Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: lPVLLQ3IM5/BA4wzWxHIsFV/NU58dByXBC/jGvn6kTc=
Subject key identifier: 1B:8B:79:3B:B9:BD:06:23:C8:AA:FC:6B:99:FD:4C:8B:5C:E5:57:89
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019DA453E9449EDAB58B2991A57B1DEFB337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 06:00:55 +0000
Manifest this update: Sun 19 Apr 2026 06:00:55 +0000
Manifest next update: Mon 20 Apr 2026 06:00:55 +0000
Files and hashes: 1: F9K0hFQXxtbhSJLkCfsnizzHs0s.roa (hash: KFw62b/4AeJuATgKU0557hosLMq4NoClO0EkpuHlym8=)
2: H4bKxOh-hy6T67ooqNK2-ku15B8.roa (hash: 3bzS3/bPOoZXps3p17llktHkmheeXpLyUJCVejVIYgE=)
3: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: x4s/uYXr6H0nBFiTEA0PtcwtTdKzDdrMyV6PGhgKigo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e9:44:9e:da:b5:8b:29:91:a5:7b:1d:ef:b3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Apr 19 06:00:55 2026 GMT
Not After : Apr 20 06:00:55 2026 GMT
Subject: CN=1b8b793bb9bd0623c8aafc6b99fd4c8b5ce55789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:91:b7:59:ea:22:9d:fe:b2:8e:a6:31:0a:
29:65:ce:62:6e:f8:34:e3:87:d6:d0:5b:6c:a6:8b:
15:a3:3a:24:36:1b:72:f5:c1:57:25:86:c8:0b:23:
29:2c:bb:ee:a3:b5:9b:39:c1:e5:47:9f:b1:f6:ea:
af:26:24:a4:a2:dc:36:ad:28:86:20:47:56:e2:ac:
30:8f:5e:0b:73:f1:7d:3f:74:8d:84:de:c8:97:14:
6b:f5:8d:9f:71:cb:92:fe:40:0d:28:0a:2c:01:67:
c3:9b:bd:39:b3:74:59:b6:be:07:f2:21:c7:95:92:
ce:22:e4:aa:89:99:67:e3:de:ae:fd:b3:0b:ff:9c:
13:99:99:9f:b6:06:7b:19:8e:93:83:e6:95:18:0d:
4d:43:7f:b8:2a:17:1f:a4:34:3a:c0:1a:3a:3c:ff:
f9:c6:43:92:50:83:25:fb:4c:8e:3d:8e:7a:c5:72:
ae:d6:ef:e5:ab:96:f4:79:7e:88:d5:37:1e:53:10:
ae:2a:71:a1:23:cb:3d:8a:42:fd:69:d2:5f:1e:dc:
95:4d:10:1a:f6:cf:c7:27:22:24:e5:d3:a4:35:16:
50:be:11:97:21:a9:ab:01:34:ec:62:f6:29:30:19:
a3:06:6b:dd:cc:67:82:66:7a:4b:5b:a1:2e:99:be:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:79:3B:B9:BD:06:23:C8:AA:FC:6B:99:FD:4C:8B:5C:E5:57:89
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:ad:11:15:f6:99:3f:a0:7c:41:0a:9f:d8:7f:a0:44:8c:
cb:50:bb:75:47:a9:06:fd:99:b6:04:49:75:5b:9f:58:9c:88:
ba:e0:2a:84:16:76:bc:b2:d7:e5:b9:31:21:4e:bc:d5:b5:c1:
59:70:37:4c:38:0d:ca:1a:19:6c:e2:bb:59:e3:6c:a0:ad:d7:
f6:cb:6f:13:c2:22:99:e7:d7:bf:b3:0f:a5:bc:44:39:a6:6c:
4e:22:45:50:75:5c:17:e7:27:50:b8:f7:44:ff:eb:bd:23:3a:
ba:03:2a:d3:dc:af:e9:bd:51:45:0a:77:92:c0:21:2a:dc:77:
be:35:c2:b7:d7:f7:a6:48:8f:36:da:ca:76:83:a0:e4:0b:be:
7a:c8:81:e1:a5:d2:19:65:d5:cc:db:6c:7d:dc:d2:99:79:ae:
91:a3:e4:58:f7:10:ea:07:76:69:e4:b0:98:5d:61:f6:58:4a:
cb:b3:5e:f0:ba:f3:ea:23:32:f4:f6:d8:4d:c2:08:b9:45:d0:
02:a5:83:7b:c5:8e:2e:be:c2:2c:90:ca:2d:2a:d4:b0:a1:a9:
b1:10:d6:07:4f:1d:f6:58:f0:63:76:07:82:9a:2b:20:7c:ce:
ea:64:d4:ed:4b:4a:eb:88:1a:05:f0:30:d6:45:ab:25:35:93:
e0:b7:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:10 2026 by rpki-client