Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: bX9ONFHIRA3IaowYPT4yWcTa9uD0OnsHxBDrA37dGKM=
Subject key identifier: EA:07:06:00:23:EF:EA:A5:B0:2F:38:E4:B5:4B:95:36:D6:99:B4:68
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019D9962511630F4464E8EC29E6755538481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 17C2
Signing time: Fri 17 Apr 2026 03:00:50 +0000
Manifest this update: Fri 17 Apr 2026 03:00:50 +0000
Manifest next update: Sat 18 Apr 2026 03:00:50 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: OASYd56uExe4EFTFA/470vhFsLdPYbRQcUxnCw42v18=)
2: sWpGqOrvUhu_YeE103lUKrGogwY.roa (hash: G53bT0iyZh0zmMZw59Fi11N/QHTX1EKTX4fPsCxbvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:51:16:30:f4:46:4e:8e:c2:9e:67:55:53:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Apr 17 03:00:50 2026 GMT
Not After : Apr 18 03:00:50 2026 GMT
Subject: CN=ea07060023efeaa5b02f38e4b54b9536d699b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:5b:7d:cb:7d:cd:6e:00:6f:3f:4a:27:b8:
48:c1:b9:5b:36:99:69:e8:a0:5e:a4:56:f4:0c:1c:
45:34:92:b6:9e:9b:e5:25:c6:d5:bd:7c:34:0d:1e:
ad:38:07:64:c1:0d:f7:e6:60:ca:77:6e:a5:0e:1e:
1e:80:4f:81:b1:fa:49:a6:9f:16:8a:04:f8:41:b6:
85:db:4e:cf:bd:9a:f8:cf:df:ae:d9:4d:1b:92:03:
b4:3d:40:16:91:4b:ad:ab:5e:b2:3d:64:79:c4:13:
e3:26:e5:a2:70:5d:ad:e3:f6:65:6c:f8:86:f4:8a:
5c:96:a3:da:09:51:39:72:9a:8d:6f:11:ab:82:35:
9e:38:e1:57:dd:53:df:86:68:74:a6:5d:24:be:be:
96:70:3b:43:b7:9d:57:14:22:d0:7c:65:87:b1:4b:
f6:2b:b6:be:a0:82:48:62:15:1b:0f:f1:ef:87:de:
d8:80:e6:03:96:08:21:94:98:77:64:f4:ac:db:4d:
90:a0:f1:80:56:82:72:1e:4d:af:b4:a1:b8:57:a0:
48:cc:b9:45:3b:51:77:d1:af:17:16:5c:c6:fd:82:
a6:ba:7d:27:fb:87:a4:0c:b5:57:26:37:bd:1a:20:
d1:ee:50:df:eb:80:03:d1:e4:83:65:b3:28:d4:a4:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:07:06:00:23:EF:EA:A5:B0:2F:38:E4:B5:4B:95:36:D6:99:B4:68
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:25:fb:9d:18:57:43:42:33:47:5c:fa:a3:04:64:79:97:
d2:21:95:84:41:69:72:c0:c8:c5:9d:0f:74:81:e6:86:b3:aa:
24:ad:9c:91:75:12:42:56:e5:a1:e1:07:78:45:04:e1:f7:b8:
6e:94:21:21:51:62:5f:3f:34:64:43:e8:32:e0:4a:6b:d2:ce:
78:cb:27:32:7d:c5:fd:7a:91:c6:b4:4b:00:60:2c:6a:e1:eb:
3d:38:20:b7:ed:02:a5:85:1b:70:d8:02:ce:ac:9a:a7:86:12:
a6:b6:a4:c2:4f:f2:54:76:e1:c6:78:56:5b:63:68:e7:dd:37:
73:7b:92:c1:a2:10:60:46:91:da:13:f2:ea:7b:cb:93:a8:7d:
c5:ce:ce:14:47:95:d7:08:cb:8b:db:92:a0:78:80:60:34:ea:
66:45:6a:ff:05:27:eb:19:06:fb:66:1c:0d:bd:6f:22:2a:2a:
42:1c:d8:8e:39:d7:9a:13:4f:60:7f:5a:2c:a1:03:c8:5e:8b:
fc:f0:77:82:48:77:a8:6f:87:e1:ad:17:e8:2d:45:0c:94:4a:
ae:76:37:16:73:bf:51:4e:b6:0c:3c:47:ab:7d:dd:ad:77:55:
73:42:05:6d:49:55:7e:e2:6e:b0:a6:85:1e:59:94:0e:17:76:
bf:88:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:20 2026 by rpki-client