Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: /AnkBF5m3unIHiWzzlobZvjP0mf2C2foTyXhCUbrkZc=
Subject key identifier: F7:92:EB:88:5B:67:13:9E:5F:69:43:89:D3:DE:F8:5A:0E:F0:3E:18
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019D98501A3F86C023104792CD60203FCB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:19 +0000
Manifest this update: Thu 16 Apr 2026 22:01:19 +0000
Manifest next update: Fri 17 Apr 2026 22:01:19 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: TigWcz4PeyIun061gPRHWIR+BXErN8uOjxXfMPIJiLM=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:1a:3f:86:c0:23:10:47:92:cd:60:20:3f:cb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Apr 16 22:01:19 2026 GMT
Not After : Apr 17 22:01:19 2026 GMT
Subject: CN=f792eb885b67139e5f694389d3def85a0ef03e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:d8:80:92:d2:bf:62:47:59:b4:0a:37:ed:
9d:3e:f1:95:59:c4:9f:53:67:1e:ff:c6:34:52:5f:
b3:44:30:bc:cb:d3:5b:31:c3:1e:06:93:40:2d:63:
ef:3a:f5:c6:09:e6:d2:9c:bb:8e:38:4a:c4:f0:ea:
10:ca:45:13:90:8a:f5:98:68:7e:a2:fc:7a:cb:96:
9c:16:de:51:7a:03:e1:6a:af:8f:c1:b4:9e:f7:20:
62:e7:4e:68:aa:5d:3a:80:29:d7:c1:89:bd:f5:db:
15:29:30:eb:87:59:b9:4b:e0:d6:6a:09:91:ae:56:
d9:d5:50:f4:80:42:18:4f:27:c1:e3:a8:bc:4f:5c:
cd:99:00:0c:a4:31:21:35:79:1e:6b:bc:25:34:c5:
81:84:78:99:65:54:f4:a3:c0:fd:a3:f1:bd:6b:5c:
18:a8:a3:f9:16:67:0a:c4:ce:9b:53:34:a9:2b:8a:
c8:d1:70:ab:35:88:21:f0:e3:fa:12:ef:3e:e9:97:
5d:d7:a3:69:4d:75:57:4d:55:1f:97:2f:77:1e:3b:
d0:22:3d:59:8f:45:3d:9a:d1:33:92:fa:4d:97:8d:
ba:be:7a:41:a9:60:ad:96:06:51:2b:59:bb:73:a0:
b7:2a:3a:cf:e1:e6:e0:4d:af:f1:b9:20:ee:ce:ef:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:EB:88:5B:67:13:9E:5F:69:43:89:D3:DE:F8:5A:0E:F0:3E:18
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1d:fb:91:f0:6c:f1:af:3a:94:7a:e8:16:31:99:a4:b8:e8:
23:d6:1f:e0:ac:55:64:5c:c3:b8:bc:17:5a:25:99:af:5a:41:
1a:06:b1:4f:1c:ae:5b:1d:76:09:07:2c:a3:00:d9:9c:ae:e5:
46:be:dc:23:71:33:c8:95:0e:5b:72:6b:75:42:61:35:86:9a:
22:cc:7d:0a:51:37:59:e1:94:4c:8f:a0:a9:cd:fd:01:6a:3b:
c1:45:e2:09:18:09:61:1f:2e:20:26:a4:e1:e8:9d:7b:07:ab:
30:27:80:86:74:81:54:58:d9:76:7c:41:a5:3f:da:e7:4a:ef:
77:ef:ae:02:c0:c1:b4:e0:5c:42:60:3d:88:b6:90:9a:b0:3f:
5c:31:d5:91:af:0c:00:50:ef:c0:3b:bc:72:f4:e9:e7:9e:a2:
f9:7f:77:b7:fa:72:d3:28:d0:d8:fc:bd:bd:3d:c1:82:35:39:
87:63:be:36:fb:a2:a6:37:51:d1:51:a7:04:87:a0:99:e8:70:
09:cd:e9:21:00:ab:3f:36:d8:67:d4:e6:72:6f:08:17:3d:82:
59:53:e3:6e:d6:6e:d8:f3:c5:6e:76:9f:38:d5:a4:28:a1:ef:
38:75:e7:39:42:cb:bc:c0:17:ef:90:d4:7a:5e:1e:a5:8c:8e:
ca:81:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:17 2026 by rpki-client