Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: NcPBrsm8HfKUn2XfTLhphSwZu7nLMcRB9b4edXE+BL8=
Subject key identifier: 14:64:C8:86:BB:AA:75:DC:54:C1:00:51:58:B0:65:59:BA:BC:22:0E
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019DA453B70E3C72AE4FD28DFC73816556BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 136C
Signing time: Sun 19 Apr 2026 06:00:42 +0000
Manifest this update: Sun 19 Apr 2026 06:00:42 +0000
Manifest next update: Mon 20 Apr 2026 06:00:42 +0000
Files and hashes: 1: 7Xjnrks0V0KJBUvovHU5FPRBPgI.roa (hash: Uj+974AkqjIOmRxxULMnodgkGY00aGKR4YY4cfemHV0=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: MJi9+xB4+oMwP7kgHFHIar6uj3qtVjf1rBoUZm2vrgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b7:0e:3c:72:ae:4f:d2:8d:fc:73:81:65:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Apr 19 06:00:42 2026 GMT
Not After : Apr 20 06:00:42 2026 GMT
Subject: CN=1464c886bbaa75dc54c1005158b06559babc220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:61:bf:be:0c:79:37:d2:a6:6b:ed:77:12:
6c:4f:92:c1:a4:4b:36:e7:b9:a7:12:81:a0:be:ac:
8c:95:34:8a:94:b6:ec:c1:90:4b:89:03:a7:35:0d:
f3:46:c6:35:60:29:cf:3b:92:c7:14:ac:c9:9e:1a:
64:f7:54:a6:80:5c:a1:00:41:99:b6:4e:b8:e5:cf:
f3:19:2f:c4:a3:b1:00:d0:de:31:44:74:32:93:e0:
4d:a4:01:f1:91:01:ba:3f:4b:41:5c:5f:8f:42:9a:
51:79:fe:6e:0e:fc:e6:bd:0c:eb:93:a4:a3:bc:8d:
26:af:a9:e2:b3:91:4e:ea:93:fd:fd:b9:1c:25:7d:
0b:57:2c:53:59:06:a2:8b:db:e6:de:2b:6e:a6:ea:
79:87:22:af:96:06:03:f4:ba:55:c3:8b:5c:c6:fc:
5f:26:3d:6e:b7:92:e4:e8:17:fb:cb:5f:65:88:3e:
a9:e3:76:2c:f1:fb:85:17:b3:11:3f:90:02:a6:68:
76:99:f3:50:4d:2a:73:b5:96:32:2d:37:f0:72:bc:
5e:72:8e:54:8b:57:9a:14:48:73:57:b4:ee:d2:e5:
78:f1:8f:04:eb:5f:7c:fe:6c:17:d1:26:e9:6b:14:
0b:64:d6:a8:db:06:90:d7:9b:c5:f9:98:c7:66:67:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:C8:86:BB:AA:75:DC:54:C1:00:51:58:B0:65:59:BA:BC:22:0E
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b9:ce:78:ec:09:05:ba:d2:ac:8c:86:55:2e:3f:0e:4c:d7:
87:ad:76:af:70:c6:bd:fd:18:3d:ef:d2:f9:d4:cf:1b:5c:be:
f7:de:8e:68:0f:33:04:45:96:a9:6d:db:3a:9b:13:cb:d1:5c:
bc:5a:19:53:46:d1:75:ab:d4:6a:53:a7:d6:0a:fe:56:e8:e4:
7b:83:83:9c:33:41:ea:15:93:73:2c:47:f5:aa:c7:b0:c4:fd:
71:18:a5:89:c9:b2:53:23:8f:d1:e7:3b:fb:fc:6c:cc:80:82:
7b:47:ff:b5:9e:4e:50:58:4e:d0:18:2d:d5:ee:35:bc:84:b1:
e8:5d:b0:a9:4f:47:04:71:89:ff:e9:f9:7d:ae:c6:fd:68:32:
cc:19:3b:23:e3:ec:d6:89:02:42:16:9a:d5:ca:96:59:c0:38:
d2:09:14:5f:a6:79:07:80:75:fa:4a:92:97:07:3c:21:19:28:
0b:de:a6:dc:ae:6e:ba:cc:43:c7:a6:f9:c9:79:f0:f8:40:bb:
01:79:33:9f:ba:4e:c3:f6:c3:3b:ca:0c:da:04:d3:6f:75:50:
4c:42:05:02:f5:af:50:e1:b8:60:da:f7:65:51:08:14:84:57:
b3:4c:11:bf:25:c0:d1:61:f2:7c:a5:44:57:33:65:12:83:c6:
ec:1c:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:16 2026 by rpki-client