Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: x3+LhOP5KOTqb5Xq/O5YC/cTEG9RLxHoTy+z5B7vbd0=
Subject key identifier: 69:1A:C1:2D:42:B1:98:FD:D2:63:58:4D:A6:7C:B5:56:41:F7:D9:4C
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 019D984FD2F66BA668BBA8DD04BF2AA64EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:01 +0000
Manifest this update: Thu 16 Apr 2026 22:01:01 +0000
Manifest next update: Fri 17 Apr 2026 22:01:01 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: JAo/c9d00p/vs3G69lYgZiLqOOnRDEXqc32UYByXu5Q=)
2: wZYLGJBlCTJUsX-eSFhRzVh3OJs.roa (hash: eKqFE/Zg8siqql4lhjgWwbmByQIzTXxNcXcT1aXdcZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d2:f6:6b:a6:68:bb:a8:dd:04:bf:2a:a6:4e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Apr 16 22:01:01 2026 GMT
Not After : Apr 17 22:01:01 2026 GMT
Subject: CN=691ac12d42b198fdd263584da67cb55641f7d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:0f:d2:7e:f3:f1:72:42:53:f3:6d:0a:1a:
68:5b:27:bf:45:a4:32:44:26:fc:d5:e8:0c:07:8b:
cc:f7:2f:fe:6a:a8:97:6b:58:d5:af:64:e3:67:98:
d6:2a:27:63:42:ed:cc:e0:83:9a:e1:b4:26:8e:c9:
d3:fd:91:d6:e6:a7:ba:0b:ab:39:f6:26:31:08:d4:
00:17:47:fd:db:e8:0c:92:e6:f7:8f:8a:d5:e3:7a:
22:49:f4:95:e7:d8:28:ea:ab:49:07:f0:3e:89:b9:
46:f2:b9:22:43:3c:e3:2d:39:2e:dc:8c:b3:ca:6c:
23:50:a7:aa:d8:cb:c3:39:32:a6:33:c3:5d:e1:da:
e3:ed:40:40:22:03:9b:6a:14:95:aa:36:d8:41:b7:
2e:3b:81:ee:d5:d5:a5:7d:a8:44:d4:28:cf:86:0a:
85:6c:6d:3b:4d:a7:9f:2c:55:94:e1:11:c5:d3:cd:
f1:a8:68:02:57:7b:d8:1f:42:a5:c5:fd:50:e8:c9:
67:ee:11:9d:a5:36:31:73:f0:25:3a:7b:23:13:1e:
22:1b:15:b9:b4:b7:eb:a2:93:1a:e6:3e:51:29:52:
45:ae:61:f0:12:8d:0a:46:79:90:94:1d:51:5d:22:
d6:a8:0a:0f:62:b1:ff:1c:ba:5c:a5:27:1b:a9:71:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:C1:2D:42:B1:98:FD:D2:63:58:4D:A6:7C:B5:56:41:F7:D9:4C
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:62:8e:54:a0:21:cf:d2:c9:70:ea:c9:8f:ec:24:03:58:6a:
de:b7:73:01:e5:ed:f1:a6:4f:f9:02:f4:26:73:55:02:ef:0d:
cc:52:d3:65:5f:b1:70:b4:30:82:87:f4:8b:45:90:52:d5:c5:
e4:59:e5:ab:30:2f:73:66:e3:12:a8:fb:f6:b5:48:40:7b:fb:
6b:42:90:52:ec:c5:d7:56:3d:e9:e5:d6:b8:be:d6:f2:90:14:
b9:4b:fa:59:bb:34:76:61:9e:b0:45:05:4e:9b:44:44:5b:1d:
50:f5:81:9d:57:0b:eb:93:a4:3d:06:66:56:dd:a5:9f:bc:63:
d9:8d:0b:5e:45:fd:7b:bd:55:f3:38:ce:a1:cf:3b:2e:e0:c8:
f1:e5:59:47:d0:d5:b8:af:e3:a3:28:6b:93:b2:64:e5:95:d6:
b4:6f:40:0e:65:ea:0d:bc:e7:27:0f:10:78:17:a3:04:7c:a2:
79:7f:fd:76:6c:f7:ba:93:ad:3b:e8:9c:63:4b:7e:7d:1c:cd:
ba:e9:2b:cd:36:1f:9b:9c:55:2b:1b:f8:45:70:cc:da:cf:8e:
6f:cc:64:b1:05:09:eb:11:41:aa:10:47:10:1b:02:bf:78:92:
5f:ad:73:39:49:cc:65:54:99:6f:8f:11:9e:06:0d:5d:5d:26:
70:de:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:13 2026 by rpki-client