Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: snoFbnnyIRTIg4qN8EbY7XWLICkO5/XA6iLnHSYKcoI=
Subject key identifier: B8:AD:3E:E1:AE:7E:AA:A2:97:81:2F:E4:60:08:98:6D:17:BF:19:76
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019D99D0E311B2BB4F36543A5570E08F80F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 1716
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: KNE0GOWHcZj4zvLtucR97oGv3gsMzQfZHX8TrvCJQoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e3:11:b2:bb:4f:36:54:3a:55:70:e0:8f:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=b8ad3ee1ae7eaaa297812fe46008986d17bf1976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:82:98:34:8d:5a:96:c2:60:74:bd:44:99:
0f:18:e9:27:21:2f:06:91:6e:56:e4:c9:65:89:d7:
26:7e:8a:e0:ba:a4:0d:78:b5:18:06:d3:79:18:6e:
c3:30:cc:2a:54:15:28:5f:73:57:fa:89:e8:7d:69:
80:15:b3:6e:13:5e:93:9d:ca:0f:a9:7d:1c:8b:45:
1d:2a:17:03:79:9c:20:b4:fb:0f:3f:42:0b:4b:e1:
75:80:08:af:ff:e1:19:26:66:2c:26:be:02:5d:37:
c3:b0:93:59:21:5a:c7:f3:fb:38:7e:d3:06:33:e3:
fb:08:36:b8:a5:35:aa:bb:52:8b:3d:21:fc:99:03:
21:c1:f3:4a:8e:1f:c9:b9:b3:f8:ec:e0:e0:99:87:
2a:a6:c5:7c:dc:fa:22:14:c1:40:8b:c2:f9:f7:52:
8d:09:47:5f:62:68:4d:e7:74:f0:6c:1b:34:33:51:
b0:b7:fc:08:14:4f:cc:21:bf:28:df:72:36:9d:d9:
6f:22:af:52:94:49:aa:c7:de:f4:47:fa:31:8a:0d:
9e:61:62:25:97:aa:b5:1e:d5:d6:66:65:25:b7:8d:
fe:0d:09:b1:40:87:98:4c:9e:f9:ca:0b:d9:ae:53:
c8:3e:ee:4b:93:c5:87:95:d3:60:af:e5:a5:7f:ee:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:3E:E1:AE:7E:AA:A2:97:81:2F:E4:60:08:98:6D:17:BF:19:76
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:9e:10:f3:14:ab:55:1d:86:53:c3:6a:23:cd:76:5a:f2:
a9:74:4b:cb:1d:2f:bc:d7:d8:a5:9c:0e:dc:73:72:37:8e:4b:
1d:5e:f3:62:b2:3a:3f:51:92:a9:39:c9:53:f4:d8:a8:ec:c5:
1d:35:26:87:2b:95:06:65:57:41:a6:74:4e:a8:51:4f:39:ff:
f5:87:57:e2:b6:03:f5:46:a7:56:d0:66:28:f5:1a:3d:11:40:
18:f7:a5:f6:a5:a4:a1:a6:95:2a:47:5b:54:7f:fd:1a:45:a7:
e6:d7:3f:df:a1:15:44:6b:2b:10:22:48:c1:f9:12:c9:e0:aa:
24:fa:0e:5b:20:4a:40:cb:be:50:1f:76:9b:03:87:d7:34:b2:
47:7c:53:77:27:6e:cc:a6:b7:7a:1a:1d:42:f0:0a:f1:15:c4:
34:16:5c:43:9b:6c:1b:1f:e1:2b:b5:7d:91:5d:bf:e3:09:ca:
0e:ee:30:a7:6c:d7:43:11:f9:6c:21:d5:29:be:4c:55:31:43:
bb:e5:3e:c7:a8:f6:c1:9e:52:7e:22:e9:60:50:5e:43:71:44:
c8:73:30:5a:ea:96:5f:4e:6f:47:e1:72:01:31:41:14:78:fb:
4d:43:9b:b7:0f:f0:6a:9a:c1:b3:d0:61:d0:2c:4c:9d:4c:2f:
2c:32:e2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OMRsrtPNlQ6VXDgj4D1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj
YmI2NjEwHhcNMjYwNDE3MDUwMTM2WhcNMjYwNDE4MDUwMTM2WjAzMTEwLwYDVQQD
EyhiOGFkM2VlMWFlN2VhYWEyOTc4MTJmZTQ2MDA4OTg2ZDE3YmYxOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwKCmDSNWpbCYHS9RJkPGOknIS8G
kW5W5MllidcmforguqQNeLUYBtN5GG7DMMwqVBUoX3NX+onofWmAFbNuE16TncoP
qX0ci0UdKhcDeZwgtPsPP0ILS+F1gAiv/+EZJmYsJr4CXTfDsJNZIVrH8/s4ftMG
M+P7CDa4pTWqu1KLPSH8mQMhwfNKjh/JubP47ODgmYcqpsV83PoiFMFAi8L591KN
CUdfYmhN53TwbBs0M1Gwt/wIFE/MIb8o33I2ndlvIq9SlEmqx970R/oxig2eYWIl
l6q1HtXWZmUlt43+DQmxQIeYTJ75ygvZrlPIPu5Lk8WHldNgr+Wlf+7hZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLitPuGufqqil4Ev5GAImG0Xvxl2MB8GA1UdIwQY
MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt
OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj
LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3+eEPMU
q1UdhlPDaiPNdlryqXRLyx0vvNfYpZwO3HNyN45LHV7zYrI6P1GSqTnJU/TYqOzF
HTUmhyuVBmVXQaZ0TqhRTzn/9YdX4rYD9UanVtBmKPUaPRFAGPel9qWkoaaVKkdb
VH/9GkWn5tc/36EVRGsrECJIwfkSyeCqJPoOWyBKQMu+UB92mwOH1zSyR3xTdydu
zKa3ehodQvAK8RXENBZcQ5tsGx/hK7V9kV2/4wnKDu4wp2zXQxH5bCHVKb5MVTFD
u+U+x6j2wZ5SfiLpYFBeQ3FEyHMwWuqWX05vR+FyATFBFHj7TUObtw/waprBs9Bh
0CxMnUwvLDLikQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:06 2026 by rpki-client