Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: 3/G6bCaiL3KHW1IhQ+PvNOINV0rolfSkjBlr1iTgOEA=
Subject key identifier: C4:1B:19:FE:92:D8:B3:61:D5:9E:39:50:11:4F:75:53:AD:A8:6D:76
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019D992B38E251E04A23346CA4A4DA2DA839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: TDFoazysAOPa+30lyF6fNvIg7jiMoDI6d6H/+rrDARo=)
2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:38:e2:51:e0:4a:23:34:6c:a4:a4:da:2d:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=c41b19fe92d8b361d59e3950114f7553ada86d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:8d:8f:46:96:98:30:fa:08:6f:ed:b0:e6:
3e:89:0d:52:d7:d2:be:de:19:50:ad:78:ac:33:70:
6a:16:0e:2f:d0:cb:32:42:47:9b:94:9b:fe:a7:ef:
14:af:20:98:e5:f2:af:30:e2:7d:ba:c9:2a:3e:05:
8d:17:60:22:df:ef:8a:6f:62:53:ee:72:e2:25:89:
6b:11:d1:3f:09:4d:f6:27:0f:04:df:cf:d9:e8:8e:
ca:d2:16:30:f5:82:03:b0:9c:0e:d3:b9:e0:74:0e:
d5:29:03:11:61:b1:11:08:24:57:cf:02:5a:bf:bc:
5a:53:4f:1b:91:66:67:d6:d2:4a:91:f5:57:2f:62:
07:62:34:1c:6b:dd:e0:65:53:3e:bc:9c:c6:0b:47:
a0:25:8c:72:62:75:30:41:19:6f:18:fd:dc:b5:bd:
1c:84:04:fa:6a:19:22:d4:d7:13:da:7d:65:be:86:
03:86:7e:7f:d8:c9:62:7e:77:af:34:6d:4c:6d:17:
e6:c1:6d:cc:45:d1:cc:1b:17:98:1a:cd:62:6b:a4:
a4:13:f0:0d:b9:77:93:73:1f:d2:02:8b:b6:a6:c6:
86:28:e3:ff:1c:a2:fc:a0:27:0f:10:1c:22:58:ae:
a4:ff:44:74:e9:51:f0:92:e5:6b:a9:e2:aa:f0:c9:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:19:FE:92:D8:B3:61:D5:9E:39:50:11:4F:75:53:AD:A8:6D:76
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d2:23:20:89:15:dc:40:07:2d:3e:91:75:59:ad:2f:ba:20:
a1:e5:e9:09:26:b9:3e:a3:d2:a3:6a:ef:be:14:22:c1:7b:62:
7a:e0:a5:b7:59:67:b3:6b:ce:0f:98:53:a8:1f:50:ee:db:8a:
73:d1:b6:4b:6d:02:73:69:e5:0e:ca:18:7e:97:0d:a3:69:ca:
80:2d:cf:10:f6:48:59:3f:ff:ca:fe:53:75:9c:97:4f:82:31:
26:1e:47:af:61:21:fa:9e:58:5d:27:ed:db:53:8a:27:95:ca:
bc:4b:66:a0:be:d0:4c:8d:f5:54:38:d1:ba:07:0b:d8:00:b6:
64:2f:c2:36:38:2e:cb:19:15:26:4a:e4:a0:2d:ba:aa:e2:2a:
1d:6a:36:18:2f:5f:ec:8c:45:e6:4d:0c:de:0f:68:b3:e4:c1:
9c:4a:f6:99:27:7f:7b:93:36:12:86:1e:f5:a0:2e:a4:7c:c1:
f4:ac:f9:b6:a6:03:6b:e3:1b:f6:c6:bc:c9:69:53:c4:57:1c:
33:a7:e2:51:3d:db:73:c6:44:0f:28:3c:12:7f:e8:bd:19:b0:
db:83:73:3c:8f:82:7c:2e:86:fe:14:80:7d:45:35:e5:62:81:
af:86:43:2a:33:4f:29:7c:f9:ab:0a:25:c6:32:94:11:4e:b9:
e0:87:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:19 2026 by rpki-client