Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: KGNiIfGdKR3K5qilLKrHOnrPQ3Wpr5RiuWpewJ+Oc3c=
Subject key identifier: 9F:6A:BC:2C:07:26:D6:80:72:33:4E:5B:59:A5:68:2A:41:64:4E:83
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019D9886D860FE816A29511D1CF7FD1639C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 23:01:06 +0000
Manifest this update: Thu 16 Apr 2026 23:01:06 +0000
Manifest next update: Fri 17 Apr 2026 23:01:06 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: QX+YdKTXItYtLs+hqSAR1X3Ua4tHEy5fZf69ImR9BVk=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d8:60:fe:81:6a:29:51:1d:1c:f7:fd:16:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Apr 16 23:01:06 2026 GMT
Not After : Apr 17 23:01:06 2026 GMT
Subject: CN=9f6abc2c0726d68072334e5b59a5682a41644e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:47:98:bb:74:bd:88:b7:43:c1:bd:fa:ff:
b7:6a:a4:04:50:33:1c:64:27:8e:05:22:fd:6c:a0:
c9:c2:76:68:94:b3:69:a4:b3:2e:4c:03:dd:ec:5c:
c7:7c:67:93:6b:d6:97:f7:dd:15:c9:57:8f:65:37:
30:4f:49:54:81:b5:d1:41:33:d5:ec:b2:e4:84:25:
bd:cb:06:b1:56:eb:b2:71:2d:78:43:7a:8c:8b:e0:
89:73:43:4d:ba:18:59:cb:64:2c:ef:d0:9e:83:03:
6d:0c:e0:42:14:d9:cf:68:67:97:f9:0e:82:98:85:
c8:a8:3e:e9:94:9c:55:88:4c:25:45:60:e6:96:bc:
60:dd:75:2d:e4:b7:9a:84:cc:a3:a2:fe:b7:1a:8f:
61:eb:4c:04:a8:cf:56:da:30:76:f0:2f:60:ec:2e:
20:2c:21:5b:20:27:3e:cc:61:2e:80:da:31:28:b3:
58:de:e9:06:cf:14:a8:12:a1:b6:00:4e:8e:6b:3d:
5c:11:1d:94:b4:51:85:fc:3c:42:fa:21:e6:77:af:
5f:bb:d7:17:ac:23:d0:26:a6:b0:50:9c:9b:39:ae:
7f:0d:4b:ca:b8:59:2f:e6:27:10:c2:26:12:44:28:
88:b6:a6:48:bc:02:74:26:38:67:96:ff:3e:c7:06:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:BC:2C:07:26:D6:80:72:33:4E:5B:59:A5:68:2A:41:64:4E:83
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:d1:a9:fa:05:09:26:24:7a:c2:22:5f:9c:e8:b2:1f:cb:
3e:9a:bc:2b:cd:05:2a:78:56:ce:c3:9b:76:bc:1a:83:af:05:
b9:07:27:8c:77:c1:37:53:37:7a:03:af:71:e5:01:4e:8b:63:
af:d3:95:cc:10:6f:74:06:c1:03:a9:bd:6d:39:5d:77:00:53:
b2:de:46:13:e7:e8:5e:77:f5:0f:5d:94:eb:db:e6:39:45:77:
c1:a2:b7:f7:90:6d:65:9c:fa:8e:a2:76:3d:47:99:85:a0:fa:
3a:8e:5b:99:0f:cc:13:e7:8c:52:7c:09:71:65:47:05:50:41:
4f:49:8d:5b:75:ec:bd:08:36:c9:5b:38:b9:1a:56:54:3d:09:
c7:b8:4b:2a:0b:97:54:eb:b3:3e:36:4f:21:31:10:45:a7:f3:
dd:ab:b0:7f:b4:5d:03:8f:29:63:14:91:6a:cb:69:9c:73:c8:
53:f2:74:f8:ea:78:55:fc:7f:0d:5f:69:cf:09:42:38:f7:de:
14:f2:61:97:67:a6:10:77:8d:4f:99:a8:af:f8:0f:fe:92:17:
b3:82:b4:c6:2f:96:f1:35:0d:e6:16:ad:7b:ec:c4:fd:eb:bc:
23:63:a7:0b:af:8b:af:c2:85:a7:1a:d8:be:ab:83:68:f5:91:
b0:a3:7c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhthg/oFqKVEdHPf9FjnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjYwNDE2MjMwMTA2WhcNMjYwNDE3MjMwMTA2WjAzMTEwLwYDVQQD
Eyg5ZjZhYmMyYzA3MjZkNjgwNzIzMzRlNWI1OWE1NjgyYTQxNjQ0ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1HmLt0vYi3Q8G9+v+3aqQEUDMc
ZCeOBSL9bKDJwnZolLNppLMuTAPd7FzHfGeTa9aX990VyVePZTcwT0lUgbXRQTPV
7LLkhCW9ywaxVuuycS14Q3qMi+CJc0NNuhhZy2Qs79CegwNtDOBCFNnPaGeX+Q6C
mIXIqD7plJxViEwlRWDmlrxg3XUt5LeahMyjov63Go9h60wEqM9W2jB28C9g7C4g
LCFbICc+zGEugNoxKLNY3ukGzxSoEqG2AE6Oaz1cER2UtFGF/DxC+iHmd69fu9cX
rCPQJqawUJybOa5/DUvKuFkv5icQwiYSRCiItqZIvAJ0Jjhnlv8+xwamOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9qvCwHJtaAcjNOW1mlaCpBZE6DMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOzRqfoF
CSYkesIiX5zosh/LPpq8K80FKnhWzsObdrwag68FuQcnjHfBN1M3egOvceUBTotj
r9OVzBBvdAbBA6m9bTlddwBTst5GE+foXnf1D12U69vmOUV3waK395BtZZz6jqJ2
PUeZhaD6Oo5bmQ/ME+eMUnwJcWVHBVBBT0mNW3XsvQg2yVs4uRpWVD0Jx7hLKguX
VOuzPjZPITEQRafz3auwf7RdA48pYxSRastpnHPIU/J0+Op4Vfx/DV9pzwlCOPfe
FPJhl2emEHeNT5mor/gP/pIXs4K0xi+W8TUN5hate+zE/eu8I2OnC6+Lr8KFpxrY
vquDaPWRsKN8+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:05 2026 by rpki-client