Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: CGY1xGcJeO+R0PSTIWhLO2P83majapl6i3aLEzfESJ0=
Subject key identifier: A7:52:88:D5:FB:E3:BD:99:C0:61:1D:44:C4:3D:17:A5:08:7E:A8:DB
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019D9BBE6D9AB5373C555EC97E5FF50EF7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 05CA
Signing time: Fri 17 Apr 2026 14:00:41 +0000
Manifest this update: Fri 17 Apr 2026 14:00:41 +0000
Manifest next update: Sat 18 Apr 2026 14:00:41 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: DQIYHYaNklLArxNQpbkQMFvm7HaYF08HzwfAWV4BYn4=)
2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:6d:9a:b5:37:3c:55:5e:c9:7e:5f:f5:0e:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Apr 17 14:00:41 2026 GMT
Not After : Apr 18 14:00:41 2026 GMT
Subject: CN=a75288d5fbe3bd99c0611d44c43d17a5087ea8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:6c:58:24:86:57:a4:e3:39:ee:f5:32:7a:
c8:02:45:d5:1f:83:56:4a:67:ed:3e:09:5d:02:cb:
83:4a:ab:4c:f7:17:b7:a6:ef:4e:17:a8:2a:15:45:
ff:b2:b5:90:09:29:c7:f7:42:a7:a0:d7:af:61:0d:
8e:f5:1a:07:af:86:27:b7:8e:f9:0c:1b:a2:e7:75:
f7:9d:d7:0e:00:3e:fa:e3:c8:ec:ee:c1:4a:d2:f5:
c3:86:71:1f:63:fe:33:6b:dc:cc:8a:26:a0:ba:46:
e8:70:82:5c:6b:f8:17:d7:85:2d:55:7c:01:a2:ca:
33:89:e2:f8:c3:91:74:55:a5:0c:28:cc:33:dc:35:
dc:cc:b1:05:cb:75:b4:5a:20:1d:d6:8e:37:49:e1:
da:0c:81:da:47:1d:7c:27:df:9f:13:07:19:2d:30:
eb:a6:5a:3d:bf:a0:b5:94:45:b9:59:b4:59:5b:e3:
7e:0f:96:b0:78:26:75:4c:fd:bb:36:ca:09:e8:79:
98:f9:d5:19:47:bd:83:96:2d:48:4a:21:d2:f3:0c:
52:5f:80:99:28:87:09:e7:22:8a:c6:d3:de:b8:6b:
93:3c:91:ce:18:4c:79:3f:c5:d7:86:09:b6:e6:d3:
db:77:c8:7f:ad:d8:a6:e4:c5:90:45:6c:7b:3f:e3:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:88:D5:FB:E3:BD:99:C0:61:1D:44:C4:3D:17:A5:08:7E:A8:DB
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1f:d6:54:a1:aa:66:26:2c:1c:9c:a6:2b:f6:d2:b0:21:26:
5c:e8:13:98:8a:f4:69:e0:b7:63:3a:90:80:ee:51:8c:b0:dd:
0c:9c:e8:cd:2f:a4:50:9c:1e:47:d7:bf:ff:1f:ad:21:10:47:
ea:1d:95:cf:f4:53:8d:29:f9:5d:c6:52:b5:a1:05:21:c0:2b:
71:c0:7a:16:c2:e1:f8:28:e2:42:45:43:60:2e:77:6e:84:c0:
ea:64:77:fb:1b:c8:a9:f3:91:9d:4b:31:e6:a1:1a:e2:16:84:
ad:2f:c5:c6:c0:01:4c:1f:44:43:20:9e:4b:80:e0:ef:7c:0d:
2c:2e:a6:a9:2f:f4:1b:f6:91:78:20:73:9b:f6:3f:e4:17:9a:
f8:a2:0b:f6:32:35:9e:24:7f:6e:88:46:87:b4:c4:2e:06:35:
31:83:76:02:e7:a5:93:de:ba:4d:db:b2:04:ee:a4:7a:2c:16:
ee:96:f7:62:ff:78:91:74:99:e3:67:db:cf:45:d6:9b:c9:ce:
06:2d:3b:db:ce:97:58:4c:93:b6:39:e8:53:88:22:b4:36:fd:
e0:b9:92:72:6f:a3:d1:49:94:ca:16:6b:c0:f5:37:47:ca:05:
b6:1a:78:a4:ff:59:74:95:72:ef:a1:93:08:72:f1:fb:76:ac:
fb:2a:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:06 2026 by rpki-client