Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: DyDSdhp0B8vPg6RtFineVX9GDPw/jdpbLEtC4uOx62w=
Subject key identifier: F9:14:F6:6E:EE:A2:5F:CF:11:92:3A:E3:EA:A2:06:4E:A9:5C:FC:00
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019E31BBBAD304BFE1F733E7D6135879BDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 18BE
Signing time: Sat 16 May 2026 17:00:46 +0000
Manifest this update: Sat 16 May 2026 17:00:46 +0000
Manifest next update: Sun 17 May 2026 17:00:46 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: FJMLL2W1QNWwb+HPKpWkfT7hHmrxSwkepvxxYXrqMds=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:ba:d3:04:bf:e1:f7:33:e7:d6:13:58:79:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: May 16 17:00:46 2026 GMT
Not After : May 17 17:00:46 2026 GMT
Subject: CN=f914f66eeea25fcf11923ae3eaa2064ea95cfc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:a7:d0:a2:5d:20:d9:e2:34:d9:1d:2a:8c:
e4:65:d7:c4:e3:79:eb:53:23:d0:25:03:57:86:3f:
98:20:6a:9a:dc:51:d8:6f:b4:af:3a:05:69:df:31:
83:bd:9a:f4:96:06:c9:f8:3f:6f:21:50:a2:bc:b2:
08:70:11:61:e6:f6:f8:38:59:09:aa:c8:23:7b:02:
4f:18:9e:39:b0:9d:b1:6b:d8:a0:f7:8c:b8:16:9d:
12:93:88:9a:1d:ee:31:a9:e0:8c:16:bf:4b:a5:97:
eb:78:53:8c:cc:07:75:2b:6e:3c:9f:ee:94:bd:43:
90:17:c6:74:10:2c:a6:64:25:de:d5:25:28:f9:05:
c1:a1:3f:0e:a7:0b:6c:96:9b:89:3f:d0:d6:98:c9:
e0:44:41:d4:e1:87:ba:bc:4c:44:3a:54:1f:ed:69:
47:08:dd:48:33:4e:e6:9c:5e:7a:29:97:51:c3:7d:
12:0d:14:62:75:26:2d:77:7f:fb:97:b1:94:6e:c3:
5d:4e:fc:1d:14:77:93:47:7b:bf:86:5b:bb:28:c5:
41:2f:a1:2c:7e:84:ff:60:48:7a:21:cb:3b:ed:9b:
e6:53:20:fc:c7:86:b3:d8:1d:6c:b1:ce:f8:71:e2:
22:2b:fb:09:fd:be:18:7b:02:95:70:56:4e:c0:5c:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:F6:6E:EE:A2:5F:CF:11:92:3A:E3:EA:A2:06:4E:A9:5C:FC:00
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:74:7d:93:08:37:16:a1:00:b4:10:68:a5:6d:83:a2:e0:ac:
4d:9c:5c:5b:ea:5e:9f:43:db:48:bb:70:7b:3e:7c:86:cb:bf:
92:e8:56:b6:c1:9d:59:a1:df:14:4b:7d:13:fd:d8:9f:40:fb:
ef:48:e3:8d:7f:0c:34:cb:2c:ae:25:8a:26:51:19:dd:a2:ff:
f9:b6:17:71:5c:de:5c:52:d7:97:23:70:36:2a:db:e7:f0:b4:
5f:de:72:7e:cf:2b:3b:26:fa:25:e8:70:9b:d7:4b:59:30:e4:
2f:6f:e4:1b:38:95:62:bc:03:15:1d:81:18:3c:d7:08:57:c9:
35:3e:c5:ad:6b:1d:a5:3b:6b:78:cc:8c:39:3d:7c:ac:a0:ce:
f9:b3:3a:04:5b:5e:1b:e8:9d:89:b3:b3:45:a7:92:96:32:56:
6c:95:dc:28:52:d7:ed:31:0c:01:2c:63:c4:48:c6:f0:98:42:
fd:86:50:1e:57:6a:84:65:eb:b2:34:3b:2b:6e:0b:ca:51:63:
d5:2c:7b:2c:de:02:90:9f:72:e4:82:52:e5:7c:a6:95:89:08:
c3:6e:4a:ab:ca:a2:c2:17:43:76:c1:53:57:7d:e6:7e:aa:fc:
fd:06:99:56:9b:1f:8e:41:f4:65:bf:cb:3a:66:1a:c3:c0:83:
f5:c6:f0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xu7rTBL/h9zPn1hNYeb3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjYwNTE2MTcwMDQ2WhcNMjYwNTE3MTcwMDQ2WjAzMTEwLwYDVQQD
EyhmOTE0ZjY2ZWVlYTI1ZmNmMTE5MjNhZTNlYWEyMDY0ZWE5NWNmYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kyn0KJdINniNNkdKozkZdfE43nr
UyPQJQNXhj+YIGqa3FHYb7SvOgVp3zGDvZr0lgbJ+D9vIVCivLIIcBFh5vb4OFkJ
qsgjewJPGJ45sJ2xa9ig94y4Fp0Sk4iaHe4xqeCMFr9LpZfreFOMzAd1K248n+6U
vUOQF8Z0ECymZCXe1SUo+QXBoT8OpwtslpuJP9DWmMngREHU4Ye6vExEOlQf7WlH
CN1IM07mnF56KZdRw30SDRRidSYtd3/7l7GUbsNdTvwdFHeTR3u/hlu7KMVBL6Es
foT/YEh6Ics77ZvmUyD8x4az2B1ssc74ceIiK/sJ/b4YewKVcFZOwFxpWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkU9m7uol/PEZI64+qiBk6pXPwAMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnR9kwg3
FqEAtBBopW2DouCsTZxcW+pen0PbSLtwez58hsu/kuhWtsGdWaHfFEt9E/3Yn0D7
70jjjX8MNMssriWKJlEZ3aL/+bYXcVzeXFLXlyNwNirb5/C0X95yfs8rOyb6Jehw
m9dLWTDkL2/kGziVYrwDFR2BGDzXCFfJNT7FrWsdpTtreMyMOT18rKDO+bM6BFte
G+idibOzRaeSljJWbJXcKFLX7TEMASxjxEjG8JhC/YZQHldqhGXrsjQ7K24LylFj
1Sx7LN4CkJ9y5IJS5XymlYkIw25Kq8qiwhdDdsFTV33mfqr8/QaZVpsfjkH0Zb/L
OmYaw8CD9cbwdA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:47 2026 by rpki-client