Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: Z7gwOcIr9udnUtDOqRlHvEROnZrtMcI+B0SGAJoO5FI=
Subject key identifier: 1D:E3:1F:16:C6:FA:91:4E:21:13:6B:CE:9E:6E:75:45:D2:C8:A7:BD
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019D9AAC193273211C04076CEBF7DEE1C8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:02 +0000
Manifest this update: Fri 17 Apr 2026 09:01:02 +0000
Manifest next update: Sat 18 Apr 2026 09:01:02 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: xNiRE3eP3u38RbLICTDpLygj2lSmeIiojFHR2qoGtt4=)
2: tpgO__8JIWwf0K5I2LYCZrVrikM.roa (hash: f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=)
3: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (hash: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:19:32:73:21:1c:04:07:6c:eb:f7:de:e1:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Apr 17 09:01:02 2026 GMT
Not After : Apr 18 09:01:02 2026 GMT
Subject: CN=1de31f16c6fa914e21136bce9e6e7545d2c8a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:a1:71:92:1b:a3:ba:03:42:91:39:72:ca:
bb:10:37:da:ba:23:e3:62:b5:43:24:aa:b1:f8:ae:
11:3d:70:df:15:09:15:6e:eb:3d:f4:3a:6a:87:57:
c1:19:ce:09:3c:07:c6:31:51:ae:d2:4d:b1:fc:81:
9b:4e:50:58:42:b8:0a:53:4f:12:f4:54:62:37:9c:
16:6e:2f:4d:0d:28:55:f9:27:00:60:80:57:a0:fc:
f1:e3:d5:e8:a1:03:6f:97:a4:99:2c:19:c3:27:f5:
cc:f3:4d:6b:79:af:56:de:ce:fc:04:21:fa:71:32:
35:e0:09:e5:00:5f:2c:2d:48:55:68:e9:f6:12:7f:
15:7c:54:c0:28:58:6d:90:46:29:49:a6:28:ac:ea:
b1:68:e4:a2:fe:6f:7e:a9:82:89:f3:a8:67:af:de:
bd:11:be:07:13:a8:57:d8:0e:a9:d6:7b:15:de:6e:
d8:90:95:e5:72:51:19:bb:30:ad:86:d3:37:64:b1:
5e:71:95:9d:8d:d0:23:8e:0b:f7:c4:8c:56:c9:de:
c6:d0:81:15:7f:2e:e7:99:f5:25:db:ec:16:1e:18:
d9:be:db:90:cb:ef:76:2b:56:3a:66:75:0f:56:92:
63:bb:ad:13:5d:41:f9:0b:d5:ff:61:da:0c:89:67:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E3:1F:16:C6:FA:91:4E:21:13:6B:CE:9E:6E:75:45:D2:C8:A7:BD
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:8b:7f:cb:0f:ca:fa:52:f2:8c:a3:81:c3:a8:bf:91:fe:
97:69:ae:9e:3e:2a:ae:02:16:d3:c8:a4:ca:cb:65:34:0c:b0:
0d:3d:3c:87:c0:5d:05:57:c9:c9:8a:a8:69:da:f0:65:10:e9:
c9:b8:8b:31:6e:03:5d:e0:e8:77:09:29:6d:10:4a:f2:5d:64:
83:93:22:00:e5:4b:e2:23:a3:9f:42:35:60:f3:07:fc:44:3b:
83:ed:d2:e0:18:54:81:84:38:87:91:6c:7a:7f:82:32:83:59:
6f:2c:0b:fe:a8:03:37:ef:5b:ed:05:14:6c:8c:a9:94:b3:d9:
11:94:99:20:56:a0:d0:72:ad:c5:f5:36:5f:01:88:f1:14:b1:
97:1c:79:da:37:b3:e1:e4:82:6a:e8:07:67:84:e5:51:6a:5d:
e2:24:7a:1e:51:67:d8:55:92:3e:05:e8:c4:90:a9:12:1b:f5:
66:dc:fa:d5:90:57:a1:d5:24:6b:d1:14:d5:e7:be:1a:64:dc:
12:6c:48:c2:71:32:18:eb:f7:5b:b7:06:f4:ab:62:62:31:8b:
53:90:07:e2:9b:8f:07:cc:13:9e:f3:d5:74:34:0c:ac:8e:30:
49:22:98:7a:26:87:72:80:bb:38:51:b3:cc:c4:6b:f2:d8:00:
17:31:08:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arBkycyEcBAds6/fe4ci/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjYwNDE3MDkwMTAyWhcNMjYwNDE4MDkwMTAyWjAzMTEwLwYDVQQD
EygxZGUzMWYxNmM2ZmE5MTRlMjExMzZiY2U5ZTZlNzU0NWQyYzhhN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aChcZIbo7oDQpE5csq7EDfauiPj
YrVDJKqx+K4RPXDfFQkVbus99Dpqh1fBGc4JPAfGMVGu0k2x/IGbTlBYQrgKU08S
9FRiN5wWbi9NDShV+ScAYIBXoPzx49XooQNvl6SZLBnDJ/XM801rea9W3s78BCH6
cTI14AnlAF8sLUhVaOn2En8VfFTAKFhtkEYpSaYorOqxaOSi/m9+qYKJ86hnr969
Eb4HE6hX2A6p1nsV3m7YkJXlclEZuzCthtM3ZLFecZWdjdAjjgv3xIxWyd7G0IEV
fy7nmfUl2+wWHhjZvtuQy+92K1Y6ZnUPVpJju60TXUH5C9X/YdoMiWd3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3jHxbG+pFOIRNrzp5udUXSyKe9MB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvuLf8sP
yvpS8oyjgcOov5H+l2munj4qrgIW08ikystlNAywDT08h8BdBVfJyYqoadrwZRDp
ybiLMW4DXeDodwkpbRBK8l1kg5MiAOVL4iOjn0I1YPMH/EQ7g+3S4BhUgYQ4h5Fs
en+CMoNZbywL/qgDN+9b7QUUbIyplLPZEZSZIFag0HKtxfU2XwGI8RSxlxx52jez
4eSCaugHZ4TlUWpd4iR6HlFn2FWSPgXoxJCpEhv1Ztz61ZBXodUka9EU1ee+GmTc
EmxIwnEyGOv3W7cG9KtiYjGLU5AH4puPB8wTnvPVdDQMrI4wSSKYeiaHcoC7OFGz
zMRr8tgAFzEIlw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:35 2026 by rpki-client