Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: T5fIfGtoVPksUVXp14lsaXLlw1viNnN9EscbaGKMNhE=
Subject key identifier: 3A:0A:A0:2F:48:4E:59:96:DD:1D:E7:EA:32:36:57:D2:7C:5D:36:AF
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019D97E18EE46F2CC0771F320070E7DCA72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:00:34 +0000
Manifest this update: Thu 16 Apr 2026 20:00:34 +0000
Manifest next update: Fri 17 Apr 2026 20:00:34 +0000
Files and hashes: 1: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: YgIwVWakoxEKtXQZIgIMvf1T+Q6ZRlrbR/knzz78bR8=)
2: ltCY0LbA7g04AeojWAPe920Jtrs.roa (hash: j5WamdPrlkidU1jh7KsMKpw2rhoydKcyJk2/fHehOzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:8e:e4:6f:2c:c0:77:1f:32:00:70:e7:dc:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Apr 16 20:00:34 2026 GMT
Not After : Apr 17 20:00:34 2026 GMT
Subject: CN=3a0aa02f484e5996dd1de7ea323657d27c5d36af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:91:b2:ab:12:7c:80:48:d0:96:58:75:ff:e2:
5c:39:55:9a:2f:80:8f:04:9f:62:38:72:8c:81:84:
ee:2e:66:e0:e2:d1:c1:f2:c6:98:29:46:68:53:e9:
e3:97:9f:70:1f:2c:a7:e5:eb:65:48:e9:ff:cd:a0:
7e:9d:aa:04:80:50:0e:b7:88:0d:af:09:25:80:36:
4c:71:f8:27:fd:23:89:28:7a:10:50:34:fd:9a:7e:
a3:b1:c5:34:56:66:79:a5:4d:ef:19:94:e8:63:af:
ae:77:e5:03:10:d4:4a:df:35:58:71:7a:1d:eb:f7:
dc:9e:32:97:86:92:83:fd:70:cf:d2:fa:ea:b6:18:
17:1c:f1:6c:10:c1:84:5c:d4:8e:d8:e7:1f:e8:6d:
76:b7:60:ee:b7:a2:39:2c:73:df:b1:9a:a8:07:13:
3f:de:d7:c3:74:aa:20:59:88:5e:77:cc:dd:dd:c8:
22:7b:01:71:5d:08:1c:1a:1e:18:e7:71:65:e3:14:
8a:9e:76:e6:1d:e9:03:f6:f5:1d:08:a6:93:24:42:
18:3a:41:b0:0f:a7:ef:06:08:0d:48:a4:0c:88:32:
7d:1b:fa:f8:8c:72:e4:ee:14:36:40:2f:c0:a2:1c:
07:5d:8d:11:73:6d:5e:6f:a1:a2:25:31:00:da:de:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:A0:2F:48:4E:59:96:DD:1D:E7:EA:32:36:57:D2:7C:5D:36:AF
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:7b:1c:e7:4a:af:d0:49:a6:34:35:c8:d8:ef:23:ac:f3:
59:90:cd:cf:99:73:a8:10:85:fe:ff:ac:e2:33:05:86:13:ed:
cd:32:d5:77:83:a5:fc:bd:2a:7d:eb:38:d0:5c:c7:f5:5d:ee:
c8:fb:40:f2:bf:4c:79:d8:a1:58:77:9a:ef:93:42:b2:9a:94:
80:f2:4c:0f:dd:aa:7f:e0:04:f6:bb:a9:8e:9c:95:c1:2e:96:
0a:5f:17:da:91:6d:cb:aa:03:99:7c:28:d4:c2:27:4d:6d:16:
c3:89:50:e7:32:82:d0:41:c5:69:9e:32:37:bf:ab:f7:46:10:
23:60:75:dd:6c:6d:2a:48:c4:eb:bb:b7:be:17:e2:b1:10:29:
b4:05:70:0f:f0:ca:25:d1:8d:ce:02:19:a7:53:9e:48:00:5a:
36:7d:b6:4c:75:fe:ca:ac:f6:2d:c4:2c:6e:86:b4:d0:57:72:
d9:ce:ee:c1:40:2d:cb:86:b0:34:6a:23:95:19:81:96:f3:43:
7e:1c:de:fc:98:d4:8f:89:a5:4e:6c:b2:c8:d4:7d:e0:b3:47:
3b:12:0e:af:5b:1e:af:f1:16:bc:94:8f:6d:e9:cf:9f:fd:7c:
b0:66:cc:03:df:e5:75:49:35:c8:50:a0:3c:03:3f:24:6c:71:
96:58:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:05 2026 by rpki-client