Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: igmnBmISV4Up9+5KGogXf8y6coh/5nvTynzP8VmWnBs=
Subject key identifier: 29:71:CB:63:55:7F:3A:55:67:13:10:5B:45:02:5C:93:50:61:10:66
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019DD050C4295748326B394024A977DC1EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 18EE
Signing time: Mon 27 Apr 2026 19:00:47 +0000
Manifest this update: Mon 27 Apr 2026 19:00:47 +0000
Manifest next update: Tue 28 Apr 2026 19:00:47 +0000
Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=)
2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=)
3: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=)
4: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=)
5: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: YUryC/6zvAtD1snCG1unakAl3Cq+wUGr2+5r0IhqHpw=)
6: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (hash: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=)
7: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=)
8: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (hash: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=)
9: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:c4:29:57:48:32:6b:39:40:24:a9:77:dc:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 27 19:00:47 2026 GMT
Not After : Apr 28 19:00:47 2026 GMT
Subject: CN=2971cb63557f3a556713105b45025c9350611066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:8f:07:b7:ca:ed:b0:6b:52:7f:ad:1d:b0:
3b:51:ec:36:7a:83:dd:ca:26:aa:92:6b:50:e1:ab:
75:da:98:95:b0:5f:64:35:49:25:2a:6e:83:8f:17:
aa:bd:63:66:f2:17:0e:a3:f4:57:79:ab:08:fd:60:
a0:f2:70:b4:25:28:9d:4c:b3:a6:3e:a9:ab:42:0b:
5e:64:86:01:10:0e:72:bc:d9:3e:40:ad:2a:34:1c:
8f:db:d6:23:0d:52:db:62:2e:36:7c:2d:de:39:22:
23:34:df:b4:ff:39:bf:4d:60:61:4e:e0:1f:a0:8c:
4a:e9:b5:cd:db:d8:f1:f6:68:33:e7:09:d9:d3:14:
88:5a:33:ae:0e:12:0e:45:48:2d:ac:ae:d9:56:80:
40:88:1b:5c:59:7b:9e:74:96:be:c4:87:d2:00:5c:
4a:c3:8d:dc:fc:bc:bd:21:8a:a6:14:8d:27:b4:1a:
4e:de:2f:e3:e8:05:02:17:21:b0:5d:29:2c:f1:f6:
cb:ba:27:21:fa:ad:9d:94:74:9c:01:36:21:ed:ca:
b5:57:0a:e2:fb:ea:82:49:a3:69:d6:87:59:29:18:
0f:c6:38:9f:b3:f9:51:ab:4c:da:46:6f:11:4d:8b:
50:be:73:02:d5:c3:45:97:b0:6d:c5:c4:c0:9b:83:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:CB:63:55:7F:3A:55:67:13:10:5B:45:02:5C:93:50:61:10:66
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0f:0f:21:d0:19:b3:00:83:60:66:6b:d8:13:6b:bd:e1:8e:
cb:ba:b1:1d:c1:3b:ce:ba:72:a3:42:61:8f:e5:3e:34:d4:5e:
f4:b3:38:99:11:b3:0c:46:aa:0b:03:17:29:1c:5c:5a:63:e5:
b5:bc:b8:5c:35:38:db:b5:70:bc:05:b6:bf:6d:22:6f:b4:24:
07:f6:0e:66:ab:01:a3:d1:1f:f5:27:2c:cb:a1:fc:36:c2:ee:
9d:03:30:56:b9:77:72:8f:83:65:58:ed:eb:cd:35:35:8d:2a:
fa:fe:36:38:ad:6f:36:a3:e8:3b:f6:20:ee:a3:9d:c3:0f:31:
c8:85:bb:70:ca:05:ab:f4:94:d5:6b:54:f1:87:95:03:d7:f0:
96:f7:39:7f:ca:14:0c:52:35:44:fc:ef:37:ce:f4:89:dd:0b:
79:2f:b8:41:b7:df:97:a2:1a:6a:cd:3f:e4:42:d8:32:90:eb:
76:ef:21:e2:81:d0:02:e7:96:85:31:c5:f7:ab:de:b5:d3:0d:
b4:63:d9:e0:11:74:6a:34:73:42:d9:42:d5:66:ef:b6:7c:07:
d2:db:5e:6d:e2:23:91:f7:23:22:e6:62:da:5f:d9:d1:c1:a8:
ab:e3:de:29:c0:9e:b9:6e:c7:f2:a8:5e:f0:a7:8c:4c:68:2d:
50:7e:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:22 2026 by rpki-client