Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: 5larpTWFLNOCZIvfcrrX8PuVb+2dh3bq1/QOHaWSH5I=
Subject key identifier: 42:F2:DD:D9:67:1F:65:2C:0E:1D:CE:38:5B:9A:B2:84:53:24:7F:E8
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019DA4C13E00F209B5E1D7E3FAEAC93F8E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0CD9
Signing time: Sun 19 Apr 2026 08:00:20 +0000
Manifest this update: Sun 19 Apr 2026 08:00:20 +0000
Manifest next update: Mon 20 Apr 2026 08:00:20 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: LqW4dyxxeHB1suU/nq2MBwXEQr1NbbPNJ69ZzbL6670=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:3e:00:f2:09:b5:e1:d7:e3:fa:ea:c9:3f:8e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Apr 19 08:00:20 2026 GMT
Not After : Apr 20 08:00:20 2026 GMT
Subject: CN=42f2ddd9671f652c0e1dce385b9ab28453247fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:6a:e0:3a:f0:1c:82:6d:52:d9:72:56:cf:
46:b0:36:e2:6f:42:52:b2:c3:74:b6:2b:b3:bf:37:
75:99:25:0d:88:f8:5c:29:4d:12:75:7a:29:2b:d2:
b9:43:e5:03:b0:53:cc:00:b8:d7:d2:50:a6:54:97:
aa:a0:f9:52:c0:4a:13:c1:92:fd:c2:37:1e:d9:cf:
d9:4d:ef:6a:9d:29:91:49:64:7d:0e:fe:2f:5e:66:
79:1e:89:8c:64:e9:5f:1b:ae:f8:e0:f8:13:1e:4a:
be:db:38:9c:4f:6f:12:09:56:cb:ac:d1:27:8f:92:
21:5a:1b:77:34:83:9e:96:ef:51:20:5c:00:03:54:
1d:41:32:fa:e7:a2:0f:a0:7c:60:7c:bc:a7:39:06:
65:b4:34:74:d6:5c:d7:9b:29:44:04:fc:a5:cb:57:
30:55:e4:a4:11:ab:19:70:21:f5:71:f4:3b:79:0e:
7e:6a:cc:75:6e:fc:4c:9c:c3:e8:5f:3a:15:7d:61:
1e:cf:f3:b6:16:97:29:f9:e7:9d:f8:1d:88:25:dd:
39:03:76:d2:1a:25:8a:7f:cf:be:a0:44:a2:be:a7:
f9:a5:07:bc:6e:b1:f1:3c:ee:99:fa:d7:af:59:b1:
0a:9e:37:ab:71:34:92:54:4d:03:7a:bd:f4:09:a9:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:DD:D9:67:1F:65:2C:0E:1D:CE:38:5B:9A:B2:84:53:24:7F:E8
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:81:cf:89:a9:fb:47:50:f6:37:2d:59:5a:c7:bf:72:82:0e:
da:cc:36:60:c8:82:da:00:ad:3d:86:25:8a:13:c0:54:04:38:
95:2d:da:21:bf:a7:94:85:08:12:e2:e5:33:9e:f4:5c:d0:f9:
e3:7e:be:5a:fa:68:f6:9c:76:a2:d7:82:3d:e1:f0:1c:c6:42:
84:78:e6:dd:9d:1c:a7:a8:57:63:dc:fb:10:84:19:67:0f:db:
e1:b2:58:4d:23:c2:d7:a7:66:8d:d0:71:eb:11:23:41:f2:7b:
26:5a:87:a1:0c:4d:b5:ea:8f:b4:3d:30:9c:53:f8:e0:c3:1b:
ba:39:2b:a6:98:5e:72:f4:a2:4a:ae:b5:ba:17:18:d9:05:cf:
03:a9:f0:f9:cb:02:48:ef:38:f6:97:d2:42:7c:43:30:5e:86:
eb:d8:89:7d:d7:e5:c7:db:a3:36:d2:77:a1:fa:6b:67:8b:c4:
50:24:03:fe:93:25:bd:90:ab:23:70:a2:2d:1e:91:26:0b:ac:
90:ba:75:f8:71:d4:5d:e6:13:f0:20:99:31:10:25:0c:0b:54:
ce:a4:5e:18:3b:7e:14:41:10:96:cc:5e:86:bc:37:98:58:9b:
c6:6b:06:bd:4b:9d:6d:39:38:79:22:81:80:e1:42:2a:cc:e9:
54:f7:57:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwT4A8gm14dfj+urJP445MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWZkZDliZGZjNjBhYmEwNjJlN2M1NWMyYWUyZTkxOGEz
MjljY2EwHhcNMjYwNDE5MDgwMDIwWhcNMjYwNDIwMDgwMDIwWjAzMTEwLwYDVQQD
Eyg0MmYyZGRkOTY3MWY2NTJjMGUxZGNlMzg1YjlhYjI4NDUzMjQ3ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K9q4DrwHIJtUtlyVs9GsDbib0JS
ssN0tiuzvzd1mSUNiPhcKU0SdXopK9K5Q+UDsFPMALjX0lCmVJeqoPlSwEoTwZL9
wjce2c/ZTe9qnSmRSWR9Dv4vXmZ5HomMZOlfG6744PgTHkq+2zicT28SCVbLrNEn
j5IhWht3NIOelu9RIFwAA1QdQTL656IPoHxgfLynOQZltDR01lzXmylEBPyly1cw
VeSkEasZcCH1cfQ7eQ5+asx1bvxMnMPoXzoVfWEez/O2Fpcp+eed+B2IJd05A3bS
GiWKf8++oESivqf5pQe8brHxPO6Z+tevWbEKnjercTSSVE0Der30CalmJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELy3dlnH2UsDh3OOFuasoRTJH/oMB8GA1UdIwQY
MBaAFBSv3Zvfxgq6Bi58VcKuLpGKMpzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUt
ZTY3MDI3MWVlMTQxLzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jMjJmOGMtZTExMy00ZDU1LWJjYzUtZTY3MDI3MWVlMTQx
LzEvRktfZG05X0dDcm9HTG54VndxNHVrWW95bk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7YHPian7
R1D2Ny1ZWse/coIO2sw2YMiC2gCtPYYlihPAVAQ4lS3aIb+nlIUIEuLlM570XND5
436+Wvpo9px2oteCPeHwHMZChHjm3Z0cp6hXY9z7EIQZZw/b4bJYTSPC16dmjdBx
6xEjQfJ7JlqHoQxNteqPtD0wnFP44MMbujkrpphecvSiSq61uhcY2QXPA6nw+csC
SO849pfSQnxDMF6G69iJfdflx9ujNtJ3ofprZ4vEUCQD/pMlvZCrI3CiLR6RJgus
kLp1+HHUXeYT8CCZMRAlDAtUzqReGDt+FEEQlsxehrw3mFibxmsGvUudbTk4eSKB
gOFCKszpVPdXBw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:21 2026 by rpki-client