Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: pe0TG0uOnu5hpRWi/PIFU0xJIlGk0IqCQOu1rUmybAU=
Subject key identifier: 5F:14:1B:D6:34:C2:DD:A6:11:D2:C4:BC:19:E1:3E:E9:38:13:30:AF
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019D9AE29AD4DB19A30141D3D287E9F44841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 189A
Signing time: Fri 17 Apr 2026 10:00:35 +0000
Manifest this update: Fri 17 Apr 2026 10:00:35 +0000
Manifest next update: Sat 18 Apr 2026 10:00:35 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: hqTMlqhDCPDXC8WfPpMObU8yh2IMXx/b9tUWzutbwzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:9a:d4:db:19:a3:01:41:d3:d2:87:e9:f4:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Apr 17 10:00:35 2026 GMT
Not After : Apr 18 10:00:35 2026 GMT
Subject: CN=5f141bd634c2dda611d2c4bc19e13ee9381330af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:3d:c1:7a:cd:49:6f:c3:a8:8e:a7:d1:5c:
0d:8c:b7:8e:20:67:35:e8:b1:cd:5c:58:2c:c9:b8:
8b:05:9f:49:9d:17:e4:d0:a0:78:fb:d1:01:45:ac:
41:8f:32:b0:0f:ce:ed:65:c2:e8:78:00:54:1d:67:
47:1c:d4:75:45:22:f9:48:41:d3:63:f5:de:92:3f:
04:4f:12:f1:47:d4:38:b1:c8:4d:fd:46:29:65:33:
80:10:7f:82:29:25:fa:10:c0:29:69:1d:ab:98:57:
4e:c7:5c:b1:a9:7e:c0:68:41:ac:06:ff:e0:62:08:
c9:e4:c1:aa:0c:f3:fa:df:b7:ca:1e:ad:e7:ca:e9:
28:b9:75:9b:a2:ba:26:ad:a3:09:d9:04:2c:ed:74:
a3:77:f9:c1:b7:de:b9:6b:21:99:a3:76:fe:39:79:
4c:a0:ad:99:9c:c3:ff:ce:ee:b1:60:a1:0c:10:8a:
82:03:60:f1:24:17:05:32:45:52:71:e9:9c:98:6e:
db:9f:c3:69:ba:66:41:a7:a2:44:d2:50:60:68:99:
36:1e:87:bd:bb:36:b9:17:47:61:db:a4:7c:57:5f:
b9:d0:fd:83:c4:84:b5:0e:e2:6b:f6:f2:e1:7e:cc:
45:80:ae:09:a1:73:fb:be:c3:15:4c:0b:ed:b5:79:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:1B:D6:34:C2:DD:A6:11:D2:C4:BC:19:E1:3E:E9:38:13:30:AF
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:f9:99:9a:d6:32:3b:62:03:af:5b:12:25:bf:2c:ed:50:
ed:11:38:97:4b:18:e8:4d:57:17:a3:0a:f8:d9:ff:30:9c:11:
0c:14:c9:98:39:19:36:82:24:81:db:7f:50:9b:c2:34:57:32:
4e:6d:5d:39:d0:3a:5a:83:ae:61:b9:e2:17:3e:43:1a:38:31:
7d:39:ab:e6:bd:ce:50:ad:7c:25:fb:fb:c4:cc:e9:ce:75:6e:
b4:e9:13:87:75:8b:50:c2:8c:fd:23:5b:d8:61:4d:25:87:fe:
13:2d:34:8e:05:15:d5:d6:eb:08:fa:1d:ee:d9:78:ed:a4:51:
37:d8:82:95:b3:37:e2:c5:17:7d:ea:68:9a:8f:29:a7:15:28:
24:01:38:44:de:af:54:7a:08:04:66:95:12:03:1c:d4:c9:b1:
d1:85:0d:67:c3:e2:ff:a4:c0:46:20:48:9c:15:73:30:e1:e5:
1f:98:65:cd:91:cb:ee:84:8c:28:16:4c:e5:2d:97:f6:a0:b2:
81:d8:19:b2:f4:67:88:5f:04:41:95:5f:7e:4f:8d:78:6a:ee:
e0:a1:45:71:99:2c:ee:bd:de:60:70:97:a0:15:62:4a:17:61:
1e:48:35:71:26:a5:66:ec:9d:6a:53:07:73:35:bf:55:52:14:
6c:c8:f8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4prU2xmjAUHT0ofp9EhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjYwNDE3MTAwMDM1WhcNMjYwNDE4MTAwMDM1WjAzMTEwLwYDVQQD
Eyg1ZjE0MWJkNjM0YzJkZGE2MTFkMmM0YmMxOWUxM2VlOTM4MTMzMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr49wXrNSW/DqI6n0VwNjLeOIGc1
6LHNXFgsybiLBZ9JnRfk0KB4+9EBRaxBjzKwD87tZcLoeABUHWdHHNR1RSL5SEHT
Y/Xekj8ETxLxR9Q4schN/UYpZTOAEH+CKSX6EMApaR2rmFdOx1yxqX7AaEGsBv/g
YgjJ5MGqDPP637fKHq3nyukouXWboromraMJ2QQs7XSjd/nBt965ayGZo3b+OXlM
oK2ZnMP/zu6xYKEMEIqCA2DxJBcFMkVScemcmG7bn8NpumZBp6JE0lBgaJk2Hoe9
uza5F0dh26R8V1+50P2DxIS1DuJr9vLhfsxFgK4JoXP7vsMVTAvttXlbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8UG9Y0wt2mEdLEvBnhPuk4EzCvMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb735mZrW
MjtiA69bEiW/LO1Q7RE4l0sY6E1XF6MK+Nn/MJwRDBTJmDkZNoIkgdt/UJvCNFcy
Tm1dOdA6WoOuYbniFz5DGjgxfTmr5r3OUK18Jfv7xMzpznVutOkTh3WLUMKM/SNb
2GFNJYf+Ey00jgUV1dbrCPod7tl47aRRN9iClbM34sUXfepomo8ppxUoJAE4RN6v
VHoIBGaVEgMc1Mmx0YUNZ8Pi/6TARiBInBVzMOHlH5hlzZHL7oSMKBZM5S2X9qCy
gdgZsvRniF8EQZVffk+NeGru4KFFcZks7r3eYHCXoBViShdhHkg1cSalZuydalMH
czW/VVIUbMj4rA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:00 2026 by rpki-client