB9fTfPHhimalpV0TB0R2sQM6XVh6ZJuu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:fa:f8:36:58:b2:44:14:5e:0e:b8:29:20:66:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Apr 17 17:00:25 2026 GMT
Not After : Apr 18 17:00:25 2026 GMT
Subject: CN=12c5a329a5a080b56dbc30004fdceb6c4a31ea44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:44:b4:07:1e:bc:2a:db:e9:58:6d:d2:da:
f3:a8:99:b2:78:7a:53:37:6c:65:ba:f7:92:88:09:
0f:8b:c3:a4:15:98:de:8d:26:2d:e5:54:48:60:9e:
8d:4e:27:bf:61:a8:22:48:34:ea:05:0b:df:11:a5:
ea:d9:aa:71:5e:ce:25:70:8d:47:99:78:db:46:3c:
19:82:f2:88:a5:7c:81:2d:3f:83:84:40:ce:1a:cf:
13:0b:dc:2e:47:08:b0:9b:ce:04:a2:ca:f6:e1:19:
03:d6:74:dd:81:ef:ef:af:ef:ce:18:15:86:1e:f2:
f5:20:53:f0:dc:1b:92:12:41:27:83:87:7a:93:4e:
d4:fd:3b:71:15:53:b1:a4:04:29:ad:5b:77:a4:0d:
4c:77:f3:53:47:e5:ca:74:3e:7d:26:83:5d:d1:5f:
9e:f5:94:0d:6e:a4:20:26:62:09:18:4b:14:e0:35:
19:bf:75:1b:d6:45:3c:da:4a:79:0b:c3:d7:ee:be:
4e:f4:78:cc:94:a9:de:a9:16:d7:03:6b:3f:38:7e:
fa:33:2e:4e:1c:dc:49:4c:2b:ee:49:2f:a1:d3:63:
19:23:a5:8a:34:87:da:91:fb:90:ef:a8:ce:8e:d4:
f6:14:39:95:ac:90:95:ff:00:3f:d8:e5:61:84:12:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:A3:29:A5:A0:80:B5:6D:BC:30:00:4F:DC:EB:6C:4A:31:EA:44
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0d:d4:c2:ae:c1:af:b6:8c:14:fe:86:ef:91:b4:17:c9:bc:
d6:b0:d7:85:77:ef:55:ba:77:90:10:0d:47:9c:06:d5:7b:1a:
a7:4a:b9:5c:02:1c:8e:6d:99:47:d6:ff:9a:4e:c3:74:77:c5:
59:e5:ea:65:dd:ca:f3:41:66:ff:55:d5:ce:ac:ec:5f:7d:76:
f9:4b:ca:53:2d:81:a5:31:45:16:c3:8c:ea:35:f2:17:c5:65:
fa:f7:ef:4b:65:1f:ae:b6:77:55:1f:32:ca:a5:95:9e:77:ef:
fc:6d:b4:6d:d2:d8:f3:e2:b0:d4:e6:73:0d:59:81:4b:b3:f3:
c0:64:ad:c2:8a:5d:92:ca:ef:68:e9:33:10:99:51:6b:bc:2d:
53:35:72:91:49:4b:8a:ba:1b:20:2a:b1:57:86:53:58:85:82:
d4:f4:46:54:94:bb:8a:2f:1c:4c:9d:81:b2:12:39:01:42:90:
08:6d:1f:05:35:e7:eb:3f:60:d2:48:06:af:dd:a0:8f:f9:9d:
0d:a6:aa:04:03:59:9a:c8:15:1a:3b:3d:2b:c3:63:82:d9:9f:
aa:ca:24:e6:86:c8:0c:6a:b0:57:e5:26:d5:51:5c:51:48:07:
9b:3e:68:af:00:83:11:c2:6a:96:9d:41:0d:2a:ec:cd:b9:8a:
70:68:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:55 2026 by rpki-client