Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: Xkqa2rr27XwHSgURbpz4zs+e3cPZoLefwcPIej7FFBQ=
Subject key identifier: C4:A6:68:06:79:54:FF:2A:11:75:DF:F6:8E:28:92:F0:68:51:F9:28
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019D99D09E126FA2F5DD4A23DF4C07363E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: 2Yztgl1JDQiHLbJTugznfEzk5Qc.roa (hash: jSITK3S0lez0+624vvcXLxi93dFSIlVEaD28cVt/Qe0=)
2: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: Dy7Xfv2DKQUxGSQPGRRK9jRMkASGHw9vVkvyyaGIJbw=)
3: c0s191T9M-PjiRKEaUw3Sv51WuI.roa (hash: HMekVBw+h+CR9Vb7bu+DywUuyLHvbFqFC7IFjxkwPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9e:12:6f:a2:f5:dd:4a:23:df:4c:07:36:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=c4a668067954ff2a1175dff68e2892f06851f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:d1:02:f9:e2:68:ce:6a:7d:83:77:2b:5b:
af:f5:94:00:49:24:50:f0:83:b3:20:50:03:dc:0f:
84:f9:01:9c:e0:d7:92:16:46:95:c9:a6:93:a3:38:
7e:49:95:ab:03:fc:0e:9c:26:cf:7b:2e:07:10:ae:
de:19:cd:bb:80:59:8f:cc:60:d3:85:3f:6e:29:7b:
17:1d:6e:37:de:96:bc:79:67:5c:fd:e9:6a:d1:2f:
6b:f7:72:73:61:fd:e3:e9:79:14:47:ce:71:a0:ca:
6a:86:22:d1:45:5d:2b:ed:ff:dc:08:28:17:ba:9c:
68:3e:8c:1d:00:94:e2:32:0f:cb:7a:52:79:b5:f4:
97:60:d2:82:53:7c:8c:cc:2c:75:35:b2:0a:3b:bb:
3f:44:26:03:e9:1e:18:8d:96:c5:c9:96:f1:6a:62:
01:f9:df:61:b2:d3:99:8c:24:c0:58:f2:22:fe:58:
3c:59:e2:e5:08:2e:47:6b:86:13:e4:8c:73:19:d1:
11:0b:82:5b:84:b9:80:33:de:9a:df:e6:58:be:ea:
44:0d:9b:6c:1b:ab:60:5e:94:3e:dc:8a:e5:76:3a:
24:42:4a:9b:8a:e4:3b:1f:b9:4b:5e:d0:91:45:fb:
e5:0d:6c:16:e9:9d:d0:ee:7c:77:62:c0:09:8b:dd:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:68:06:79:54:FF:2A:11:75:DF:F6:8E:28:92:F0:68:51:F9:28
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:1b:2d:6e:ed:f3:3d:68:db:f3:ed:f8:50:34:e3:d2:b2:
3f:f8:0e:60:e8:6a:0c:9f:ac:81:69:65:fb:4f:28:6e:7f:a0:
46:55:73:ed:8b:60:e1:32:57:8e:97:ca:97:c3:da:6d:9e:82:
ba:28:5f:70:0b:ee:c4:6b:e4:db:d4:74:1e:0e:33:dc:7d:d1:
d8:cb:8b:a9:f9:16:29:1d:31:80:34:f5:ae:21:bb:e7:4f:e0:
c0:51:03:f5:a5:39:00:99:6a:40:36:87:fb:fb:af:a6:3b:e6:
55:b8:89:19:f9:fe:a5:2f:aa:a0:00:dd:ac:55:22:67:ea:98:
b8:33:11:98:51:ed:29:47:3e:ce:bc:8f:f4:81:29:00:33:7c:
bf:83:44:85:38:f8:d6:61:2f:ef:2f:fc:80:27:53:87:7e:c2:
cf:fb:52:9c:5d:28:74:99:8c:c2:f9:06:83:00:ca:9b:ee:8a:
9e:a7:14:c4:3c:2e:c8:92:0f:5b:95:0a:3f:41:c5:3d:79:81:
6d:cd:eb:a5:d8:98:09:9e:2a:4e:9d:41:15:73:73:17:d4:7b:
1b:52:12:c0:20:78:f1:8c:1f:24:f8:43:6c:5d:67:50:53:df:
4e:11:86:0b:8d:2e:86:65:f9:0e:ae:35:aa:39:e8:ea:47:1c:
38:69:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:32 2026 by rpki-client