Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier: I700yxVVMr6C33zT2AXCQy8BY6eThZ1Vz9k5tsn3I00=
Subject key identifier: 70:2E:EB:60:F7:A8:10:54:CE:40:FE:AC:3B:67:E4:E6:03:8F:74:24
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial: 019DA48B3F766D98ADBAA3453794190311D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number: 019D
Signing time: Sun 19 Apr 2026 07:01:22 +0000
Manifest this update: Sun 19 Apr 2026 07:01:22 +0000
Manifest next update: Mon 20 Apr 2026 07:01:22 +0000
Files and hashes: 1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: xVj72KCXELJri5VbAbQ3RL6IHsB3VKFgENOKXoJlq60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:3f:76:6d:98:ad:ba:a3:45:37:94:19:03:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Validity
Not Before: Apr 19 07:01:22 2026 GMT
Not After : Apr 20 07:01:22 2026 GMT
Subject: CN=702eeb60f7a81054ce40feac3b67e4e6038f7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:a5:c3:57:65:ef:0a:bf:f9:62:38:9b:34:
08:f5:67:bd:de:da:4a:52:a4:ad:ea:18:f0:ad:c6:
a3:99:7c:a6:9f:f8:e8:fd:99:31:88:4f:77:97:a0:
73:38:fb:14:2e:e8:5c:e4:3c:00:9c:6d:f5:8f:37:
c7:87:20:3b:d4:15:1c:cf:71:64:22:f3:ec:56:f5:
f9:34:f3:59:fe:9e:80:46:08:3f:a9:50:20:84:a9:
f0:b5:ec:52:e5:b0:db:61:67:8c:b7:4b:27:03:38:
c2:b2:e9:55:b1:87:89:b3:b0:7f:f3:26:ba:de:11:
66:45:92:f1:a2:39:5e:87:dc:7b:fc:fa:8d:b6:ca:
ba:3b:c8:e0:a1:77:17:60:19:2d:c2:65:a7:7b:82:
88:f5:8d:4d:97:2b:48:97:23:27:96:9a:27:f1:52:
6b:ea:9e:9f:dc:f8:e0:6b:8f:07:0d:b5:03:44:15:
6c:da:74:68:51:ec:44:99:eb:1d:e1:88:69:d7:bf:
30:d5:90:d5:d7:c7:e0:19:e0:31:05:91:e8:af:53:
b2:44:01:2b:75:42:68:28:fe:77:5f:e0:5f:0d:d0:
62:2c:fd:3d:22:83:81:95:7d:29:16:78:03:72:8d:
b1:27:86:17:d6:f7:8f:96:55:73:63:04:aa:24:d4:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:EB:60:F7:A8:10:54:CE:40:FE:AC:3B:67:E4:E6:03:8F:74:24
X509v3 Authority Key Identifier:
keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:c9:53:d8:cc:28:ad:d9:50:1b:60:98:17:71:d6:ce:84:
56:45:85:46:72:4d:4f:c9:0d:fe:da:ec:86:47:87:22:cf:93:
ec:68:2e:65:9c:f2:7d:38:c8:92:61:29:be:77:5f:b1:93:a3:
a0:54:be:2b:26:ae:2c:cd:3e:f4:b5:af:e4:6f:9f:b5:f5:3d:
3e:bb:e7:4a:ea:f1:f6:69:f0:3f:0a:58:7a:ed:e7:59:a8:2e:
09:3a:76:7d:1b:35:8e:93:35:bc:42:56:1b:b7:c8:ad:9a:22:
bb:17:bf:5d:a9:13:0b:8f:06:26:77:d3:7a:9c:21:58:78:72:
fa:67:fc:c5:d0:c9:89:13:b9:1f:d8:34:f7:af:03:5b:e5:a3:
2b:00:49:f0:45:9e:3b:dd:a8:b3:01:39:0e:7e:50:d2:a4:12:
db:76:9a:ad:5e:a0:47:cb:74:7f:c2:bf:06:9d:59:e9:69:45:
b1:27:c3:3c:d9:54:5f:3d:04:83:b9:c2:88:08:77:12:e3:5b:
f1:f4:60:fd:97:e8:01:12:7c:b8:ac:6e:f9:01:97:e8:79:66:
29:cb:cb:34:3e:64:d5:92:97:28:18:4c:96:de:72:c0:bf:e7:
7b:61:b8:b4:cd:0a:ae:f5:4f:d9:a5:19:c1:92:c2:55:df:87:
be:44:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:50 2026 by rpki-client