Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier: LDepPStZuTjktTFVzZ2fh34vrrEmQD2F/DRF6ylznqo=
Subject key identifier: FB:5B:A9:9A:7A:A4:7B:7B:D9:83:A5:27:D1:F8:34:AF:B6:D0:1F:98
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 019DA943EB6D63B599D614B92F6E4EDB29E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number: 18ED
Signing time: Mon 20 Apr 2026 05:01:33 +0000
Manifest this update: Mon 20 Apr 2026 05:01:33 +0000
Manifest next update: Tue 21 Apr 2026 05:01:33 +0000
Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
4: WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa (hash: zY6UwlQ/GxjFTntYJPN/sGqFKcDOf8d8m1v7xUcl1jY=)
5: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: AXL2CwzdfUwewmu3JJQVAmFXksR8AqLXKDhdcsL/W5Q=)
6: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (hash: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc=)
7: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
8: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:eb:6d:63:b5:99:d6:14:b9:2f:6e:4e:db:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Apr 20 05:01:33 2026 GMT
Not After : Apr 21 05:01:33 2026 GMT
Subject: CN=fb5ba99a7aa47b7bd983a527d1f834afb6d01f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:e7:09:42:7d:d4:47:62:34:cc:d9:36:68:
5d:a8:27:05:fe:68:00:9e:c5:da:7d:4a:6d:db:83:
7b:03:45:8f:a7:d1:64:58:fd:37:47:bc:45:3b:d1:
a3:a7:5a:89:e8:77:9b:d4:ba:28:5f:db:d6:10:3e:
87:58:d5:b1:54:53:ad:fb:d0:6e:48:d8:5e:73:48:
64:c9:4f:ca:8f:f3:cb:30:2a:71:87:35:f1:ad:e6:
84:7c:72:8f:a9:61:d4:ff:78:47:53:f7:d6:4c:ad:
a6:55:b9:41:72:68:88:b3:5d:63:ad:5f:bd:bb:1f:
e0:4a:65:49:6a:07:a1:15:4f:59:24:69:94:3d:c8:
b1:36:8d:31:ed:56:6b:3e:b7:38:34:0c:48:3c:53:
74:a1:b2:22:bf:a1:f5:ec:61:49:bf:13:e2:dd:d8:
5d:f5:1a:1e:7e:f0:5c:5e:ff:dc:52:e7:2f:21:e0:
1b:68:de:2a:1a:f5:a7:ab:df:af:38:6f:38:cb:f8:
6a:b9:6d:8b:c7:35:0a:69:41:c0:84:36:3e:17:a9:
6b:14:38:83:e2:10:d8:93:41:3f:d6:a3:ec:db:cd:
2a:c4:ce:b6:60:bf:1d:e9:1e:ab:60:4f:67:60:95:
29:b4:7c:73:ce:01:54:dc:94:4b:81:d4:0f:c0:83:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:A9:9A:7A:A4:7B:7B:D9:83:A5:27:D1:F8:34:AF:B6:D0:1F:98
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0c:a2:55:af:ee:3b:45:a3:78:5e:c0:a0:fc:0d:9f:24:df:
03:04:3f:04:79:e2:60:10:1b:4f:13:40:fc:3d:88:93:c9:3d:
99:47:80:8c:e7:62:91:69:82:84:ff:6e:ad:ca:35:ce:c1:f7:
aa:b6:6e:a6:5d:1a:63:0d:65:03:31:2d:e4:54:1d:41:b9:f7:
42:05:09:94:22:b8:4f:6d:2c:7e:65:bd:26:8f:d2:a1:cb:47:
58:91:83:27:dd:aa:37:8a:0e:94:80:1f:1d:76:e1:5d:08:11:
f4:a5:11:94:70:62:1e:12:68:df:0b:2f:86:18:39:75:c5:75:
00:b0:a4:eb:e1:26:17:bd:92:44:f2:ad:e7:1d:ea:1b:b7:41:
86:1d:10:66:fa:f7:19:fb:ee:fd:9b:0d:ca:72:d5:9e:91:06:
9f:ac:51:bf:fd:62:06:4c:01:ee:b0:c0:b2:97:9e:56:67:c6:
d4:e8:5b:dc:27:24:cb:92:0e:6f:cf:06:45:df:6c:6a:d6:80:
1b:95:bd:f3:6a:36:ec:5a:fa:08:ec:e0:cd:75:33:7b:0a:79:
e8:a1:c9:a2:f5:15:37:a3:00:c6:c7:b3:d7:1f:d6:eb:4a:8c:
14:4b:fe:81:30:6e:4a:c1:83:ab:78:47:eb:e2:7c:db:84:62:
eb:33:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:35:48 2026 by rpki-client