Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: y7nDZdR0FGSrRdDPI/GXwyo4ntjdGjegSn57g2Ei16Q=
Subject key identifier: FA:0B:CF:2A:5E:DC:61:94:33:09:1F:37:32:A5:ED:87:74:2E:DE:B6
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019D98F49084377B19C60E8083E10C032B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 01:00:57 +0000
Manifest this update: Fri 17 Apr 2026 01:00:57 +0000
Manifest next update: Sat 18 Apr 2026 01:00:57 +0000
Files and hashes: 1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: /vkFcrxkeNqI6ATTnXUksyyTJYaMHgZJKM+dfZy8Nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:90:84:37:7b:19:c6:0e:80:83:e1:0c:03:2b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Apr 17 01:00:57 2026 GMT
Not After : Apr 18 01:00:57 2026 GMT
Subject: CN=fa0bcf2a5edc619433091f3732a5ed87742edeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:3b:93:23:d2:cd:e3:ef:61:2e:f1:61:42:
d9:3b:39:49:a9:48:a6:e2:df:af:64:38:81:b7:c5:
11:57:66:d2:fa:74:d7:2a:0b:18:ea:89:90:8e:e1:
9e:1d:b0:55:54:20:4b:3d:80:31:56:38:e5:a7:9d:
34:a8:cf:eb:1e:3c:60:9a:8c:0f:fd:e3:92:87:24:
dc:26:4f:21:1d:fd:d3:9e:4f:e8:bb:3a:eb:8d:fb:
8d:33:8c:61:b5:ac:05:c9:9b:66:3b:74:ad:ad:f0:
44:c5:59:60:52:a0:09:06:48:7c:81:6d:c9:46:97:
94:b6:9f:79:85:40:71:a0:c3:1b:d1:6b:61:e2:be:
bd:8e:07:f9:ee:5e:54:5f:52:fe:ea:93:93:01:9e:
98:c5:9a:d3:41:e7:a9:f5:4c:78:ca:17:a3:3f:cc:
24:c8:79:f9:3f:a3:f0:c6:05:93:e1:fc:f8:6b:57:
e2:b4:3b:61:bc:cd:44:e2:56:e2:2c:f0:5c:32:ff:
3c:d8:d0:d0:f6:aa:42:13:c4:60:b5:5e:2a:ef:44:
25:b2:31:d7:4f:aa:d2:6e:65:1e:f2:80:7d:bb:f3:
58:a8:58:10:b9:2f:ea:7c:4b:f1:e9:e7:18:c0:b5:
0d:6c:0a:3c:65:e6:a3:5e:5f:02:2e:34:e1:94:3b:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:CF:2A:5E:DC:61:94:33:09:1F:37:32:A5:ED:87:74:2E:DE:B6
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:12:02:4d:48:b5:6a:ec:7a:ac:b8:42:5a:20:59:61:a2:48:
cf:2b:24:ae:bf:6d:6d:db:4e:ee:12:f4:32:ae:a7:33:13:71:
b3:8e:cd:1b:3a:7e:91:9c:43:1e:cc:3e:9a:d3:58:de:0b:d2:
a3:85:e9:d6:ab:78:6e:be:ef:c1:b5:0c:bb:ba:cd:4b:79:18:
7c:b5:7d:2d:b2:21:3d:5f:74:e1:de:43:1d:01:7c:b6:25:36:
1f:9e:97:50:ce:6f:2d:0a:57:79:a0:12:b7:44:a0:ba:ad:5b:
e8:ae:05:c8:ad:0e:72:5c:2f:d1:85:aa:cf:eb:92:e9:2e:2e:
ef:bc:8e:a0:4b:62:15:a3:d9:73:b7:c8:dd:0c:83:86:f8:81:
5c:a8:4e:17:d1:0e:ba:eb:6d:13:9b:a3:6d:c1:d3:30:ea:75:
5a:61:3a:7f:3e:26:db:f1:92:5f:24:35:6b:9b:13:33:08:d6:
50:92:df:2f:7a:d2:d3:38:28:7d:81:ab:fc:76:8d:d6:6f:8f:
9e:77:db:4f:2f:8e:13:de:e4:f9:c7:f4:0e:c0:84:5a:41:5e:
96:17:11:65:55:9c:15:d4:6e:c0:e5:63:53:88:ea:68:97:1a:
fd:47:32:9a:a2:1d:44:a0:fb:53:37:fe:d3:1c:3e:e5:dc:2a:
25:da:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:44 2026 by rpki-client