Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier: d2NCP7kV9IP1F3zSGUX4OcnulqSnFOUI9T0wOCGGbB4=
Subject key identifier: F1:54:CB:A4:D5:3C:29:D9:7A:13:6A:B5:CF:CE:FE:C5:0E:72:38:9D
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial: 019D9818BD694DBC09C15EDB3C1E449B574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 21:00:51 +0000
Manifest this update: Thu 16 Apr 2026 21:00:51 +0000
Manifest next update: Fri 17 Apr 2026 21:00:51 +0000
Files and hashes: 1: 04V3xL-wvyvCRWgSYkpGUkjiE8s.roa (hash: FQS7L+Hj2zSXnBRorh0m7ldyBShNLVTNeylqQBQZHwo=)
2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: 9IdlbcMHCkCG3Z5sXS/RIiHGEisSCjspXn9nKRraGCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:bd:69:4d:bc:09:c1:5e:db:3c:1e:44:9b:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Validity
Not Before: Apr 16 21:00:51 2026 GMT
Not After : Apr 17 21:00:51 2026 GMT
Subject: CN=f154cba4d53c29d97a136ab5cfcefec50e72389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:75:01:40:f0:c7:02:54:41:93:05:05:44:
85:40:5c:e5:cb:03:0e:c0:be:dd:43:8a:6a:2a:c9:
f2:fc:98:59:6e:7a:cd:c7:e0:b0:4f:65:6a:00:0a:
38:5e:98:1f:bb:08:93:e4:a7:34:af:dd:a7:2f:be:
a7:65:2d:f3:0c:a5:43:06:c9:22:b3:f9:80:3a:54:
9c:65:c3:d2:31:1f:75:08:f5:c1:98:7f:42:84:61:
bf:0c:1b:e6:a8:f0:b5:d1:e6:10:00:66:d7:b2:df:
53:c6:b5:80:eb:00:c5:de:20:12:ff:62:20:1c:a9:
b3:16:54:de:b9:60:d1:3b:c7:e9:0b:1a:2c:3d:cc:
c9:32:c3:a2:c7:ed:65:f4:3b:58:60:1e:2a:3c:ea:
a4:70:e5:63:99:eb:b0:d1:a4:d9:db:43:42:3d:58:
08:24:26:48:a2:b7:f7:d1:66:f8:68:3c:8f:41:30:
23:fc:6e:98:fa:8c:55:45:2f:62:63:4e:87:dd:62:
a9:55:55:1d:ac:3f:8a:ad:07:8d:50:b6:a9:30:fa:
29:b2:3d:ac:3b:10:c8:59:6a:40:f5:9b:ae:7d:65:
f4:c5:ac:de:38:ec:7f:99:b7:f5:08:5a:42:0f:99:
01:65:9a:8c:e1:84:47:31:e5:63:52:08:ba:d1:c8:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:CB:A4:D5:3C:29:D9:7A:13:6A:B5:CF:CE:FE:C5:0E:72:38:9D
X509v3 Authority Key Identifier:
keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:c5:ab:1a:a0:fd:4b:06:8a:f5:10:dd:99:dd:63:d8:bf:
e9:04:35:44:cc:a1:66:b9:2e:f5:76:9d:68:a7:85:f2:d0:ea:
41:3f:a3:cb:7c:2e:a8:91:3d:40:05:c4:30:9f:93:d3:2c:55:
e6:61:67:0a:81:35:94:ca:4c:2f:fc:6d:5e:21:0d:c2:d0:af:
b4:52:15:8b:66:2d:8e:68:f7:5d:c8:6f:5c:d3:93:e2:19:44:
a8:4a:07:2c:7a:31:e8:fe:1f:89:91:a1:5b:82:e7:d8:a2:15:
66:10:b1:64:8d:1b:cd:52:10:11:3c:55:07:a9:83:5a:7e:53:
0f:b9:86:3e:cb:4e:ab:df:10:47:d9:07:03:32:0f:82:e6:53:
42:90:3f:cb:f3:05:7c:93:02:cd:a3:1c:b8:5d:34:81:7b:8f:
0c:0a:34:4b:ac:ae:7d:46:fe:e3:db:fb:d0:32:a9:70:03:c8:
49:9e:40:85:0e:0e:18:66:54:5e:d4:50:67:74:64:2b:ad:5c:
4e:ac:00:ac:27:59:37:90:1c:46:87:dd:dc:63:a4:c1:f9:aa:
52:08:26:12:81:80:5e:c2:65:5b:9a:59:2f:f2:22:5a:34:69:
16:46:68:b5:34:a0:53:da:5e:64:56:f3:eb:dc:8e:dd:84:16:
0e:56:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:13 2026 by rpki-client