Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: PUMQq1Q5f4KqoI/oNW/sEKlnwucg6zRMVdF2/AqEEho=
Subject key identifier: C4:57:1A:11:3D:4C:8A:26:5D:5D:68:D5:95:EF:B9:C4:DD:76:28:2A
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019DA9B2040A33A0C0A7E91B03655A4A1C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 11E0
Signing time: Mon 20 Apr 2026 07:01:49 +0000
Manifest this update: Mon 20 Apr 2026 07:01:49 +0000
Manifest next update: Tue 21 Apr 2026 07:01:49 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: 9jMrdh7EJzkCQR61DKCWVEO/WwpwsE+a5tXVSs4+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:b2:04:0a:33:a0:c0:a7:e9:1b:03:65:5a:4a:1c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Apr 20 07:01:49 2026 GMT
Not After : Apr 21 07:01:49 2026 GMT
Subject: CN=c4571a113d4c8a265d5d68d595efb9c4dd76282a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:72:aa:45:61:18:8e:26:d3:60:9b:09:8a:
17:b6:59:27:f7:96:f4:1f:77:0a:2c:9c:43:2f:6e:
73:b4:f3:e1:8b:84:ec:8a:ab:a8:6e:52:a5:82:14:
a2:11:02:c2:d9:29:2c:2f:3d:a3:59:72:ce:94:c8:
87:b3:b5:7f:91:35:8b:da:2d:30:33:59:0c:df:57:
8c:ec:20:30:25:35:f9:4f:25:11:20:f3:a4:c5:ca:
6f:2a:ff:cd:98:03:96:37:58:1a:71:c6:3e:c2:82:
0b:04:ad:29:40:22:74:0a:6d:da:8e:d0:2b:2d:2a:
24:f7:3b:63:b6:a8:1e:04:db:6c:a7:c7:db:40:44:
5a:7b:40:68:d9:14:c0:4b:d7:0b:8d:aa:f3:e0:e9:
a0:9f:ba:13:4b:6c:23:c1:e7:09:13:02:fc:c3:bf:
e7:8e:a9:66:d5:a7:9e:17:dc:3c:47:47:d8:c2:8e:
98:61:59:39:78:40:c9:a2:dd:d2:0d:33:87:6b:56:
48:33:98:b9:19:00:15:22:fb:bc:24:29:5c:0c:d5:
aa:56:23:23:f7:37:39:6a:dd:fd:97:f1:85:f6:fb:
ee:9a:53:42:51:95:51:ec:ff:a7:bd:12:bc:d9:da:
af:d6:f1:cc:20:2c:c5:1c:29:6c:af:6c:bd:e2:1f:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:1A:11:3D:4C:8A:26:5D:5D:68:D5:95:EF:B9:C4:DD:76:28:2A
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8d:68:4d:f7:2b:16:cb:0b:e8:2c:5c:ac:bf:cd:c0:fa:4e:
12:d6:57:5e:b2:b6:2b:d1:29:08:71:b2:cb:50:f0:11:23:c5:
05:e2:7a:3b:db:6e:27:6f:0b:b0:e6:5b:62:79:a6:93:8a:af:
bd:a6:e6:e5:7c:b7:99:00:46:e1:24:9f:01:be:6c:ac:50:03:
1d:71:45:b1:9e:20:5a:ef:c8:06:d3:e4:1d:4e:89:b3:cf:16:
c8:a5:c5:6a:89:e7:40:37:c1:e1:6f:a1:b6:77:0b:39:6a:c8:
81:f6:e9:65:b2:a2:1a:1a:95:52:49:a8:7d:14:84:e0:fd:4c:
ec:66:41:b7:bd:fe:0b:72:1e:3f:5e:12:22:44:64:5b:15:6c:
48:27:da:71:41:87:e9:8e:41:de:4e:7e:83:71:ca:64:5b:b9:
ae:9b:f2:7d:9a:16:2b:48:40:41:68:18:f6:9d:20:2c:f8:32:
53:84:21:b0:4b:04:cb:51:14:66:f7:24:6e:b7:01:10:69:66:
ed:e3:11:b2:9f:1b:fa:2e:30:78:c4:33:b8:61:02:e4:5b:1f:
b3:a4:23:95:0b:fb:78:4b:cd:e4:06:16:13:cc:7e:23:6e:04:
08:27:c1:9f:97:1b:78:44:ee:44:72:0a:0e:53:72:04:0f:5a:
26:90:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:46:14 2026 by rpki-client