Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: tg+ShhAxi9cn5jaZzc6UDVHIuvmIVrl4YBNM0tij+R4=
Subject key identifier: BB:08:20:68:46:51:B4:80:8A:C8:29:22:46:B4:B2:46:54:DF:0B:95
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 019DA52F96CF1902508192BD72F172C71AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 08A6
Signing time: Sun 19 Apr 2026 10:00:52 +0000
Manifest this update: Sun 19 Apr 2026 10:00:52 +0000
Manifest next update: Mon 20 Apr 2026 10:00:52 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: MkBdaI/fNeXORw0yHEZJhiyoc1Z+lSuE8y7IGtDd1UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:96:cf:19:02:50:81:92:bd:72:f1:72:c7:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Apr 19 10:00:52 2026 GMT
Not After : Apr 20 10:00:52 2026 GMT
Subject: CN=bb0820684651b4808ac8292246b4b24654df0b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:8b:d5:a8:a7:50:93:c3:74:74:ad:f4:d9:
f9:d2:e3:96:d1:d2:aa:69:ce:45:f5:b0:d3:02:13:
1d:27:0f:4f:47:71:98:25:b8:af:20:3b:92:eb:4f:
92:26:c3:e6:af:83:92:ab:90:b7:4a:a7:03:03:69:
da:da:85:a3:98:03:e4:93:db:22:1c:23:37:b6:ee:
51:aa:9f:8d:ac:0b:ea:cb:0d:12:96:ab:e1:36:e1:
e3:31:49:cb:97:70:c3:bf:9f:df:b5:23:dd:c4:50:
b8:68:4f:29:da:1e:ae:3c:ba:96:49:47:6e:6d:4c:
a1:f2:25:de:35:e9:11:f6:92:44:fe:25:bb:9f:ab:
79:16:a0:c9:c4:06:26:2f:fa:5a:66:0b:58:1d:40:
cb:f2:23:49:11:cd:70:45:cc:41:a0:79:ac:48:86:
6f:b2:d3:55:b4:a3:73:b8:91:36:fe:b6:d7:0d:53:
da:89:be:bf:ee:ad:97:69:6f:d6:37:eb:3f:13:7c:
13:11:c7:32:6e:b7:6c:ab:dc:31:22:e1:0a:a8:31:
ed:e1:ba:2c:77:d2:26:ec:e1:78:ba:1d:c4:f8:7b:
cb:b6:e2:89:a7:d1:ca:03:d5:b5:f6:0a:1a:46:fd:
e0:d1:4c:c6:69:c6:bf:39:0d:c1:26:1f:a0:4e:ca:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:20:68:46:51:B4:80:8A:C8:29:22:46:B4:B2:46:54:DF:0B:95
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:89:51:58:d6:89:a9:9e:87:cc:0c:7c:c1:0c:3a:28:d3:49:
06:20:2e:61:80:6b:4f:24:d2:54:8e:53:0a:4e:3d:da:9c:be:
19:79:01:11:c7:1c:71:a8:17:6c:64:d5:57:ee:0e:a0:9a:03:
0d:03:79:e1:bf:48:45:c7:f7:be:fd:2e:d3:cb:c0:65:dd:dc:
22:e2:e1:ae:f3:12:c8:75:3a:7a:1e:a3:2c:48:2f:a3:1f:04:
50:14:1a:e6:4a:1a:1f:15:01:5f:54:ce:0f:0c:e9:5b:f7:a5:
72:84:d7:db:df:dc:7f:16:a7:46:35:65:f1:7e:17:3a:2d:9f:
65:46:ec:25:a4:51:8a:69:44:d1:42:e5:db:55:3b:75:8b:4c:
1e:c2:e7:ba:f8:1c:a6:84:ce:e2:75:14:e7:96:93:08:41:3b:
2b:58:e8:fe:17:99:92:22:60:92:ce:89:7e:24:ea:a3:ca:9a:
6c:17:2b:16:4b:6e:9f:b3:77:26:4f:e9:ba:91:7e:b3:77:f7:
76:ca:62:e7:68:11:16:93:5a:3d:03:30:b5:1f:08:e9:a9:83:
61:32:15:a2:f2:02:93:9b:d8:9a:15:d4:db:b9:09:88:4a:24:
24:34:d1:ad:bf:1a:e5:30:7e:ea:84:c3:81:f0:43:c1:6c:fe:
e1:62:c1:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL5bPGQJQgZK9cvFyxxqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYThhMDEwY2M2ZDdjOTMyMGUwMTJlYTFkMWUzNmUwYTc2
MWMxMzgwHhcNMjYwNDE5MTAwMDUyWhcNMjYwNDIwMTAwMDUyWjAzMTEwLwYDVQQD
EyhiYjA4MjA2ODQ2NTFiNDgwOGFjODI5MjI0NmI0YjI0NjU0ZGYwYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0OL1ainUJPDdHSt9Nn50uOW0dKq
ac5F9bDTAhMdJw9PR3GYJbivIDuS60+SJsPmr4OSq5C3SqcDA2na2oWjmAPkk9si
HCM3tu5Rqp+NrAvqyw0SlqvhNuHjMUnLl3DDv5/ftSPdxFC4aE8p2h6uPLqWSUdu
bUyh8iXeNekR9pJE/iW7n6t5FqDJxAYmL/paZgtYHUDL8iNJEc1wRcxBoHmsSIZv
stNVtKNzuJE2/rbXDVPaib6/7q2XaW/WN+s/E3wTEccybrdsq9wxIuEKqDHt4bos
d9Im7OF4uh3E+HvLtuKJp9HKA9W19goaRv3g0UzGaca/OQ3BJh+gTsopcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsIIGhGUbSAisgpIka0skZU3wuVMB8GA1UdIwQY
MBaAFH6ooBDMbXyTIOAS6h0eNuCnYcE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEt
NDViZWZiZjFlZjdmLzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEtNDViZWZiZjFlZjdm
LzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIlRWNaJ
qZ6HzAx8wQw6KNNJBiAuYYBrTyTSVI5TCk492py+GXkBEccccagXbGTVV+4OoJoD
DQN54b9IRcf3vv0u08vAZd3cIuLhrvMSyHU6eh6jLEgvox8EUBQa5koaHxUBX1TO
DwzpW/elcoTX29/cfxanRjVl8X4XOi2fZUbsJaRRimlE0ULl21U7dYtMHsLnuvgc
poTO4nUU55aTCEE7K1jo/heZkiJgks6JfiTqo8qabBcrFktun7N3Jk/pupF+s3f3
dspi52gRFpNaPQMwtR8I6amDYTIVovICk5vYmhXU27kJiEokJDTRrb8a5TB+6oTD
gfBDwWz+4WLBIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:10 2026 by rpki-client