Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: +ZFHaZ5gxjtBm3HSkP6JiyDyzs2EScyzcwCzC22kJgE=
Subject key identifier: EB:F7:34:78:81:0D:BF:B5:6E:2B:47:5D:32:6D:EB:CF:AB:B5:8F:C7
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019D99D0CBCCF62CAFAFDF3E68581BBA5921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:30 +0000
Manifest this update: Fri 17 Apr 2026 05:01:30 +0000
Manifest next update: Sat 18 Apr 2026 05:01:30 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: DjZ+c3ikSiaJdeH0oT0OS42zbd18fCbJs+SWJa5To8o=)
2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:cb:cc:f6:2c:af:af:df:3e:68:58:1b:ba:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Apr 17 05:01:30 2026 GMT
Not After : Apr 18 05:01:30 2026 GMT
Subject: CN=ebf73478810dbfb56e2b475d326debcfabb58fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:a7:43:cb:28:5b:00:94:6c:06:93:4d:5c:
2e:c6:04:cb:4e:ab:da:cb:25:17:08:51:43:04:cf:
d6:72:71:9e:cb:ed:1b:6a:0a:aa:e4:6f:21:97:f5:
12:f8:2a:f2:25:70:61:ce:b4:0a:1d:81:0c:08:18:
2b:44:fa:48:74:53:ff:4a:99:27:d4:fe:49:14:f8:
44:87:0a:30:d2:6f:f4:d4:1c:66:b7:28:53:1f:f6:
01:e1:01:a3:e8:0b:19:4b:c6:fa:1e:47:b5:fa:d3:
2e:a6:b8:de:cd:27:ea:0e:93:d6:cd:79:7c:93:8f:
88:1e:df:36:00:b2:42:27:ee:6e:1a:62:17:b7:4c:
6c:2a:ee:0b:81:c0:77:ad:15:a8:37:35:a0:3e:fd:
e5:44:d0:06:23:c9:8d:20:46:92:a6:87:78:69:84:
a9:79:a0:72:27:49:7b:06:fd:82:ee:a8:27:b2:e0:
bd:f1:f8:a8:5a:f4:c8:37:3d:50:cd:e4:c0:0c:84:
f1:cc:23:84:67:77:bf:de:1c:88:71:76:61:22:1c:
3a:b9:a6:da:ce:9a:fe:36:42:b8:2d:6e:d9:3e:6c:
5b:dd:7c:0e:61:29:4c:51:42:a1:5b:e2:a8:55:55:
24:5c:8f:97:54:6b:38:e7:44:0c:c5:2b:90:1f:8f:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:34:78:81:0D:BF:B5:6E:2B:47:5D:32:6D:EB:CF:AB:B5:8F:C7
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:91:11:7d:d2:5b:6e:6e:b7:d0:af:16:ff:ea:1a:5a:a1:e3:
52:65:6d:99:b5:09:f4:6a:b0:6b:58:bc:e9:d0:91:ba:1b:1a:
38:d4:71:c8:2f:55:ee:bf:fe:01:65:d7:da:5f:04:ba:53:ea:
c7:51:8a:53:7e:c3:88:e0:ce:b5:b1:79:91:23:a2:5e:30:9b:
6a:3c:d3:61:ec:10:00:01:9b:1b:06:dd:c8:b8:04:48:b9:62:
06:5e:ed:48:de:48:3e:c1:7d:1f:85:65:b4:58:72:27:89:6c:
82:26:db:aa:42:5d:b5:e9:98:d5:9e:02:95:91:10:7c:76:71:
f4:85:18:9d:42:07:97:e4:7a:bf:cb:24:95:7f:e3:63:fc:aa:
79:bf:cb:9d:00:83:c0:fe:be:c3:b1:e5:4e:69:cd:d0:3e:ec:
b6:10:94:cf:b4:ee:74:bb:6b:be:2e:8a:42:7a:11:da:40:5e:
02:3f:7c:74:d0:41:c3:07:5a:d5:19:18:48:4a:c1:8e:c1:bb:
40:2c:18:14:c5:93:c8:f5:af:6f:0b:22:96:c0:40:d0:a7:81:
b6:31:f6:e2:52:3b:23:01:18:c8:b8:88:53:56:2a:a0:da:be:
a2:00:a2:34:e6:ce:f7:1f:4d:70:35:2b:5a:8d:42:76:3d:62:
bf:f6:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:39 2026 by rpki-client