Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: jmAKBLmziRYQ5ZhSGljM/5fyVjgR6wggNXiLgHBDplk=
Subject key identifier: 53:A3:A5:E0:21:DB:EE:B4:DE:19:1D:08:95:12:4E:C5:9F:AF:C3:78
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019DCED08B32EE33CD04963863DEFA17CAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 12:01:06 +0000
Manifest this update: Mon 27 Apr 2026 12:01:06 +0000
Manifest next update: Tue 28 Apr 2026 12:01:06 +0000
Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: PQoonkE0ItQTLBXPiX5t/0xwrThtmMBgR8/+DJuSNNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:8b:32:ee:33:cd:04:96:38:63:de:fa:17:ca:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Apr 27 12:01:06 2026 GMT
Not After : Apr 28 12:01:06 2026 GMT
Subject: CN=53a3a5e021dbeeb4de191d0895124ec59fafc378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:4e:49:a5:e8:38:93:b1:48:42:73:30:01:
18:99:3f:a2:19:5a:63:72:ba:7b:d4:01:ef:d2:89:
c2:bb:d0:d6:f7:be:05:0f:6a:a2:1a:70:e5:ab:ec:
c5:91:de:db:92:eb:cd:4e:17:e7:35:f5:2e:5d:27:
b4:b5:58:da:75:8c:79:d9:78:83:ad:ed:90:1e:ae:
fe:c6:0d:c9:d4:b2:46:83:52:c6:af:2b:97:10:85:
24:e3:eb:63:3e:87:95:1e:5b:55:3d:cd:cd:89:8f:
0c:aa:67:70:2d:18:62:ed:40:7f:10:13:40:82:99:
ba:01:60:f8:a4:29:1d:08:f8:de:23:55:80:a8:1b:
23:c2:df:5a:9c:61:9e:5d:27:06:ec:e1:ba:95:a8:
86:ab:86:f5:cb:7c:b4:20:87:a5:cd:30:2b:7b:75:
36:da:ea:f1:92:5f:b1:ce:bc:9e:54:80:ce:3b:46:
d5:2c:4e:66:30:a6:5e:11:4d:01:dd:61:6d:dd:e6:
28:48:20:5a:d9:06:48:55:a6:98:c3:dd:97:47:8d:
53:90:7e:f9:d7:14:88:e5:0d:d5:09:ab:b7:dc:d3:
c9:22:b6:9d:75:7f:3c:b8:20:f2:52:20:ab:03:26:
74:c9:1f:60:41:21:2f:c5:b0:f4:79:05:f2:bb:a7:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:A5:E0:21:DB:EE:B4:DE:19:1D:08:95:12:4E:C5:9F:AF:C3:78
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:89:8f:0a:7e:d9:c8:d9:7d:47:35:f4:e5:8a:be:f2:31:81:
e5:73:dd:2a:01:ac:c6:b6:5a:28:c8:14:b1:c3:67:55:b2:38:
08:f0:96:ce:6a:fc:de:3d:7b:c6:03:24:f9:81:1d:1e:bc:01:
38:45:54:c3:b1:0d:bd:5d:2a:f0:94:08:13:26:03:65:a2:c9:
1c:53:f5:44:f4:a6:63:ad:5c:07:cf:59:6b:8d:ad:24:ff:11:
af:fd:53:e4:97:77:03:2b:7c:13:49:a9:a6:f4:7c:43:72:cf:
0a:ce:eb:ac:ef:19:84:78:56:c5:6c:3f:71:c0:12:30:c6:63:
3f:9a:a0:ac:2d:7a:6a:db:ca:6e:b6:b7:4d:22:1d:11:c5:4a:
59:a6:09:12:67:86:17:ca:63:c8:0c:b2:06:18:14:44:44:83:
2f:22:3a:c6:b3:dc:87:d3:ca:4b:6d:71:99:85:51:23:0f:e1:
b2:da:cd:7b:b8:2f:ea:17:18:85:a2:98:0e:3a:e1:3a:59:47:
f1:68:b0:11:d3:6f:4e:03:fa:13:87:bf:90:92:11:ec:dd:84:
72:74:9f:69:71:59:39:01:eb:40:85:26:10:a3:a9:ff:d5:e8:
3a:2f:52:20:c4:93:90:0a:80:96:81:10:2a:f3:63:67:cb:26:
27:bd:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:00:10 2026 by rpki-client