Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: VmzRODNAvCTjYLEzRJ/oSOhMn1LIhtgS8glgeJf96UQ=
Subject key identifier: FA:AC:75:63:C8:A4:68:0E:EF:9F:12:3D:B5:0B:51:EB:48:00:0A:87
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019DB2464F303BECA6F135688D189E21F669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 08F9
Signing time: Tue 21 Apr 2026 23:00:45 +0000
Manifest this update: Tue 21 Apr 2026 23:00:45 +0000
Manifest next update: Wed 22 Apr 2026 23:00:45 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: mCn+6bXsaDGevQQrcY07o3rl0U7BNUbhmUCsYY0hofw=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:4f:30:3b:ec:a6:f1:35:68:8d:18:9e:21:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Apr 21 23:00:45 2026 GMT
Not After : Apr 22 23:00:45 2026 GMT
Subject: CN=faac7563c8a4680eef9f123db50b51eb48000a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:15:34:9f:bb:17:fd:59:fc:dd:40:8f:8b:
e2:55:05:b0:3f:85:6b:65:4c:96:70:dd:c9:63:30:
3b:01:e6:e6:08:4f:4b:39:55:1c:eb:74:d6:f7:da:
6e:21:9e:42:07:cb:de:f1:bc:7d:77:b8:30:11:98:
55:7c:43:bc:32:2e:6d:89:14:52:a0:c2:0a:ef:93:
98:a9:8f:5f:36:03:65:18:90:ac:d9:1d:65:b5:32:
a3:c8:c2:f6:c3:7f:b8:1e:1c:a3:1e:da:23:3d:27:
62:12:18:19:9f:b5:69:42:4a:d5:24:92:57:72:a1:
cd:1b:f7:7e:d3:73:f8:b1:10:65:1f:b4:d1:aa:33:
2c:a5:35:f7:53:41:4b:fa:b1:3e:2d:55:02:b5:dc:
44:bc:aa:59:51:df:b2:70:a6:94:ae:97:08:44:dd:
d1:af:90:c9:81:02:f0:cd:6d:3a:0c:f9:1f:47:a4:
2a:f7:0f:a6:e3:d5:0b:66:e1:2f:03:b8:d7:d4:71:
d2:78:65:7e:f2:d8:b1:ff:f8:52:97:5b:d9:e8:72:
8f:57:b8:26:30:63:37:f0:a7:68:de:25:60:ce:2c:
63:2d:67:81:cd:a5:51:2f:54:bd:ab:e9:43:5e:91:
7a:a8:49:a5:ad:df:ca:a6:66:2d:e1:57:d0:a4:b6:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:75:63:C8:A4:68:0E:EF:9F:12:3D:B5:0B:51:EB:48:00:0A:87
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:b1:70:f8:24:24:49:55:f3:b4:da:b4:67:96:ff:35:53:
34:dd:3f:78:37:ba:7a:da:5d:79:1e:37:c0:84:ab:fd:0f:67:
8a:db:ff:76:b3:bd:ba:5e:d1:22:53:60:b1:ec:69:ae:c0:e5:
a2:cc:fc:61:11:e0:94:ea:69:c8:f7:59:02:2c:db:17:7c:c2:
b9:1c:11:ea:72:35:0f:8b:db:5c:01:ab:dc:3a:af:af:d2:ba:
0e:f5:78:b4:29:1e:9c:85:6f:9a:7c:de:d4:72:ba:79:bf:0a:
0a:44:f0:2f:5e:c2:9e:3a:70:27:90:82:06:6c:af:b0:a8:53:
e9:5f:c3:ba:38:2a:ef:90:9a:e3:c1:73:04:d0:45:26:ad:77:
f2:89:b8:c4:6d:93:45:fd:60:ed:c7:c4:bb:b1:98:70:e0:b1:
dc:24:bb:86:1a:a6:79:0c:23:bb:90:0c:5c:69:6d:ea:ac:f8:
05:63:51:1c:02:a8:5a:0e:32:f5:a5:bb:7f:33:38:25:4b:9a:
27:b3:f8:3c:e7:b9:cd:ab:fd:14:5b:a0:17:a2:9d:07:e0:2c:
a0:73:cd:2d:3f:a1:2f:e4:c7:9e:18:37:0f:cb:bc:29:d1:c7:
5f:a9:87:40:1d:ec:7f:95:24:4b:b7:fd:06:17:de:53:41:7a:
3c:f9:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:40:43 2026 by rpki-client