Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: J+tUgdLOjP6UkzUcQaQzlvnzSYfMGR42qP9GvkEb9bY=
Subject key identifier: DB:28:D6:E2:C4:5F:F1:70:5A:3A:5A:C3:E7:E4:A1:4B:7A:10:EA:FF
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019D9AAC211B7E33EB26B49F424A7763FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0D33
Signing time: Fri 17 Apr 2026 09:01:05 +0000
Manifest this update: Fri 17 Apr 2026 09:01:05 +0000
Manifest next update: Sat 18 Apr 2026 09:01:05 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: Zev/YMDsoHHmnA0rHbANg1iH4YH8i5p+kDdKtTESL2Y=)
4: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (hash: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:21:1b:7e:33:eb:26:b4:9f:42:4a:77:63:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Apr 17 09:01:05 2026 GMT
Not After : Apr 18 09:01:05 2026 GMT
Subject: CN=db28d6e2c45ff1705a3a5ac3e7e4a14b7a10eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:f2:31:5c:2a:71:c0:17:48:ec:28:1b:4f:
b1:1f:f5:1d:7f:25:a5:f1:9f:f4:e2:cb:a8:30:57:
83:32:eb:8c:7f:8a:cb:d2:e7:f7:a4:35:3b:92:9f:
86:fe:fe:6c:4a:ca:6f:66:6c:78:20:2b:b9:21:29:
11:bc:d1:87:8a:1b:fb:ea:c5:d7:fe:17:ed:02:a8:
4f:27:d2:bc:ab:78:7d:cf:6f:d0:d3:ca:b9:60:c1:
f0:ab:c9:54:48:f0:96:80:f7:61:93:c8:a2:23:97:
2e:7e:be:96:cd:b3:0f:71:2b:c5:ad:19:71:a7:cb:
bd:f9:bf:3b:13:a9:a8:44:ec:a1:ac:46:a6:03:4a:
62:76:26:85:51:4a:60:91:31:ec:68:ab:66:08:bc:
f6:a2:5f:db:7a:04:e0:ea:21:d8:ec:62:11:33:46:
c0:a5:d8:11:ac:0c:50:a0:1f:eb:dc:65:61:15:d9:
65:c6:21:e4:73:b8:a1:95:e7:23:e9:28:06:2c:08:
43:69:c4:21:68:f3:03:0b:8e:cb:d3:b4:36:02:94:
29:42:60:bc:f2:0e:dd:0a:2c:66:b2:30:f3:74:26:
d2:ea:11:ba:1b:cb:de:97:aa:a5:f5:96:d4:0e:e9:
16:a8:c8:38:b6:18:11:6f:e6:63:0d:bc:89:76:5f:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:D6:E2:C4:5F:F1:70:5A:3A:5A:C3:E7:E4:A1:4B:7A:10:EA:FF
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:8d:6d:b0:98:b1:28:86:28:2c:cc:00:29:84:11:74:89:
83:ec:90:66:ef:3c:c6:98:75:40:41:b5:31:25:8e:51:f4:64:
1e:7c:1b:20:a1:db:9c:e8:61:e3:a0:6e:05:24:db:5b:6e:80:
84:92:ed:9b:bf:50:fa:25:cc:ac:3d:43:54:2b:8e:17:ed:d8:
75:dd:89:83:16:9e:c9:8f:e7:d9:fc:2d:22:cb:a7:15:2c:d1:
fd:be:ad:95:2d:cd:8f:e6:76:98:7f:d4:96:38:b9:26:d1:7e:
6d:08:c0:5f:39:23:39:d8:ed:a6:9f:7d:fd:b0:bc:69:19:cd:
35:4d:a4:29:c5:3c:61:03:aa:f7:e9:ef:fa:c0:ac:99:02:26:
f9:9a:d0:4f:af:1b:3c:62:09:ff:ee:e6:fb:e0:2e:45:00:7e:
c7:d3:a3:86:56:2a:3d:ed:62:6d:a3:65:79:76:ca:e7:bc:dd:
ea:c3:c7:9c:71:e0:b5:19:75:a0:a0:48:a6:32:ac:6f:72:90:
6a:d3:51:9a:38:f5:2b:16:e4:bf:cb:87:c2:32:f5:27:5a:84:
a3:0b:3a:18:02:94:3a:dc:a4:33:88:c6:6a:71:ab:17:cd:96:
5f:06:89:f1:7b:7b:f5:ab:28:0a:72:31:e3:dd:da:7f:1b:32:
4f:91:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:21 2026 by rpki-client