Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: lNDgec9spuCS+HJMvXdBUWjvYDqB2DHeZzV6an+kX7s=
Subject key identifier: 63:41:48:58:29:25:84:49:1B:1E:79:D8:D5:18:12:59:F6:D9:85:3B
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 019D98BDA23A2903D757979E8751E0A48606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 066A
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: GRp3mYoKU5BQmEXbx1W436v/4ZgKKU76jJzKPdCRQck=)
2: IeSw-4bcio5RXnwbEa4KykMgwOY.roa (hash: OoWXczxt8RFsumILUeDSej8qKitlw3VHsPcYq7wi388=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a2:3a:29:03:d7:57:97:9e:87:51:e0:a4:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=63414858292584491b1e79d8d5181259f6d9853b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:5c:06:ef:18:e7:13:23:8c:5f:2a:89:1e:
8b:4f:46:d1:d1:f4:5e:76:77:6f:68:4d:4b:53:99:
fb:15:13:aa:5d:ff:fc:36:98:1c:64:b3:c0:95:6b:
3d:3d:e0:60:86:7f:d2:31:1a:cc:35:d1:cb:db:ad:
8a:07:12:e6:b9:b7:ae:be:06:f6:67:3d:c2:4f:93:
e8:93:77:fb:58:19:35:54:2c:40:b4:fd:d9:b0:56:
b9:b8:1a:6c:ce:7b:fb:78:48:1a:95:b8:f4:c8:b8:
dd:3d:30:5d:02:4b:61:c3:51:8c:14:7e:5c:19:51:
f6:b3:82:9d:a6:77:58:0f:f0:ec:c1:83:b3:e8:a7:
15:01:fe:d3:62:c9:a8:4d:a7:60:fb:0f:df:7e:77:
db:5c:44:84:06:90:b4:a9:cf:5e:8b:1a:97:86:af:
a1:15:71:6c:90:21:09:a4:82:20:df:f5:c1:d4:48:
03:10:b5:ca:95:37:b3:a3:d6:77:2b:7a:fc:55:06:
52:13:ba:81:b5:af:e3:63:13:a7:cb:31:48:ed:ea:
5e:75:10:a0:8b:54:d3:ef:e8:e5:11:6f:52:7e:8b:
db:52:c4:92:72:79:7f:1f:c3:53:00:08:80:ec:08:
fd:bf:5b:81:94:d3:4c:04:a7:c0:7f:26:9b:a2:fb:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:48:58:29:25:84:49:1B:1E:79:D8:D5:18:12:59:F6:D9:85:3B
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d7:83:58:b9:c0:26:7a:52:fe:b9:af:c3:ae:fc:21:cd:d5:
2c:28:b4:d9:02:8e:5f:92:ff:76:9f:54:26:84:3b:a4:82:cf:
51:70:63:3c:ab:f5:d4:56:97:20:97:fe:22:6e:f7:06:65:bd:
5f:61:09:83:61:e1:2a:bd:62:e9:b6:47:bf:49:1e:4d:d8:43:
ba:6f:c9:24:46:01:f2:16:3f:1f:e6:a4:30:a9:38:db:ac:7f:
23:aa:2f:e4:ff:8a:7a:2e:7e:3e:87:c5:1b:03:08:fd:f7:69:
8a:0e:4e:20:12:95:59:49:f4:b5:a5:82:cc:c5:7a:ec:45:8c:
83:66:77:80:9a:48:1f:66:02:c2:f9:27:22:cc:47:26:81:e8:
34:d3:e4:11:ab:38:d7:25:16:21:62:69:bd:ab:31:af:45:b5:
dc:ce:5c:6b:fc:c4:0e:d7:c9:82:e2:29:db:f8:c5:26:02:93:
01:86:34:ef:0f:a7:9e:44:17:a1:a3:a5:67:c9:43:77:6e:e1:
85:e1:98:d0:74:28:d1:55:a1:13:23:d6:05:cf:71:1b:6f:4a:
c9:4a:3f:b4:da:4f:c1:ff:d4:da:34:4f:0e:d4:7d:11:73:64:
f6:c4:ed:44:48:fd:5a:de:88:9f:03:11:1d:4a:6b:b1:17:32:
7d:12:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:53 2026 by rpki-client