Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: 3F9EIglfFLOjfyphnSppE/aYomS8XwI6Qdrb4K0r8ds=
Subject key identifier: 16:FE:29:C5:4F:10:56:B1:93:FF:D1:E5:84:04:31:87:CB:00:C3:F8
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019DB1A1EE4817D8AC9E4E10B0FBF7CADF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 024A
Signing time: Tue 21 Apr 2026 20:01:12 +0000
Manifest this update: Tue 21 Apr 2026 20:01:12 +0000
Manifest next update: Wed 22 Apr 2026 20:01:12 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: 5Xgv6gQ4DEHxqRPEXuQ8H9SDSCafx7JYOkoH3HMnw8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:ee:48:17:d8:ac:9e:4e:10:b0:fb:f7:ca:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Apr 21 20:01:12 2026 GMT
Not After : Apr 22 20:01:12 2026 GMT
Subject: CN=16fe29c54f1056b193ffd1e584043187cb00c3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:51:c7:e8:dd:2b:1f:7f:d9:24:23:96:06:
f6:f8:1c:9e:7f:fc:c8:71:8e:79:f2:61:dc:4e:52:
e5:2d:b4:c8:24:70:e8:28:13:69:82:ef:0b:03:08:
cf:d0:a3:bd:f6:03:eb:64:f8:85:4c:5c:26:62:b4:
9d:e7:ef:be:50:01:ed:bd:60:45:84:e8:f3:1e:0c:
91:7c:8c:b3:4a:a2:42:4e:97:97:52:67:f5:4c:3b:
1d:4e:5d:64:f3:7c:c6:11:13:1c:66:12:41:d6:15:
0c:3a:45:6c:75:5b:f6:0e:ac:1f:26:9f:f3:2d:50:
ad:40:d4:72:76:fc:7f:b8:74:88:50:16:91:6a:ff:
09:49:f9:95:a4:64:93:15:e9:34:35:6f:be:75:70:
9e:cb:ce:99:d4:13:e6:88:6f:2d:7d:ca:fc:68:5a:
23:6b:c3:b3:3a:c4:bd:05:b7:90:f1:d9:a9:80:70:
06:9b:8e:a0:5f:f9:b6:98:f3:7b:21:a1:dd:3b:c6:
22:26:d4:69:02:62:8a:17:f7:2c:af:4e:59:31:74:
7f:43:3e:3b:9b:30:79:9b:cc:66:87:c7:61:94:e4:
fb:14:28:82:5a:9c:b4:cc:c7:c6:d0:17:12:85:e2:
08:47:84:36:db:db:b5:1d:19:31:ba:05:14:7a:3e:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:29:C5:4F:10:56:B1:93:FF:D1:E5:84:04:31:87:CB:00:C3:F8
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ce:1d:69:df:8a:68:90:0c:51:23:f1:cb:fa:0e:38:fc:cc:
82:4a:04:8d:77:13:eb:f4:33:5f:1c:89:ff:c1:69:89:ff:6a:
1b:dc:9d:b2:32:76:4c:19:bc:65:4a:e9:3d:79:e9:4b:6b:f8:
aa:e0:c3:6b:c6:70:2e:1c:38:23:6b:77:4a:cb:41:47:ae:8a:
dc:96:da:af:7f:90:49:70:3c:c5:6c:ab:9c:fd:d2:65:04:35:
fa:78:33:f9:32:9c:78:33:a3:28:b3:4b:68:0a:db:1b:19:1f:
54:b5:92:56:fb:a4:53:b2:d6:7c:48:a1:10:27:cc:ab:ad:83:
52:18:e6:13:07:1d:3a:9e:b2:9b:aa:3a:c8:e0:10:61:60:65:
3c:ca:2f:a7:7e:9d:82:2d:ff:e4:dd:39:c7:0d:43:1a:38:05:
95:07:aa:a6:60:7b:58:cc:ff:99:6e:4a:fe:0f:17:f2:80:02:
92:73:8a:07:f7:de:7d:72:7c:e6:5e:ee:73:21:17:9e:81:f8:
ab:18:96:06:ec:db:80:3d:ee:bd:aa:ef:cb:c4:e4:32:b8:38:
ad:ec:c9:b8:17:3c:9a:0b:1a:fd:3b:58:b9:5c:e1:e1:5b:a2:
15:05:62:23:ad:cf:da:70:f1:73:28:9d:78:cd:06:e8:03:63:
b8:fb:9b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:28:40 2026 by rpki-client