Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: kmH3LvJAVfaksIE8S4TdqIk9FhL8vzPJr9usCoA2rkQ=
Subject key identifier: FA:8E:66:29:10:D9:95:0A:7B:37:3F:F2:AF:B5:37:3B:51:6C:ED:AF
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019D9BBEDCBB1E38DEE60FFA12398A3AD3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 18D8
Signing time: Fri 17 Apr 2026 14:01:09 +0000
Manifest this update: Fri 17 Apr 2026 14:01:09 +0000
Manifest next update: Sat 18 Apr 2026 14:01:09 +0000
Files and hashes: 1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: mDFsdi1w0NU9FAUorED4y1DVqUDwMIXxMumhd6ouvoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:dc:bb:1e:38:de:e6:0f:fa:12:39:8a:3a:d3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Apr 17 14:01:09 2026 GMT
Not After : Apr 18 14:01:09 2026 GMT
Subject: CN=fa8e662910d9950a7b373ff2afb5373b516cedaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:87:6d:b4:c1:14:1b:8c:cc:fc:b2:df:ce:
76:97:cf:cd:f9:8e:58:1a:0a:c6:6c:aa:62:8f:cb:
ce:cb:7f:b1:70:06:21:08:40:b4:5e:d1:64:b4:90:
98:00:60:51:77:5c:a2:d9:56:a3:d0:ac:d8:7e:47:
45:62:72:2d:df:0b:74:13:17:bc:8f:2f:b7:5b:a7:
34:70:35:56:3c:33:39:59:06:33:de:4c:7e:26:29:
4a:0b:25:83:58:cb:bd:30:ea:b3:74:6f:55:6a:d8:
0f:f0:89:5f:ae:9c:c7:9c:c8:5d:82:9a:a5:bc:88:
2c:f3:7f:2c:8c:b3:32:97:9b:4a:b0:54:f6:28:c4:
31:89:84:3a:e6:fb:21:5c:4b:c9:16:5c:9c:8d:53:
78:2d:f3:e0:f3:e5:86:fc:04:bc:4e:e6:16:62:54:
9a:00:24:43:31:e5:0b:de:f0:7e:07:53:51:85:92:
1a:5e:fc:8c:bf:84:81:d2:f4:de:b1:d3:00:6a:85:
17:ab:b1:3d:7d:90:f7:f3:30:b0:1c:f1:fa:16:80:
28:ec:ba:4a:f7:d2:22:15:00:3b:7c:6e:8c:1e:93:
d9:97:5e:1c:fb:d3:11:d6:2f:4d:d9:27:63:1f:b5:
44:51:42:85:98:2e:c4:ad:c3:1a:dd:cb:72:a2:09:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:66:29:10:D9:95:0A:7B:37:3F:F2:AF:B5:37:3B:51:6C:ED:AF
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:95:7f:eb:f2:0d:24:cf:4e:cf:77:68:83:4a:3c:43:5e:
51:0c:09:a6:38:5e:9b:73:b5:e1:4c:15:b9:19:ef:87:a3:30:
e8:39:af:7f:96:44:33:55:f0:2d:0a:27:ad:27:bb:69:ba:9f:
b1:2b:ab:14:1e:6d:9e:53:61:5b:7c:55:ff:4c:c6:c3:40:0e:
26:ef:e6:01:9e:71:43:94:72:3e:ec:5a:7e:6a:a1:89:d3:b1:
1f:db:ef:a8:1d:8c:d8:71:56:33:b3:43:b3:10:d8:c3:1d:69:
fd:2b:60:57:91:75:48:bc:68:d9:c0:8e:36:30:04:04:f0:2e:
cc:4b:ff:10:81:68:df:e2:67:69:3e:09:08:b7:a2:d4:6f:4f:
cc:0e:9b:ff:97:a8:fe:58:f5:51:d4:04:db:04:f7:64:8f:44:
0d:ae:16:72:b6:39:91:36:52:99:4b:94:34:85:f8:b2:ad:a2:
1e:71:59:93:50:9f:95:c3:79:66:28:d6:75:59:fe:16:ab:27:
90:22:03:fd:07:2c:c7:bb:9a:81:da:0e:0e:8a:6b:eb:63:3d:
63:11:17:30:03:e8:19:69:d9:a1:c9:a9:a7:93:d4:90:94:12:
e7:94:a1:99:89:e1:08:3a:49:a4:8a:a6:dc:fe:b1:f4:c8:ec:
87:c1:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:31 2026 by rpki-client