Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: UVUn2G0cvXnzcqykKyRFXMb9P+RWHnO0b6tBowvDCkA=
Subject key identifier: 22:1A:49:F7:16:AB:C7:1B:AA:5B:48:79:3F:9F:B2:E5:E4:D4:77:D3
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019D98BD5FFAAF174FF88F98F65FCFB370C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0C23
Signing time: Fri 17 Apr 2026 00:00:40 +0000
Manifest this update: Fri 17 Apr 2026 00:00:40 +0000
Manifest next update: Sat 18 Apr 2026 00:00:40 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: PUJ2ojxEFxzLuEUoqjoMMUBvcKQDEHMV5Gp+Dl21eyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:5f:fa:af:17:4f:f8:8f:98:f6:5f:cf:b3:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Apr 17 00:00:40 2026 GMT
Not After : Apr 18 00:00:40 2026 GMT
Subject: CN=221a49f716abc71baa5b48793f9fb2e5e4d477d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:1f:07:2a:07:03:5a:26:2b:ff:a1:d0:1d:
54:a8:77:81:e5:ba:8c:c4:00:6d:39:62:99:f3:e4:
bc:13:12:3f:aa:71:08:65:fa:5b:49:3d:18:db:81:
58:9b:d3:16:66:a5:94:ff:ad:1b:ee:62:dc:44:73:
db:c7:e5:af:c7:bd:8e:11:85:a4:b6:37:85:4c:03:
ab:3f:c8:ac:b7:3a:01:e5:67:73:50:1b:c1:7b:b1:
d6:30:28:07:1e:43:e0:d0:8a:3f:bd:4e:1b:6c:1a:
58:b8:95:53:2a:bb:db:d2:e6:6e:b2:e0:cf:5c:11:
61:cf:4a:d6:17:e4:92:6b:3b:02:42:8d:df:1f:51:
50:f6:da:31:e4:a1:fd:de:aa:e7:31:f5:fc:2d:72:
6c:59:3b:45:37:29:91:ba:c5:4b:ee:b7:29:bc:cd:
ed:8e:2a:bc:3d:41:dc:e7:28:84:2c:12:6e:a5:e0:
71:4e:dd:52:c0:17:7c:bc:64:db:69:39:80:64:7e:
61:55:4a:61:ce:fa:34:84:2d:4e:2b:14:d9:67:9b:
82:b8:ed:0e:78:3b:ff:0b:17:f4:a4:a7:73:3d:e3:
76:8c:2e:a0:90:3d:19:9b:41:f8:ae:81:f4:0c:62:
0e:1a:38:21:38:82:65:48:95:52:c1:cb:d8:37:42:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:49:F7:16:AB:C7:1B:AA:5B:48:79:3F:9F:B2:E5:E4:D4:77:D3
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:39:4e:bf:34:9b:5e:68:87:a6:b9:15:28:a7:84:8a:db:00:
24:90:f0:9e:4a:8c:2b:ae:ed:9d:de:b9:90:eb:2f:2a:51:fe:
f6:a2:f6:62:7b:83:18:e7:34:4e:c5:3b:53:51:be:75:fb:6d:
52:3a:5c:28:a5:a3:6c:49:29:c9:c8:a4:4a:94:e6:c0:6b:ac:
0a:fe:13:fb:c8:46:c7:3a:67:2a:26:73:55:43:47:fe:45:f6:
5d:25:ec:fa:27:32:ee:6c:cc:77:b6:a8:1f:4b:a8:f9:7b:f4:
6a:0a:a1:6f:a3:84:d3:8c:11:17:c1:ea:c3:c9:51:ab:ba:b9:
12:d2:83:f4:16:88:5e:ba:b0:8d:62:16:0b:99:73:61:a4:88:
e4:08:5b:c6:04:2f:f6:8e:5d:2a:a0:f4:bd:64:a0:65:70:86:
0e:c4:79:66:e7:d0:1c:33:43:73:ca:a4:f5:cc:0e:7d:70:dc:
39:09:37:c9:66:45:1b:7e:ae:2d:38:59:90:aa:be:77:64:fd:
4d:96:b8:3d:49:a9:2a:3e:07:d9:18:bb:07:ad:66:b3:9a:7f:
88:5c:f7:f1:f4:b5:af:74:2d:c7:9b:ee:ad:30:1e:5f:12:09:
0e:84:b0:e7:fd:03:9b:87:23:92:6f:7a:64:34:64:b7:f1:d9:
6a:47:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:01 2026 by rpki-client