Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: jHGBSgQgYaGK5Mq13mRAGAuLX6hLOkxTPSzW4u3HtlQ=
Subject key identifier: 3D:77:E8:73:4B:42:71:EA:F2:2F:1D:37:96:48:3F:B7:05:15:91:81
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019D97AA89E5F773F9AB46C6773A2D7BCF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 1643
Signing time: Thu 16 Apr 2026 19:00:29 +0000
Manifest this update: Thu 16 Apr 2026 19:00:29 +0000
Manifest next update: Fri 17 Apr 2026 19:00:29 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: AfHfSrSA76J/p7XykJrR1dVd1BBD77wAVsCAJj6bX/w=)
2: jfn31bWoPt5u8J8dk_jaDuYtKVY.roa (hash: KodCP7xC+csniIon7z4178+lNkYaP00De8YC+4THaAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:89:e5:f7:73:f9:ab:46:c6:77:3a:2d:7b:cf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Apr 16 19:00:29 2026 GMT
Not After : Apr 17 19:00:29 2026 GMT
Subject: CN=3d77e8734b4271eaf22f1d3796483fb705159181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:cd:e9:ae:2d:c8:ca:5c:e2:82:49:88:d4:
f7:23:8f:4a:59:e6:7e:8b:31:c2:f8:67:87:bc:b6:
25:ae:2c:26:91:ad:2a:e2:69:a7:af:28:7f:cc:95:
33:bc:db:81:29:a3:c3:88:a4:0f:36:2e:c6:d2:2f:
6f:71:11:27:8c:45:b6:f6:96:cb:af:8f:7e:ca:f2:
57:ca:18:11:b8:09:f6:b0:ad:13:97:26:1d:04:d9:
79:d9:d2:25:0e:0d:84:f5:ff:c1:fa:64:8b:61:4d:
c7:92:8f:e3:96:3d:13:3b:8b:6f:16:c3:76:6c:a9:
95:ce:e8:25:97:fe:e1:f5:a9:ca:cd:31:2d:25:09:
64:c2:5e:f9:29:b5:5b:e4:76:62:c7:ba:64:7e:86:
2f:33:c0:25:06:50:e1:71:03:f6:f6:29:03:86:c5:
bf:9a:27:6a:e0:16:ce:b0:63:3b:e5:d8:cd:b9:92:
e6:10:0e:6e:8c:23:e1:8f:78:ce:39:85:37:4b:35:
b8:0b:fd:ac:b6:e2:55:90:66:fd:41:f4:15:3a:c1:
ce:f7:13:6d:7b:7e:a0:2a:c3:94:df:15:9c:a4:a8:
2a:fd:22:24:d0:d8:fc:82:f4:34:d4:61:68:57:03:
16:fb:62:4f:7a:13:2c:00:b1:6a:40:73:7c:86:a0:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:E8:73:4B:42:71:EA:F2:2F:1D:37:96:48:3F:B7:05:15:91:81
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9c:9a:49:23:ba:64:2c:a6:82:a9:e5:5b:cf:6f:da:3b:4e:
c9:70:6d:6a:a8:37:c8:36:1a:15:24:02:6b:d6:a9:8b:ee:73:
04:52:92:83:03:7a:ef:da:dc:00:09:22:a7:f9:7b:37:0c:af:
a0:17:b0:c0:8b:80:bb:56:85:21:04:9d:9f:f5:c4:43:6f:02:
18:ed:ca:08:e6:37:29:fd:04:ff:ee:66:42:1b:14:1c:2d:da:
51:7b:ad:bc:1a:3b:c3:08:4e:08:09:ab:aa:e1:53:22:fd:33:
ec:c3:1a:f0:3e:da:80:6f:09:13:c6:ac:c9:40:0b:90:3c:20:
00:7c:e3:cb:d3:31:ae:7a:45:e4:93:fc:98:37:e4:89:fa:24:
d8:ca:48:7c:73:03:71:12:95:cf:52:2e:c6:87:3b:c4:a8:7f:
9d:af:1b:f5:23:f2:91:51:8f:67:c5:d9:bb:05:44:60:e0:0d:
9f:39:27:bc:79:14:9c:04:46:4d:92:12:e0:30:c2:e8:bb:cc:
53:54:4a:35:93:60:39:8b:a5:74:8e:fc:87:28:60:00:ed:fa:
ce:85:c7:3e:2a:1b:51:6f:d3:15:be:d8:de:80:e9:88:a9:eb:
8d:05:32:73:7b:c0:ed:b5:df:e3:72:7f:4d:49:f5:34:af:e9:
c9:96:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:42 2026 by rpki-client