Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: XIKM6ronLuvnSIU7ywJoJNjX+nVtAi4SDheNNEo/Fvk=
Subject key identifier: F9:FE:B8:5A:29:79:90:D3:D2:70:F8:32:81:96:83:FB:86:9A:D2:95
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019D9C6376014F16E99ED17A138E1F03303F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 023F
Signing time: Fri 17 Apr 2026 17:00:57 +0000
Manifest this update: Fri 17 Apr 2026 17:00:57 +0000
Manifest next update: Sat 18 Apr 2026 17:00:57 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: C2GC+qFdLrWwaR0jYjo5EW/KrGTHo3WC5lA8oO31C5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:76:01:4f:16:e9:9e:d1:7a:13:8e:1f:03:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Apr 17 17:00:57 2026 GMT
Not After : Apr 18 17:00:57 2026 GMT
Subject: CN=f9feb85a297990d3d270f832819683fb869ad295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:8e:13:c0:fc:87:e4:2f:00:ce:54:5f:d5:
f5:d9:4a:2f:7d:d7:ba:fe:be:24:d4:89:8c:79:8d:
5e:b4:44:04:bb:3a:18:17:4e:f2:4e:9d:7a:0e:bf:
40:f4:ce:86:58:75:31:e7:e3:d4:8c:ab:bc:63:79:
32:94:12:2f:4f:83:9b:cd:9c:75:7b:c3:84:25:94:
cf:19:31:d8:25:70:23:ab:b8:9d:3e:89:26:8b:6a:
70:26:96:6a:ad:cc:97:d7:ee:4c:5f:cf:17:12:f3:
a2:33:9e:c3:cb:b0:f3:2f:01:43:6d:ab:2d:73:2f:
05:9a:c9:5f:69:18:7d:28:34:86:38:5a:68:98:bd:
7a:0b:8f:16:f9:e9:56:8a:3c:2a:80:48:fe:83:97:
6d:e7:76:ad:5d:ad:ab:87:8a:26:02:53:4e:0e:62:
e3:e6:58:d2:f2:b5:51:fe:d5:8b:7a:1e:14:0f:1d:
c5:ac:ce:83:06:6c:8f:c9:6b:63:1f:48:de:03:b6:
1c:45:7a:f2:74:e1:9e:b2:e4:6c:de:ee:14:02:5a:
cf:4a:a3:4c:84:64:82:88:00:80:f2:da:b4:92:02:
32:b5:a5:20:f8:f5:d9:43:45:06:3e:ec:22:18:bf:
88:e6:1d:21:d9:f9:5f:eb:45:ec:75:22:83:a6:82:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:B8:5A:29:79:90:D3:D2:70:F8:32:81:96:83:FB:86:9A:D2:95
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:a2:87:2d:31:3a:e3:d2:8f:4c:54:7b:5c:33:25:62:ac:
cd:70:c1:65:75:0c:d4:5f:04:28:06:cd:a3:6a:bd:1a:34:d7:
6a:3f:87:3b:96:38:d2:8e:97:50:f4:70:20:f5:96:f9:9e:da:
83:fa:cd:37:ae:3e:bf:50:b4:d1:cc:7e:f5:ec:9b:2a:be:6d:
0d:27:7c:72:c7:57:03:f0:de:ff:a6:77:ec:75:94:e9:ac:e7:
4c:58:67:78:6a:e3:c8:62:2e:29:b9:0b:ba:b2:14:f9:88:fa:
c6:24:48:3a:f1:1e:e7:ec:c9:4a:c4:79:b7:f8:7a:1e:85:70:
9d:33:c2:dc:5f:cd:59:34:62:17:9a:5b:0c:17:64:ec:e0:d7:
b9:86:3e:8d:73:a0:83:ba:9a:ae:43:2f:31:dd:43:7f:90:f5:
32:c2:b3:e8:32:9c:47:6f:da:e7:7b:f8:13:2c:f5:fe:0c:8b:
c0:76:3e:76:b0:52:dc:64:3e:08:b7:7e:09:f6:df:c8:33:60:
e9:ac:76:18:01:b9:0a:c6:08:92:46:4e:64:31:0c:93:45:aa:
7e:02:8f:33:5f:79:cb:09:d0:4c:c1:a8:96:58:4f:fa:52:30:
61:66:cf:cb:e9:3f:a0:9e:a5:18:1a:78:35:ee:60:dc:ba:f3:
54:4d:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:27:34 2026 by rpki-client