Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: Cv7ptvT1hn0mTrhMRQdYP6BmjGlY2pvb7hvkiT9j8PM=
Subject key identifier: 4A:5D:A0:B7:EA:48:28:80:32:FD:CB:D1:CB:19:CF:8C:F5:C6:7D:BA
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019D99CFF63CC9C66F4DB6BE8A425936F6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: Hpu7h4Rh1qUhh1tRQClRAGHO3Io7YzXbfev7cyzns/M=)
2: nVHrsl4hwFWTaCR_GcEsa9Q48KA.roa (hash: /YrORsls2Ml4uyA19yrvejBRcrJxya6Sn19K3r9l9F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f6:3c:c9:c6:6f:4d:b6:be:8a:42:59:36:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=4a5da0b7ea48288032fdcbd1cb19cf8cf5c67dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:ff:97:c7:87:91:27:0b:f8:7d:d5:69:b4:
96:3d:16:f4:92:f9:d6:53:be:cf:53:cc:84:61:ca:
19:62:30:76:d0:cd:80:bb:b0:ca:96:a4:cc:84:dc:
14:60:f0:24:a1:25:13:ac:bd:b1:35:90:49:67:a0:
4e:21:d0:81:96:27:15:78:53:43:59:b1:60:f3:b0:
a4:8b:d7:5f:e6:0b:ea:37:7a:af:1e:d8:84:03:c9:
f6:3c:c3:46:58:73:66:0b:55:f2:a8:68:de:54:24:
bc:ba:b3:da:5e:77:6d:a7:96:8f:4c:89:2c:9b:52:
9d:ff:5d:0f:07:38:6d:b5:a8:91:4d:82:e6:a1:1a:
81:2e:d8:f6:44:2c:a0:45:a4:6e:4a:1d:b4:ab:8f:
d4:58:ab:45:91:8e:04:d2:17:45:ca:1c:e1:e6:4c:
5a:37:fa:bc:24:df:5f:ee:ef:5d:78:b3:7a:64:20:
85:07:d3:7f:7d:06:39:6b:98:0d:4d:42:3c:06:85:
d6:3f:3c:e5:66:ad:e1:af:3e:d9:05:f5:c1:22:40:
24:32:c0:71:2d:8b:d1:43:52:b7:52:ec:97:29:19:
91:eb:54:ea:a8:ed:4c:56:84:a9:e5:26:6a:a7:7f:
e0:8a:29:1d:b3:bb:11:b2:bb:aa:04:63:e4:d6:19:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:A0:B7:EA:48:28:80:32:FD:CB:D1:CB:19:CF:8C:F5:C6:7D:BA
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:51:0f:f7:cc:e2:92:b5:ac:62:f4:bc:33:b4:a0:68:b3:
9b:2f:e6:3e:82:05:4a:c0:c2:eb:5b:08:e5:c3:ce:94:e5:0c:
66:29:c1:e3:56:78:89:05:4c:fb:22:9f:ee:d1:64:c7:22:a5:
4b:b5:51:dc:d9:88:3f:d7:bf:34:3f:c7:36:7f:a8:6e:a6:df:
37:33:4d:1f:68:06:c0:0f:f4:85:84:1d:f8:1d:7d:83:96:87:
b8:0a:6f:a3:1e:d9:33:79:60:07:4e:9e:91:c9:c0:36:5d:8b:
81:f5:06:22:bc:fa:30:0a:fd:a3:d7:98:e2:2a:1c:c0:9b:63:
17:7d:dc:3a:33:07:9a:d1:08:84:1d:05:67:eb:08:65:6c:1b:
ee:2d:a6:95:3a:25:51:5d:d4:02:cd:0a:1e:29:7e:1b:e2:e3:
73:5d:04:18:fd:1d:e0:73:eb:73:16:92:6e:23:b6:02:17:0d:
1e:16:4a:37:2a:cd:d6:bd:d5:eb:da:a1:88:ae:2a:f1:02:44:
9e:27:b8:a4:8f:ae:67:79:2d:73:ab:32:fd:7a:23:b3:43:19:
f7:3a:b5:c0:b4:79:07:e5:2c:a4:fa:e9:46:d2:df:4e:1d:f5:
a7:55:38:f3:37:70:a4:7c:fe:73:44:e2:af:2e:b3:11:19:f1:
54:3f:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:41 2026 by rpki-client