Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: XINckeuVEFTnNZhynUxbFFLvd/Sytpv7dCFLw8Udbz0=
Subject key identifier: A4:E5:2A:47:B2:91:69:4C:7E:A1:52:8C:7D:62:8B:9A:52:7C:FE:D6
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 019DCE2B807C9B09E9A2E20A011330623005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 7F
Signing time: Mon 27 Apr 2026 09:00:50 +0000
Manifest this update: Mon 27 Apr 2026 09:00:50 +0000
Manifest next update: Tue 28 Apr 2026 09:00:50 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: DoAE/J121L67UD3meaRFi/p0FsLtFZ8ubPPAJ7LJtdw=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:80:7c:9b:09:e9:a2:e2:0a:01:13:30:62:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Apr 27 09:00:50 2026 GMT
Not After : Apr 28 09:00:50 2026 GMT
Subject: CN=a4e52a47b291694c7ea1528c7d628b9a527cfed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:2b:a7:55:ac:b7:a6:49:37:84:51:12:95:
3e:1a:2d:b0:6b:8b:eb:84:15:99:f2:82:cc:f9:66:
57:d5:ea:be:a9:76:f7:51:e7:4b:b6:50:f0:39:d9:
82:ff:53:47:48:ac:08:fb:82:fe:24:53:9b:2c:51:
97:e1:bd:ae:d8:af:e9:a8:3c:d2:5d:70:95:82:94:
1d:bc:7d:75:69:e1:47:a9:3b:e5:37:72:be:a4:b6:
a1:3b:e2:3c:7b:c5:6e:03:4b:3f:c6:eb:d1:08:ed:
b2:80:2c:96:77:6f:30:e3:32:67:4e:46:f6:af:40:
10:25:3c:c7:2c:1d:37:f4:36:41:57:b1:f0:b7:a4:
c2:ac:e9:96:b8:3f:b9:79:76:3f:9c:1e:93:e1:22:
e0:5b:92:6f:a6:2b:a5:28:e0:7f:e2:f2:5f:9e:61:
58:bb:2d:9d:16:af:5d:5c:70:b6:43:ee:5f:23:e5:
f2:f9:ab:5f:2c:22:cb:33:a2:85:78:32:ce:2f:37:
89:ff:73:fb:b8:32:5d:2b:6a:03:eb:f6:fc:98:f9:
22:57:9c:c9:14:e2:ac:b0:a4:6a:85:48:d2:56:e0:
75:63:94:8d:29:d8:b4:ab:5b:72:4a:16:8a:40:8b:
01:5b:3f:f7:64:00:73:e0:4e:60:6d:4b:18:f5:12:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:2A:47:B2:91:69:4C:7E:A1:52:8C:7D:62:8B:9A:52:7C:FE:D6
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c3:ee:ef:bf:8d:26:5d:47:95:77:1c:f9:35:18:49:b6:92:
8a:61:eb:97:3b:01:bd:60:ea:40:97:71:4a:a0:f0:c6:c2:57:
62:ea:7d:2e:b8:c8:1f:85:31:a8:f8:c6:6f:2e:94:ad:ec:e0:
11:af:8d:42:8f:5e:17:ce:69:b4:62:a3:65:1f:9e:f7:22:12:
e4:4d:43:a2:33:d1:3e:b8:05:b6:1c:18:25:d2:77:44:fa:a2:
45:d1:91:51:c5:c9:9d:95:93:3d:ce:43:df:97:b5:23:ad:e7:
37:f7:35:3d:b4:49:04:a5:77:ff:44:52:f1:8d:cb:a7:4e:fd:
2a:9a:1c:67:95:15:4d:6c:30:54:7d:a8:69:21:3b:92:f2:a6:
79:e8:f9:81:eb:d6:8e:ec:8c:64:f7:2a:03:c4:a3:a7:32:b2:
6d:16:68:d7:7c:88:e8:e0:c1:ed:ce:df:f2:eb:b3:df:7f:b0:
22:8a:ae:da:a0:b6:32:7d:34:63:fe:d7:44:91:fc:f6:c0:52:
ad:81:48:0d:af:9e:88:ec:3f:24:67:8b:ad:0a:b3:50:67:ee:
63:04:68:24:4c:60:70:0a:a1:06:10:32:8e:d8:fb:65:33:39:
6a:52:68:40:00:49:ab:aa:9b:79:7d:43:e4:31:5c:f5:25:ff:
61:68:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:17:55 2026 by rpki-client