
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier: 8PtFpxnW8wUKdNBgQ4FtWbAlskmYWo2pkLCrAb9Ij8A=
Subject key identifier: C3:77:FB:47:96:64:4E:0F:EF:EF:53:8C:AF:5B:9A:B8:5A:98:AB:7B
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial: 019DA45422D804FAE3FA9294641D61EC09AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 06:01:10 +0000
Manifest this update: Sun 19 Apr 2026 06:01:10 +0000
Manifest next update: Mon 20 Apr 2026 06:01:10 +0000
Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: RwGQwm/kiEtFIirmbxAmU5ZJnvyVdbMFkpniPvZx/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:22:d8:04:fa:e3:fa:92:94:64:1d:61:ec:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Validity
Not Before: Apr 19 06:01:10 2026 GMT
Not After : Apr 20 06:01:10 2026 GMT
Subject: CN=c377fb4796644e0fefef538caf5b9ab85a98ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:0b:9c:63:2e:dc:f8:af:e9:52:fc:09:7a:
c9:fe:4b:cf:14:ee:35:b1:e6:1e:d7:9d:3f:95:66:
21:43:b1:ff:31:c2:e5:0f:b1:73:b0:cf:52:45:c2:
99:f1:ee:3d:f9:c8:12:0d:c4:17:02:eb:bc:d3:34:
cc:76:96:d2:d5:85:9b:15:51:32:fc:f6:f9:e3:66:
9b:50:89:25:4d:7e:b9:0c:9a:ae:27:45:ce:55:86:
15:03:da:10:0a:35:65:ee:b7:ba:35:0a:bf:b9:24:
d5:98:fe:14:24:aa:9c:f0:9a:38:72:5d:5c:65:1b:
e7:6b:75:74:c6:6c:87:b3:c7:7f:65:89:b3:f4:79:
4c:52:e6:b1:87:57:53:1c:8d:21:9e:83:aa:61:11:
0e:8b:16:ef:78:2a:16:7b:1c:51:df:5a:d8:6c:55:
60:e4:58:56:df:b6:60:bc:9c:f7:fe:10:d5:66:ba:
ea:55:8a:a2:58:71:e8:8b:89:e9:8a:77:b0:21:50:
c2:de:25:c4:b1:5e:ec:a1:db:77:f9:83:8f:60:d4:
54:8e:a0:72:90:d4:45:29:0d:af:21:3e:f7:41:04:
0e:de:8c:aa:af:4f:2a:7f:9e:02:3a:f9:6e:8a:bc:
7b:39:5b:42:74:d8:8e:8c:c0:de:9e:32:06:ff:9d:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:FB:47:96:64:4E:0F:EF:EF:53:8C:AF:5B:9A:B8:5A:98:AB:7B
X509v3 Authority Key Identifier:
keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:72:8b:67:56:e0:73:7c:a9:df:02:bc:ae:84:09:ca:2e:a3:
12:46:5d:15:ca:ad:0f:73:5a:35:39:ba:60:ba:f4:57:c3:9f:
47:b0:c4:f2:24:80:6b:cb:ce:d1:aa:ba:1e:ff:dd:0f:78:de:
97:08:4e:d1:f8:57:8c:86:60:50:24:0f:66:e7:4c:f0:69:59:
5b:ee:0a:08:c2:3a:53:bb:a2:33:41:9c:46:01:56:d3:18:3d:
e1:db:3f:5e:c8:57:68:18:29:ef:ab:1e:12:32:de:cc:ce:f6:
fe:ce:cb:5b:54:bc:ca:77:f6:26:85:f0:98:c2:31:09:42:72:
81:12:9a:5a:f9:4b:32:6f:56:f0:92:06:c0:63:b1:6b:a5:f9:
0b:91:b1:b4:6c:ab:11:05:c4:88:75:80:99:fd:6a:6f:73:d2:
88:32:75:7e:38:a9:85:85:27:ad:66:46:02:ee:5d:75:58:57:
da:10:c1:82:f8:9c:cc:cd:01:96:6b:da:fb:90:68:1e:48:66:
87:63:ae:7a:60:1d:8e:51:10:7d:2e:19:42:6c:dd:90:3e:6b:
e6:15:bd:42:c4:e1:49:aa:41:fa:a1:1d:76:0d:30:50:cc:c2:
14:c4:06:5c:a7:ce:ba:4a:5c:2a:46:60:f0:4d:2c:d6:47:e7:
b6:bb:c5:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVCLYBPrj+pKUZB1h7AmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl
NDZlNmIwHhcNMjYwNDE5MDYwMTEwWhcNMjYwNDIwMDYwMTEwWjAzMTEwLwYDVQQD
EyhjMzc3ZmI0Nzk2NjQ0ZTBmZWZlZjUzOGNhZjViOWFiODVhOThhYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ0LnGMu3Piv6VL8CXrJ/kvPFO41
seYe150/lWYhQ7H/McLlD7FzsM9SRcKZ8e49+cgSDcQXAuu80zTMdpbS1YWbFVEy
/Pb542abUIklTX65DJquJ0XOVYYVA9oQCjVl7re6NQq/uSTVmP4UJKqc8Jo4cl1c
ZRvna3V0xmyHs8d/ZYmz9HlMUuaxh1dTHI0hnoOqYREOixbveCoWexxR31rYbFVg
5FhW37ZgvJz3/hDVZrrqVYqiWHHoi4npinewIVDC3iXEsV7sodt3+YOPYNRUjqBy
kNRFKQ2vIT73QQQO3oyqr08qf54COvluirx7OVtCdNiOjMDenjIG/52uCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN3+0eWZE4P7+9TjK9bmrhamKt7MB8GA1UdIwQY
MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt
YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5
LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHKLZ1bg
c3yp3wK8roQJyi6jEkZdFcqtD3NaNTm6YLr0V8OfR7DE8iSAa8vO0aq6Hv/dD3je
lwhO0fhXjIZgUCQPZudM8GlZW+4KCMI6U7uiM0GcRgFW0xg94ds/XshXaBgp76se
EjLezM72/s7LW1S8ynf2JoXwmMIxCUJygRKaWvlLMm9W8JIGwGOxa6X5C5GxtGyr
EQXEiHWAmf1qb3PSiDJ1fjiphYUnrWZGAu5ddVhX2hDBgviczM0Blmva+5BoHkhm
h2OuemAdjlEQfS4ZQmzdkD5r5hW9QsThSapB+qEddg0wUMzCFMQGXKfOukpcKkZg
8E0s1kfntrvFSg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:31 2026 by rpki-client