Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: tVpZtMjroY3jDuj85yPL9APlDXnWM+63J+U60PkLQuw=
Subject key identifier: 40:7C:43:00:0F:06:46:7C:9F:06:4E:5E:57:AD:85:44:CC:F0:E5:C1
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 019DCD19668D1CC25EA8B3EF1069A3238AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:01:26 +0000
Manifest this update: Mon 27 Apr 2026 04:01:26 +0000
Manifest next update: Tue 28 Apr 2026 04:01:26 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: wlkuAUKKnuOarFhVTWvV0HhZbwP9+SeA8HvVjwf2ps4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:66:8d:1c:c2:5e:a8:b3:ef:10:69:a3:23:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Apr 27 04:01:26 2026 GMT
Not After : Apr 28 04:01:26 2026 GMT
Subject: CN=407c43000f06467c9f064e5e57ad8544ccf0e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:1d:da:f2:55:51:c6:ec:f6:0b:b2:41:85:
e9:b3:7c:71:e8:d7:4d:01:d5:15:d3:0a:81:29:13:
f3:df:9e:ba:54:89:18:ce:38:ca:09:dd:80:a0:b7:
25:1e:a0:2d:5e:09:23:cb:17:9c:80:5c:eb:90:70:
4c:93:0f:a9:1e:d9:c9:63:0d:c4:cc:23:91:08:3c:
db:d9:bf:36:31:22:b3:f4:d6:19:61:05:7d:ec:b0:
7a:16:d0:32:6e:0b:6a:0a:64:87:e5:04:d7:82:04:
8c:45:a3:b6:c3:89:26:7b:88:1a:a6:bf:91:70:01:
5f:6b:5c:6c:10:b0:81:35:85:3e:1a:5a:de:7e:b4:
16:9b:67:61:33:36:a9:dc:6d:26:92:9f:62:ee:99:
5e:24:20:01:77:8e:1f:52:e1:26:41:75:d1:2a:2c:
04:6a:bb:4c:9f:49:9e:9f:92:bc:8b:f6:09:1d:7c:
58:f1:6b:89:b9:84:c2:0e:74:73:25:af:28:3d:a0:
94:68:07:3d:a8:72:3c:a5:f0:b0:29:0b:b0:3b:2a:
74:f0:b6:9d:1f:79:73:22:c7:7d:a3:b9:4c:09:ec:
ec:9a:53:32:1a:37:90:ba:52:b3:79:84:70:03:68:
37:b2:aa:e7:5d:bf:23:76:9a:31:73:8e:f3:15:ef:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:43:00:0F:06:46:7C:9F:06:4E:5E:57:AD:85:44:CC:F0:E5:C1
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:f5:8f:a1:97:31:1d:82:2c:81:10:46:62:b1:36:d3:53:
ba:eb:aa:ab:54:28:9b:95:88:0e:53:5d:67:58:95:de:9e:0f:
10:a3:4a:83:90:27:38:51:66:f6:db:87:ea:eb:2a:07:37:e5:
cc:51:bd:be:cf:ae:be:db:be:ec:07:6b:c5:bf:ff:eb:e2:57:
77:3d:3b:6b:41:93:cb:06:6f:0c:c8:62:88:11:b2:9a:dc:ae:
54:18:2a:e3:e1:57:6a:df:f9:83:c7:62:a3:ef:8f:2a:a2:b5:
46:41:17:d4:76:9a:cf:d6:b8:fb:f9:cc:a5:37:b1:20:fa:bd:
0c:e3:82:f9:c2:c9:e0:5b:12:48:ec:c9:33:45:4b:73:62:69:
49:58:1f:d6:64:74:c7:cb:72:42:05:33:bb:df:02:0f:3c:35:
e2:c1:1d:6a:be:4f:0e:78:89:a6:b4:e1:f8:d1:e9:f2:21:0d:
fa:c6:cf:a0:b3:44:9e:b1:db:ad:7c:1c:02:7c:e0:e3:8b:df:
c1:fd:3b:c7:f0:d5:bb:ea:aa:3d:29:60:4d:0f:aa:ce:db:cf:
94:4a:ba:67:04:3d:eb:2c:8d:5f:cd:b8:d7:fa:1d:da:14:66:
c0:ab:1d:e3:b4:26:ed:8d:9a:95:5f:81:0b:e6:d4:12:e6:ab:
8d:49:1a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGWaNHMJeqLPvEGmjI4qhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTkyZjQ1MTM3MmM3YTIwYjYyNGJjZmFhM2Q5NzUzOTI2
YzVjMTYwHhcNMjYwNDI3MDQwMTI2WhcNMjYwNDI4MDQwMTI2WjAzMTEwLwYDVQQD
Eyg0MDdjNDMwMDBmMDY0NjdjOWYwNjRlNWU1N2FkODU0NGNjZjBlNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEd2vJVUcbs9guyQYXps3xx6NdN
AdUV0wqBKRPz3566VIkYzjjKCd2AoLclHqAtXgkjyxecgFzrkHBMkw+pHtnJYw3E
zCORCDzb2b82MSKz9NYZYQV97LB6FtAybgtqCmSH5QTXggSMRaO2w4kme4gapr+R
cAFfa1xsELCBNYU+GlrefrQWm2dhMzap3G0mkp9i7pleJCABd44fUuEmQXXRKiwE
artMn0men5K8i/YJHXxY8WuJuYTCDnRzJa8oPaCUaAc9qHI8pfCwKQuwOyp08Lad
H3lzIsd9o7lMCezsmlMyGjeQulKzeYRwA2g3sqrnXb8jdpoxc47zFe+W+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB8QwAPBkZ8nwZOXlethUTM8OXBMB8GA1UdIwQY
MBaAFBaZL0UTcseiC2JLz6o9l1OSbFwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEt
M2VhYWJiMDMyNTc5LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEtM2VhYWJiMDMyNTc5
LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbX1j6GX
MR2CLIEQRmKxNtNTuuuqq1Qom5WIDlNdZ1iV3p4PEKNKg5AnOFFm9tuH6usqBzfl
zFG9vs+uvtu+7Adrxb//6+JXdz07a0GTywZvDMhiiBGymtyuVBgq4+FXat/5g8di
o++PKqK1RkEX1Haaz9a4+/nMpTexIPq9DOOC+cLJ4FsSSOzJM0VLc2JpSVgf1mR0
x8tyQgUzu98CDzw14sEdar5PDniJprTh+NHp8iEN+sbPoLNEnrHbrXwcAnzg44vf
wf07x/DVu+qqPSlgTQ+qztvPlEq6ZwQ96yyNX8241/od2hRmwKsd47Qm7Y2alV+B
C+bUEuarjUkawA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:53 2026 by rpki-client