Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: F3CnqqDJv8RnVRJQ8QgzYpQicNZZykPnw6zXUpMMoak=
Subject key identifier: 42:32:C7:FF:71:2B:28:D6:9E:6C:EA:1D:13:F0:AD:CB:E7:7A:F1:FC
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019D984FE100EE6241C5EF628301A39C539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: 4_Zg75KgBPP6BBMIFU4oYXsmHJE.roa (hash: 99GMcdSiV+hIImiUcGfIB2OPx0b9crsIvHTa4c9Qx/8=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: ElhT4EaqHhIufaKgbm/ePiQGvTGDfPc1huw6HoCIdss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e1:00:ee:62:41:c5:ef:62:83:01:a3:9c:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=4232c7ff712b28d69e6cea1d13f0adcbe77af1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:0a:0d:92:de:99:ea:30:8e:c8:7d:07:7c:
b7:ac:8b:c7:6f:4d:17:cd:9d:f3:91:43:d7:e2:aa:
29:89:75:71:a3:87:5b:98:de:6f:fe:e8:b0:88:b9:
2d:d2:42:e9:56:cd:63:6b:ce:25:12:66:f1:8e:b3:
4f:db:6f:e8:4c:e8:72:90:f4:cb:45:96:8c:6c:91:
91:42:8e:97:ce:87:27:7a:53:dd:e8:22:37:0f:5e:
90:10:f7:39:98:dc:e8:1a:13:fe:e7:50:6b:4f:04:
c8:78:c3:cb:ad:c3:b8:88:e2:2c:c4:1f:d3:fb:1b:
8a:58:01:01:60:72:cb:ac:95:c1:ac:df:7e:df:8a:
00:2f:54:c1:b3:da:ea:9d:d5:9f:52:5e:cd:d3:4b:
e5:3b:24:cb:d5:00:d8:d4:d9:ab:36:fe:60:27:69:
e8:5a:6d:e5:e8:92:fc:ef:1d:ff:89:0c:11:a7:62:
b1:1f:d1:4a:17:33:e8:1f:93:a9:4a:75:60:f7:75:
7d:a2:ee:0b:c7:68:2d:61:85:f9:fb:54:57:f2:bc:
2b:c1:34:87:ef:75:a7:99:16:d0:60:54:bb:54:ab:
00:19:34:0e:62:29:16:9f:f1:ef:ac:62:dc:43:c7:
0d:68:30:6a:be:c2:73:8b:94:1a:85:08:06:c5:1a:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:C7:FF:71:2B:28:D6:9E:6C:EA:1D:13:F0:AD:CB:E7:7A:F1:FC
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:0d:68:be:99:e8:cc:93:86:6d:5d:66:79:51:9e:b4:87:
94:df:87:a9:ac:38:e3:e9:1e:0a:51:ac:4d:0f:1d:69:3b:c9:
da:6f:d2:8d:a5:30:eb:21:ce:74:98:45:11:0e:20:5e:83:99:
ea:4f:a7:4e:95:5b:19:3d:a5:45:a4:56:b6:eb:2c:fe:55:85:
36:4c:9e:a8:ae:7b:60:3c:db:4f:3b:2c:12:cd:8a:7e:b0:3a:
63:16:4d:25:02:8a:29:e6:a6:93:47:d3:20:6a:d9:61:73:ac:
7d:96:ea:c2:94:6b:1d:d3:3c:62:4f:4f:6d:c7:44:37:d2:34:
58:35:c5:2d:5c:f9:89:db:e3:a4:52:56:9d:69:ba:5f:8f:ed:
04:7d:ae:33:0a:9b:f0:9c:e3:d6:9d:c4:f2:33:46:41:ee:e8:
8c:6d:09:e9:51:c8:8b:8d:c9:8b:6c:0b:4e:e1:83:90:c1:07:
11:c2:9a:42:81:d3:4d:a4:c4:ab:ad:e6:62:da:12:69:17:2c:
8f:ea:3a:b5:ca:e4:27:c9:69:e3:dc:95:53:bd:a6:3e:ac:28:
80:59:3a:86:32:95:88:6e:95:76:fc:74:bd:fe:7b:20:c6:3b:
de:24:4c:7d:c4:f1:64:1b:a7:fa:f7:5b:72:16:f8:02:fe:21:
22:34:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:36 2026 by rpki-client