Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: vnbr9kKD/lyQUyktSZvmvE7C++xMWnXjoUIF1Qg9s4Y=
Subject key identifier: E0:91:CA:8B:E7:91:64:52:CD:B7:23:4B:FC:7B:29:7A:70:FF:02:3F
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019D99D09C7CBFEEE9B86160AB29F8A99A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 0853
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: ZpHLlHKuuKvZS8t7CK42oT5j3NVPtS+yyHp3ePXBsvA=)
2: zegCreMAsWuVQ_WHgf--0l2ZG3E.roa (hash: hG7GTDgQ0+UKynRc4qSwZNfDUaAY6uCRSrC2M4o4Fvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9c:7c:bf:ee:e9:b8:61:60:ab:29:f8:a9:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=e091ca8be7916452cdb7234bfc7b297a70ff023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:45:16:8b:cc:5e:29:ac:62:c2:50:b6:65:
51:8a:92:0a:12:fe:91:41:82:84:d1:91:d3:cd:4b:
e9:52:0d:d9:d4:61:67:04:49:11:61:84:28:88:f2:
a8:10:71:87:20:92:4e:40:fe:18:42:71:5a:06:d8:
a6:6c:5f:c8:e6:16:c2:ac:a6:2a:27:45:4b:3d:6d:
c0:00:34:b8:64:8a:1d:eb:33:4b:6e:2f:fb:1c:b1:
10:39:dd:76:52:75:66:a7:2e:5d:09:92:57:d7:eb:
bc:bc:5f:cb:f4:21:e8:3c:5d:7d:04:c5:cb:3d:16:
d5:98:4a:09:a6:09:a2:c1:f7:69:ae:09:ff:e4:57:
2f:c8:fa:65:0e:0d:d9:55:46:7d:62:4a:f4:75:e5:
8b:36:ba:3e:b6:2e:80:d5:21:70:9d:d6:8a:2f:55:
95:0b:77:96:f2:b7:2f:ed:7c:0e:c9:90:99:ed:c5:
b4:47:40:5a:88:95:08:7f:e4:4b:3b:13:9a:15:1c:
b2:83:82:b5:5d:46:e9:ea:0b:d2:63:a1:af:54:2d:
64:9e:1b:7f:b8:a4:0b:1e:ba:57:4e:3d:2c:9a:2b:
8e:b0:08:30:31:aa:ae:d0:73:99:ee:92:50:eb:9d:
d8:e4:e1:c9:8a:54:68:9c:43:20:36:b7:15:fd:4a:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:CA:8B:E7:91:64:52:CD:B7:23:4B:FC:7B:29:7A:70:FF:02:3F
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:7b:ea:90:e7:8e:0c:c8:47:55:41:57:75:ea:38:0c:ec:
3b:a8:79:33:8b:9b:38:68:b4:75:f6:b2:4c:5f:3e:73:ce:dd:
2e:83:11:d9:03:62:0d:71:29:f2:5e:55:e6:c9:c8:0d:a3:1c:
fb:eb:3a:fc:0c:b3:f2:07:11:34:aa:6f:ac:54:3a:e3:9e:a1:
d7:93:a6:ea:3a:a5:26:58:27:13:ba:df:80:ac:84:ae:95:f4:
a8:3f:14:a2:94:11:06:ac:26:bc:bb:68:f8:bf:ed:cb:69:08:
69:c5:71:44:00:b7:99:cd:5f:63:a2:de:09:8b:62:9b:c7:d2:
7b:73:3c:b5:92:53:76:1a:8d:f5:7f:b6:eb:59:39:28:49:17:
9c:dd:0b:4d:29:5b:b1:f3:bb:af:58:c8:82:05:1a:1a:81:b3:
32:18:26:c8:a2:13:a9:14:4f:40:aa:50:f8:55:6a:3c:c9:bc:
85:5c:cf:8e:4a:a0:79:27:30:da:22:14:52:3e:01:58:44:42:
b4:02:f1:53:c2:ab:4e:40:6d:b7:e1:a7:fa:24:9f:bd:39:41:
35:64:0a:fa:a7:27:a2:fa:87:9b:e7:c1:8f:6e:62:57:e1:60:
17:39:f1:61:5c:93:02:72:8a:52:44:fb:28:8a:e1:50:14:da:
55:8a:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:04 2026 by rpki-client