Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: 7pIsCzr6OPwZqyk7c2uOLoVM1Wn5kk3ZOmznucfu23Q=
Subject key identifier: 4F:F4:8C:DB:F5:91:63:A4:57:91:25:A3:F6:AA:82:DE:FC:9E:F3:DB
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019D9886C4FAF27587E6E65B40354B352715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 156C
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: Ka2a2hMcx7R3uDMR+71aqV1ObX0yMsUtYBZFVgcupds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c4:fa:f2:75:87:e6:e6:5b:40:35:4b:35:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=4ff48cdbf59163a4579125a3f6aa82defc9ef3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:d6:f1:4e:1b:39:4f:f6:23:89:82:08:cb:
58:13:97:2b:fa:b6:06:5f:40:bd:86:70:b5:7b:15:
30:da:1f:26:0d:74:f6:9e:53:42:95:0f:1f:2f:09:
73:cb:57:32:65:e9:4a:28:9c:b7:45:f3:a9:17:8f:
40:1f:15:59:04:04:cf:72:4b:5d:f9:10:b6:98:e6:
01:af:e9:e9:5f:f8:fb:f6:af:78:80:97:9a:52:78:
fb:03:da:b8:0d:66:95:86:d8:38:0f:4a:28:b4:10:
74:31:c6:e5:39:f9:36:f5:2c:2e:5d:5d:01:2f:a4:
e1:9a:b4:5e:33:88:3e:01:87:f4:46:68:8f:48:5e:
fb:99:3d:25:6b:b0:9e:ea:7c:f4:6e:52:2b:27:f0:
dc:20:b0:5d:96:ec:5d:8b:91:50:c6:f4:67:f8:ca:
f6:ae:d5:49:72:1f:c2:77:73:85:76:85:bb:17:99:
6d:8b:26:23:de:94:44:ce:ae:8b:af:61:1f:6d:f5:
2e:8c:45:bd:0c:59:9b:04:a7:43:58:52:e9:85:2d:
1b:f1:cf:5d:c0:53:a1:bf:ef:61:83:b2:fe:fe:21:
3c:56:ac:3a:63:99:c0:08:a5:89:d5:f1:53:91:53:
2a:f8:73:c1:89:93:4e:10:cc:7d:16:63:ea:98:4e:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:8C:DB:F5:91:63:A4:57:91:25:A3:F6:AA:82:DE:FC:9E:F3:DB
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:24:8e:e4:1f:09:43:19:bd:9f:55:64:ee:38:6b:bb:d1:f9:
4f:27:f4:1e:1e:81:3b:46:99:d6:75:61:3b:e6:94:4c:b7:56:
5e:15:ba:64:3a:15:e1:be:34:aa:4c:65:d6:4a:6f:bf:f4:f5:
ff:9c:e2:eb:1e:46:59:17:6a:33:3c:7b:69:9a:ed:d8:a0:ce:
29:5a:ff:da:64:82:a1:c5:f2:dc:b1:ab:f5:ef:a0:ad:a3:37:
5e:72:1b:95:38:99:16:40:36:46:25:f6:c3:8d:52:dd:81:9a:
11:55:74:0c:f7:fc:2c:ab:f1:63:30:e4:48:ea:84:ef:d6:a3:
d4:1f:e5:51:b4:65:a7:aa:4f:e7:08:52:4c:72:31:ed:42:c6:
a2:35:f0:43:44:28:a1:72:fc:ae:d9:ae:6f:44:c5:7e:b0:ed:
68:99:4d:7a:82:df:19:67:1b:bd:6a:f5:b1:c6:8b:c8:a4:fb:
33:1d:a6:3f:5a:52:7e:45:8b:ae:4f:13:0d:d5:0e:13:f1:e9:
7b:54:74:9b:74:9c:e9:7f:4a:f4:ee:d6:01:d7:7a:bd:57:09:
1f:6e:ca:40:93:5e:07:92:6d:a4:db:d7:aa:b4:fd:c3:03:5e:
af:c2:84:a1:7c:57:bc:cc:1a:dd:fe:7c:4d:bb:8d:3d:7d:4e:
82:31:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:30 2026 by rpki-client