Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: C7jA7O1RlbqIPQBs89lZPEu6IkzJeeWbR5iBd/Pz63g=
Subject key identifier: 81:C6:89:1D:0B:E0:E4:FA:E4:CF:D1:94:E5:A7:12:DA:FF:86:DB:31
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019DE8231D1D7302015033E5CB4B23DF83C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 18C2
Signing time: Sat 02 May 2026 10:01:48 +0000
Manifest this update: Sat 02 May 2026 10:01:48 +0000
Manifest next update: Sun 03 May 2026 10:01:48 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: JARwCoL1IlLIk7exC2ycrZFetveMGv0xAicfjYFdCA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 08:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:23:1d:1d:73:02:01:50:33:e5:cb:4b:23:df:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: May 2 10:01:48 2026 GMT
Not After : May 3 10:01:48 2026 GMT
Subject: CN=81c6891d0be0e4fae4cfd194e5a712daff86db31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:22:23:42:dd:cd:eb:1b:7d:b9:9a:ed:16:
9e:41:62:b3:1f:31:32:00:0f:b9:81:88:a9:cd:84:
a7:0b:5b:0d:ce:f3:8c:29:72:90:ef:8b:5d:9a:1f:
f9:3e:7a:74:ca:c6:2a:9a:2b:ee:2f:d3:a7:09:9c:
51:6c:0b:4d:3b:76:5e:ed:ea:01:e1:f4:f9:7f:e7:
d0:d5:81:16:f1:d1:7f:bf:32:1d:74:55:b6:03:34:
80:53:85:50:0f:f6:2a:5b:5d:e2:75:95:8f:1d:17:
ac:a4:75:35:c2:72:75:d8:46:5c:c7:fc:73:02:7a:
aa:7a:df:d9:cf:c6:68:dc:2d:4d:1a:32:0e:fb:45:
66:e6:e3:e8:61:c7:14:6a:9b:19:e7:fe:d0:48:d9:
8a:71:65:73:13:1a:74:75:f9:15:4b:79:76:cf:a1:
7c:26:6f:c8:ff:c3:14:19:6a:7a:95:5f:cc:9b:5b:
2d:5a:ca:5c:e7:5a:5a:4b:73:a3:13:4a:05:4d:13:
76:b4:93:47:bb:35:95:9b:7d:15:6d:90:0d:c2:b6:
23:6c:87:52:55:1c:1c:7d:de:7a:e4:ba:dc:77:4d:
af:ce:78:4e:63:f3:63:40:5d:e1:37:a4:d6:9b:22:
43:36:72:a0:1c:b6:f9:98:3c:14:92:a5:69:a7:1c:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:89:1D:0B:E0:E4:FA:E4:CF:D1:94:E5:A7:12:DA:FF:86:DB:31
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e6:7f:11:95:ee:69:ca:7d:b3:fd:ef:15:9d:17:d3:50:21:
12:e4:07:74:49:3e:71:ff:2f:f0:1a:68:18:ee:01:61:01:fb:
7c:be:f8:36:d1:72:a9:6d:73:7c:85:40:e6:8c:0a:f1:c6:bb:
3f:c2:e9:5c:b1:bd:13:2d:ca:3a:5f:dc:d7:68:dc:0e:d5:ad:
6a:02:13:ff:84:e8:8b:3d:5f:94:41:f1:e3:0b:b1:cd:87:8e:
c7:2b:c7:25:26:ed:e1:86:65:d0:66:62:b2:f1:ab:6f:f2:c1:
d5:5b:24:41:52:b2:b7:18:9c:c7:04:14:64:7d:9d:0f:d3:c5:
bc:1d:78:37:43:01:e5:41:fa:e3:36:23:aa:fd:6f:ef:0b:4f:
da:3d:cc:15:34:d0:80:36:14:96:8b:c0:37:b6:bb:32:a8:99:
1b:2a:22:0b:7a:ad:5b:4d:d9:9c:45:27:ca:53:c6:d1:8f:5e:
79:ec:cb:ac:c1:cb:60:b2:62:ad:06:7b:33:6d:80:b6:96:cc:
34:a9:f0:98:70:84:27:6f:af:03:cb:e9:6d:75:11:58:65:67:
1e:52:4e:2a:8d:4a:1a:de:dd:c6:4e:54:9d:6c:8f:64:4a:dd:
fa:d7:6b:17:7b:1e:e3:61:75:89:56:85:a7:cb:fd:6c:5a:06:
e5:6b:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 17:14:57 2026 by rpki-client