Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: TIWgNbOXVvRuqSfLJJDVp19vZ7VifkvLvcXqvIbajqA=
Subject key identifier: 95:48:29:C8:65:1A:52:55:44:B4:16:1B:4F:13:E4:4C:3D:91:4F:F0
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019D9D3EE19F09B7F386A5CCC63BE5CC5ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 0387
Signing time: Fri 17 Apr 2026 21:00:36 +0000
Manifest this update: Fri 17 Apr 2026 21:00:36 +0000
Manifest next update: Sat 18 Apr 2026 21:00:36 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: KZXbI9QpcKy8YEYY7J7hbIvA6V/8BXhMb467OapYcsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:e1:9f:09:b7:f3:86:a5:cc:c6:3b:e5:cc:5e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Apr 17 21:00:36 2026 GMT
Not After : Apr 18 21:00:36 2026 GMT
Subject: CN=954829c8651a525544b4161b4f13e44c3d914ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:f5:9b:bc:79:85:c1:15:c9:56:eb:13:19:
f8:e1:f9:21:9e:31:c3:32:cd:5f:4d:f0:99:e9:e0:
0f:58:82:8f:67:14:c9:49:1e:63:1e:8b:34:1c:80:
57:e1:3f:81:3e:22:0e:05:e5:32:ef:da:7a:26:51:
55:ee:c7:ab:28:4c:a6:8a:d6:18:54:fb:11:70:92:
5a:30:3e:80:53:66:45:52:fa:68:b3:ef:b9:dd:56:
19:3b:96:35:a4:c0:95:10:8c:68:8e:7b:cb:4c:6c:
9b:08:a5:97:e7:05:28:dd:5e:45:a1:e6:03:30:14:
e7:99:f7:8b:64:a8:19:dd:28:07:7a:08:2b:bc:5f:
4e:1e:28:2b:3a:79:20:fd:54:1c:60:1b:48:98:58:
c5:91:9f:b0:f1:41:a3:94:82:69:44:3c:c0:f1:a0:
aa:88:a1:cc:90:71:8a:20:d6:d7:8f:67:55:09:93:
c6:8d:66:2b:86:f0:33:4f:21:28:49:62:70:77:b9:
73:95:ae:7a:f2:4d:c8:b8:c6:7d:47:cf:b7:1e:1c:
7b:cc:7e:20:5e:79:a9:e9:03:92:61:fd:4a:e2:fe:
4f:13:ab:5f:64:f9:f7:cf:a3:94:5f:f9:c7:98:9d:
9d:eb:82:a3:36:01:e3:9f:04:3b:3b:b6:1d:1c:2b:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:29:C8:65:1A:52:55:44:B4:16:1B:4F:13:E4:4C:3D:91:4F:F0
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:ab:c2:d8:9b:68:1d:b7:de:eb:dc:8d:f8:e4:be:1d:23:
71:db:d5:3c:26:59:03:a4:8c:85:10:37:05:da:46:6a:dd:e6:
ed:39:3d:ca:52:d9:21:e4:c7:1d:d8:86:e7:11:ee:0b:a6:30:
52:a9:b1:c6:b4:4a:07:31:71:57:3a:69:f5:c2:dd:a1:36:72:
cd:fa:cd:45:0c:a1:a7:9a:11:db:16:b9:40:2b:42:4f:11:59:
14:f2:a3:b0:bc:a6:f3:1e:12:71:86:fd:d7:b4:a2:e4:9e:08:
e6:d0:49:04:67:6c:9d:3c:c2:4f:a8:f1:ce:c5:f1:94:68:23:
fc:1a:6e:23:f3:df:d1:70:45:35:b4:7d:e0:0a:51:5d:98:04:
09:ca:4a:a0:b4:56:7f:36:5d:7f:ba:e0:6e:85:39:15:19:59:
08:58:99:71:a6:3c:94:8c:a2:8e:32:b5:73:d4:ca:b8:ad:e5:
96:23:12:7b:1e:a5:f8:19:85:58:44:0a:cf:1b:a2:7d:da:4f:
51:08:56:b9:6e:c2:13:12:f4:42:58:3e:d3:d3:73:94:6f:b9:
9b:92:fe:df:36:f0:62:f3:17:64:d4:9d:ae:47:5e:f9:54:c8:
98:f5:28:a6:93:5d:4b:62:1a:1a:3a:52:01:94:53:a1:ac:03:
78:ed:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:05 2026 by rpki-client