Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: pFXmvu+co4kPJs0MST6cQfhv/nC7ju9MAheLpHGseGc=
Subject key identifier: BD:8B:3C:07:A0:73:68:F8:91:B3:52:17:D9:BA:51:08:91:69:77:EB
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019D984F843083ED08E275476D722FD4247E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: 67efuGj2jl/sLUdBqgE3XbrHDAz/BZxODUVe6TiPXKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:84:30:83:ed:08:e2:75:47:6d:72:2f:d4:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=bd8b3c07a07368f891b35217d9ba5108916977eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:29:9b:5f:68:27:d2:e9:88:6a:3f:f2:15:
a1:65:69:ec:4e:f4:88:46:07:dc:8c:a8:05:f5:9c:
6a:c2:73:3d:e3:58:78:31:ea:df:f5:fe:a6:de:a1:
08:a9:9d:92:fd:2c:d1:0b:93:37:ce:fc:7e:e6:e9:
b1:1e:bb:6f:9e:52:d3:da:24:91:28:24:f2:ed:94:
15:f4:f3:3b:e6:8f:ba:23:40:6e:cb:e1:10:00:75:
b0:9f:13:a8:09:4f:ad:15:f5:26:8e:bf:72:2e:0f:
18:79:a4:93:84:76:ac:d0:fc:0a:2e:d8:1a:7b:64:
a4:07:c6:cf:3d:c0:56:be:a5:0c:61:59:62:51:2a:
d6:5f:3e:c5:a7:53:1e:d2:ba:92:f2:95:16:e5:0a:
eb:b8:0b:c1:c8:a3:2a:4f:13:12:59:8f:0f:97:7a:
7a:2c:46:b2:4b:0a:a8:b7:7c:48:f6:b2:0a:fc:39:
d3:29:2a:c5:3d:64:d1:c8:ec:19:19:c1:f9:4b:80:
98:61:d1:7b:0c:3a:50:1c:c2:6e:e7:20:e2:fe:c3:
47:e4:ba:f5:eb:82:e2:2c:e1:c6:43:26:d7:55:a6:
53:6b:05:89:f0:e7:2c:3a:6b:70:52:ab:a3:86:b9:
46:d2:f6:84:df:af:d1:4a:de:81:83:ea:03:e9:50:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:3C:07:A0:73:68:F8:91:B3:52:17:D9:BA:51:08:91:69:77:EB
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:7e:ba:1a:a5:32:88:da:c8:3d:5b:62:c6:a7:3a:9b:6e:
ae:0e:44:01:ef:3b:11:9b:aa:1c:46:1c:10:8e:89:cf:7c:82:
67:f8:c8:12:f1:50:f4:a1:ab:63:66:8b:8b:39:37:55:c3:d2:
84:f9:d4:91:d0:25:1a:4b:49:61:a2:84:c4:39:c2:92:cd:13:
8c:cb:16:55:31:fb:1f:64:0f:3e:cc:3d:39:a2:af:d2:e5:e5:
fa:31:f4:51:96:d8:9b:14:a9:2b:50:62:04:a2:d8:a2:7f:76:
6d:17:24:e2:96:ee:66:86:bf:78:35:b2:49:63:b3:87:ba:cc:
f4:41:95:21:f9:e6:56:1f:ee:e2:8b:6b:65:e7:2c:81:ee:b1:
3b:01:af:0f:52:34:a5:2c:d5:d1:98:f7:68:c2:af:2c:96:7d:
a2:c7:c9:31:58:98:34:59:24:8d:ed:24:05:b8:19:c6:3c:5e:
d9:38:0e:00:66:a2:a4:14:06:63:57:ff:6b:2f:ad:aa:cf:24:
99:9d:7c:31:4b:74:42:e3:98:4e:b7:6d:55:5c:b1:d1:b2:ff:
4e:97:54:27:00:2f:59:b6:6c:c6:0d:87:49:b2:d6:7b:e5:4b:
9a:f8:3c:68:b9:8b:b1:9d:55:93:ca:9f:69:30:a5:82:46:4f:
32:24:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:19 2026 by rpki-client