Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: jwezPl1UDIXn8t4ry+0b8XSVP+fiDBeTSWO5J6eQsQA=
Subject key identifier: 91:8B:88:9C:6E:EF:63:17:93:A8:75:D8:8B:B5:08:0B:F2:FF:D8:EA
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019DD9F976910A45F602A19197E268CD9753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1577
Signing time: Wed 29 Apr 2026 16:01:37 +0000
Manifest this update: Wed 29 Apr 2026 16:01:37 +0000
Manifest next update: Thu 30 Apr 2026 16:01:37 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: 9+72BGNuIjXSJT7B3Bx/jbzQ1UFAsfFt2yP3jsWRfZU=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:f9:76:91:0a:45:f6:02:a1:91:97:e2:68:cd:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Apr 29 16:01:37 2026 GMT
Not After : Apr 30 16:01:37 2026 GMT
Subject: CN=918b889c6eef631793a875d88bb5080bf2ffd8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:65:5a:5b:66:96:8f:aa:21:7f:40:a3:4f:
a3:15:01:cf:12:f7:31:e4:f9:44:cf:df:47:15:9b:
98:fd:e6:d6:19:a8:ec:3a:23:54:4b:4b:40:72:69:
fb:4d:5b:51:5c:17:19:dd:80:26:06:26:9d:2e:cd:
4d:82:53:d4:a2:4c:ab:91:6b:36:68:e8:ce:f7:53:
b0:fc:22:16:44:79:8c:d3:07:02:5d:87:b5:71:df:
c7:90:64:25:4f:fc:95:17:67:dd:69:28:c4:36:8b:
fd:aa:67:b9:ad:4c:c5:3a:6b:ed:c6:4a:6d:99:7d:
cd:52:5a:a9:b7:07:51:f9:e9:18:48:44:cc:5d:0e:
9a:d3:4d:96:d7:3e:47:0b:98:39:87:97:fc:97:0c:
d5:c6:a4:84:bc:73:c5:71:74:a7:3d:9d:87:e5:62:
94:00:76:d8:38:f0:5a:8e:a7:4e:7c:9c:a2:f6:a9:
5b:00:cf:64:79:37:43:6e:56:44:66:31:e7:5c:5f:
ab:e2:8f:89:f9:e5:a2:0d:68:94:b0:8f:4b:82:77:
2f:6c:9c:bf:d4:6a:ef:66:66:74:fd:53:26:22:46:
61:4e:d3:bb:ca:55:2d:8a:94:c0:89:9f:7c:47:fc:
c9:0c:58:57:23:88:de:0a:5e:4d:34:c0:23:77:f3:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:88:9C:6E:EF:63:17:93:A8:75:D8:8B:B5:08:0B:F2:FF:D8:EA
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:1d:55:ad:88:79:e5:df:8c:55:3b:05:3e:eb:f3:6a:36:
a6:33:c7:ff:16:03:e4:cf:da:34:31:72:84:05:29:f0:ac:e1:
61:bc:7e:4c:99:d6:5a:4e:01:b0:55:39:54:08:4c:53:92:e2:
8c:c1:12:32:2e:10:59:ba:fd:27:01:50:3f:46:26:cf:99:75:
70:7c:71:cb:32:d0:4b:62:82:56:a1:5b:ea:f7:cd:8a:52:74:
6e:3b:10:c1:c2:93:b7:0f:ed:4c:26:89:ba:91:62:69:66:74:
25:84:92:b4:66:70:a6:32:b6:a4:d9:28:54:84:fa:73:02:89:
a9:02:c8:74:56:91:27:d6:ef:2b:92:d9:a1:7c:35:b9:36:7c:
3b:fe:8f:60:1e:93:c1:d6:bb:eb:80:3d:b1:f7:c9:fb:3a:98:
10:2c:24:4d:f6:01:46:f8:8f:c7:1b:9d:db:5d:a4:aa:85:43:
b5:cb:7a:02:45:0c:0e:68:4c:61:9b:c5:a4:09:78:81:23:5f:
a2:c5:4d:d6:42:f8:52:6d:23:9a:9b:81:6b:40:bb:dc:e1:dd:
ce:6b:3a:7b:a1:3e:4e:80:d6:6b:1c:cb:68:68:d4:17:26:01:
17:7f:b7:d5:a1:ac:2c:79:0c:97:28:d2:ac:0c:10:1b:d9:c7:
88:9c:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:15:06 2026 by rpki-client