Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: CMGzENDmqdjr56IYRAX/6ODCOTSIjbammjH5cJfKaY4=
Subject key identifier: C4:0D:26:06:C0:7E:BA:D2:54:17:57:9B:E7:76:32:CD:A0:EF:43:64
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 019D9998D37492273191F0E4B7BE45DE3D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: G6gg6Zq8XHT4akATh9Ka5WuKYF24oqajWtkitJbhmnM=)
2: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (hash: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d3:74:92:27:31:91:f0:e4:b7:be:45:de:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=c40d2606c07ebad25417579be77632cda0ef4364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:21:8d:bf:4b:06:c6:b5:20:97:7d:9d:c3:04:
81:1b:3d:59:59:fe:85:3f:48:77:d5:88:42:14:a7:
a2:31:f3:79:14:60:8b:e5:c4:ec:ad:0b:52:50:b3:
75:86:e2:40:22:52:66:b7:c5:75:b5:60:74:21:04:
87:2c:c8:66:00:19:ea:9b:9c:ab:3e:a7:d9:87:b6:
01:28:80:06:a9:0f:f8:cc:51:05:4f:5f:b2:9d:aa:
62:63:18:f4:d4:14:05:b7:6d:4f:2f:bf:6a:fc:f8:
18:8a:31:e9:a0:30:68:ae:e9:f4:00:f5:f2:e8:c9:
18:a8:f9:68:a5:7d:fa:b6:02:ed:16:e3:ad:8e:d6:
5a:63:0f:15:d5:97:d4:8c:89:02:7d:9b:db:41:7a:
60:67:53:c5:e2:c1:eb:e6:02:b9:f3:82:4c:ad:7f:
2c:99:00:84:3d:69:4b:30:9d:e5:b0:ed:15:91:29:
be:eb:6d:1a:f0:64:15:87:ea:83:67:3f:75:c9:a3:
23:15:76:3b:0f:8b:42:ad:0c:19:60:c3:6a:30:b8:
ef:6e:30:a4:53:9d:89:03:9f:9e:d1:d1:d6:ac:8d:
92:c0:a3:1e:be:e4:aa:15:84:d0:91:8e:29:b1:46:
da:43:a5:32:3a:24:87:c3:67:d4:64:08:14:cb:ed:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:26:06:C0:7E:BA:D2:54:17:57:9B:E7:76:32:CD:A0:EF:43:64
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:52:98:4d:95:91:e2:ba:d7:7e:32:91:de:c0:fc:b0:86:3e:
1c:18:4b:45:bc:d8:22:61:35:48:4d:ef:e8:68:54:46:3b:85:
61:37:ad:1f:73:f9:84:d3:d7:84:df:7d:63:94:55:62:e2:71:
57:ee:e6:8b:3a:5b:38:62:9d:81:18:cd:10:96:d0:58:c9:54:
7e:20:f2:07:b2:7c:ae:4b:97:0e:f2:45:7f:d4:b3:99:6b:98:
aa:ff:26:d0:ce:99:bf:45:bc:6c:9e:36:75:b5:2a:cc:c8:fe:
bd:82:4c:87:e6:67:23:00:c0:04:d2:a0:c2:61:c1:48:a0:2f:
fa:6d:52:06:ba:d4:2c:9b:ff:4e:5e:ba:4b:07:50:87:f0:b1:
58:61:a5:bb:6f:ac:4e:e9:ab:b8:f5:b0:82:7b:89:68:87:62:
72:c1:25:3c:b6:c7:76:41:59:03:09:81:ec:49:0e:d3:4e:c0:
55:0e:a8:e7:75:40:4b:8a:af:46:82:f2:74:53:c1:f4:9f:96:
2b:0d:73:20:9e:a7:2c:92:52:4b:d0:f4:4d:3f:d2:50:d7:a4:
b2:05:29:a3:91:8c:50:22:94:3b:96:fe:6c:13:c8:f1:4b:44:
3b:72:5c:ef:97:82:de:a9:c1:21:7c:3e:17:9c:57:d7:7d:6a:
8b:cf:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:27 2026 by rpki-client