Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: Zs6kKmTViM5geBkXNULXJ6iHtcOBiYvD5LBhM7hzgo8=
Subject key identifier: D3:40:86:8C:6F:B1:C9:B9:39:5C:0E:E1:EF:08:CB:59:89:34:BB:FA
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019D99D09103A167B38986B88914982FBE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 1386
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: 0tgi-bedT7M90yonGJNHWcEtkks.roa (hash: jx45i7P1C49PseKbfYGkTcUnQdu8nI1iX163v3oChsI=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: /T6bsPkLN/BoOaTrfh45k0V17eZR5RoZ4pIQsPp7mZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:91:03:a1:67:b3:89:86:b8:89:14:98:2f:be:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=d340868c6fb1c9b9395c0ee1ef08cb598934bbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:71:c0:b3:e9:33:25:18:2c:2f:b2:36:7c:
64:e1:7f:be:6e:92:07:00:be:7e:3c:1c:23:d7:76:
5c:5a:6f:35:93:6a:7e:dd:38:51:46:e0:48:4a:6d:
71:d6:43:7e:c0:1c:d7:9d:45:e6:5c:61:28:b5:7e:
98:0c:f2:b2:65:06:7e:a3:a7:92:2d:ce:c4:55:8e:
69:7b:ba:0e:16:dd:12:8e:d8:bf:b6:23:45:be:96:
ba:40:af:b7:72:ee:83:0f:28:ef:ed:c8:a9:7d:ab:
14:20:44:aa:3f:b9:dc:40:61:f9:74:97:b6:67:e0:
45:85:bd:0e:ee:82:4b:76:fb:cb:23:cb:6f:35:a1:
5e:fb:a2:85:33:97:06:7c:5f:f6:73:6b:a6:f1:6e:
53:28:33:17:59:3c:0c:0e:8d:db:4e:5d:5f:bc:36:
76:29:56:ae:41:86:a7:7d:ce:ee:5f:05:39:c0:67:
21:dd:ed:ed:05:26:69:f0:1e:cc:ff:75:5c:a0:92:
df:e6:4f:02:b6:e8:bb:00:0e:84:69:07:72:8a:a1:
dd:9d:52:49:02:4d:20:e1:4e:42:ea:87:51:d9:c6:
f6:48:9d:7e:f4:d1:18:52:76:27:39:9a:26:c3:21:
7e:02:d7:89:26:17:a2:79:28:9f:04:ed:48:a9:51:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:86:8C:6F:B1:C9:B9:39:5C:0E:E1:EF:08:CB:59:89:34:BB:FA
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:f2:16:07:de:76:a6:ce:73:7f:4e:2a:27:9f:71:fb:72:
79:c6:6e:dc:fb:c5:f8:d7:e6:6a:cc:b2:6c:ae:b7:b9:a8:1d:
d5:68:92:81:ed:ac:f2:94:2a:33:23:28:05:e1:f8:c1:65:e1:
0d:0d:ef:f1:bc:5b:34:3d:bc:37:53:f4:28:40:f9:75:e7:10:
4b:8c:1e:9c:09:11:47:74:a6:30:f6:98:56:13:a2:fc:9e:cc:
d5:e8:52:83:d0:7e:ef:ff:32:40:d4:52:22:61:2d:fd:81:31:
26:64:b8:de:b1:6f:0d:9e:0d:28:10:7d:67:e5:03:eb:90:ca:
bc:0c:2c:e4:5e:87:61:4a:0b:03:8f:bd:37:8d:7b:0b:39:18:
de:34:df:2e:3a:ff:04:9d:83:eb:7b:d4:10:04:0a:c6:a7:01:
4a:43:27:f1:cd:1b:6f:79:c6:e3:03:82:2f:21:15:90:d1:04:
41:be:1a:48:7b:aa:21:14:ae:9c:25:6e:9a:77:26:42:9a:d8:
b8:64:8a:53:9b:4e:1f:5c:28:28:69:ca:bb:54:f4:d4:ae:36:
29:76:30:67:d8:65:b3:6e:f9:3b:ba:9a:97:37:3c:ee:bf:f4:
b9:95:f9:81:de:39:8f:73:6e:51:37:8c:a9:76:ab:4b:f0:97:
42:eb:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:17 2026 by rpki-client