Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: GCY4c5cadeb+qPRMxY20xZx5d5C/R3Lpnq/TLYBCgEs=
Subject key identifier: 08:4F:49:3D:F8:E3:A5:20:53:04:14:2F:F2:97:5E:FA:2C:42:D8:0A
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019D9999B44B467D3107D03DEA97CAD2E945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1798
Signing time: Fri 17 Apr 2026 04:01:20 +0000
Manifest this update: Fri 17 Apr 2026 04:01:20 +0000
Manifest next update: Sat 18 Apr 2026 04:01:20 +0000
Files and hashes: 1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: dfS33Aoyc0Z88sTsiMctRhSyVdAlerIaqbcrqGVjBp0=)
2: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (hash: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b4:4b:46:7d:31:07:d0:3d:ea:97:ca:d2:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Apr 17 04:01:20 2026 GMT
Not After : Apr 18 04:01:20 2026 GMT
Subject: CN=084f493df8e3a5205304142ff2975efa2c42d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:9a:29:60:64:df:fe:41:f7:3e:16:ad:d3:
af:fb:3d:7a:1f:55:d0:23:4e:89:9d:45:19:fc:b2:
14:ac:c7:31:d7:6a:eb:f7:40:5d:4d:97:9c:db:c1:
2d:85:cf:be:d8:a0:6f:38:b5:9b:b8:2b:0d:42:28:
5d:c2:c7:06:ef:f8:5a:27:68:3f:3a:99:4d:9e:a1:
ca:7c:da:ea:e6:a2:10:c0:96:bb:e3:fc:26:92:72:
f4:ea:94:44:bc:a2:79:db:46:b2:db:b2:e7:b9:a1:
9d:9a:be:56:dd:43:c4:9e:d6:21:0f:6b:b6:5d:df:
c3:7e:88:5c:5a:bc:03:b9:59:f8:72:73:0b:a5:5c:
f0:d1:7e:49:a7:f9:54:be:9c:06:6c:d4:50:3d:d8:
17:e0:9e:c4:bf:b4:8c:c8:d0:51:be:ff:ae:b2:fe:
36:d5:5e:d1:25:01:fa:68:78:1c:56:0a:de:10:c9:
20:8b:77:e1:bf:87:3d:13:0a:c4:04:05:ea:e2:48:
95:d1:43:8b:dd:de:91:0d:3e:46:0c:ac:f2:76:62:
d5:b1:98:3e:63:f6:e4:c4:03:83:14:2e:2d:a4:c6:
1f:04:19:3d:90:ca:9c:47:ab:75:42:37:77:72:49:
25:0e:4c:f8:14:6e:f2:b0:b0:29:24:88:4f:a2:9a:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:49:3D:F8:E3:A5:20:53:04:14:2F:F2:97:5E:FA:2C:42:D8:0A
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3c:e9:49:c6:fd:3d:c2:0e:14:96:1f:7e:01:00:19:91:01:
e3:13:33:9d:93:6a:9d:bb:7c:0d:02:40:8d:9b:e0:16:fa:67:
d0:21:d2:93:dc:ac:ba:98:7b:4e:80:ff:ed:62:87:38:f0:92:
bb:c1:d5:22:be:22:5c:93:ce:51:ed:e9:e8:38:a2:b4:27:ab:
6b:eb:69:08:8d:a5:83:f9:84:23:0f:54:dc:52:b3:49:01:20:
8b:3a:6d:0c:fd:7d:61:d5:64:c2:d9:07:cb:a7:8e:0a:ec:59:
28:48:14:c3:5c:b0:f5:52:65:09:10:4f:96:68:d9:50:86:09:
cc:f3:5b:5f:66:2e:6f:97:2c:e0:11:c7:2c:27:54:a7:cd:ce:
d7:ba:64:8e:87:7d:b6:92:d5:52:a4:9f:5a:f4:29:63:21:59:
8e:6f:cc:4b:2c:39:7c:f2:cf:5b:b6:a8:68:6b:fd:eb:71:dd:
8e:a7:14:40:17:87:fe:04:d9:ea:b1:37:da:f8:6e:79:d9:fa:
5d:a8:86:ec:f9:de:e0:2b:cf:4a:44:40:dc:03:77:be:2c:bb:
66:f7:9d:82:4a:ef:77:28:8d:21:12:de:eb:6e:43:1a:e8:87:
89:32:50:a1:36:cc:18:32:63:03:39:5b:33:6a:0d:29:61:c7:
73:6e:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:39 2026 by rpki-client