Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: 8dLsFcCtrIPdfO0TboNsxH2J3I1BLQH0WG7p7HSylcw=
Subject key identifier: 71:FE:40:BB:4E:F4:94:1F:AE:91:58:42:C1:33:B8:F6:2E:37:14:84
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019DCED03483BFCCFC4614D1EEEBEFAF99AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 0893
Signing time: Mon 27 Apr 2026 12:00:44 +0000
Manifest this update: Mon 27 Apr 2026 12:00:44 +0000
Manifest next update: Tue 28 Apr 2026 12:00:44 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: jLaARA16w1XJn+iPLxHu0z4jtmTXgbk+xn9mzueZtTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:34:83:bf:cc:fc:46:14:d1:ee:eb:ef:af:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Apr 27 12:00:44 2026 GMT
Not After : Apr 28 12:00:44 2026 GMT
Subject: CN=71fe40bb4ef4941fae915842c133b8f62e371484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:dc:8d:ef:20:b4:09:e2:bd:45:23:25:22:
dc:a5:72:e9:7a:8a:10:2e:d2:22:6d:01:ad:30:e0:
2b:c6:0b:d2:93:9c:76:94:1a:1f:6e:7d:06:97:bf:
76:c3:43:3a:1b:b2:64:75:96:ff:16:90:ec:6e:6c:
9b:d7:70:93:94:24:80:77:63:b0:3d:2d:cf:6d:0b:
9e:17:33:3c:40:8f:c2:6f:8d:7f:bd:9e:85:60:bd:
58:b1:dc:32:37:e4:34:47:e3:30:57:11:27:f4:8d:
fd:0f:59:9d:a9:a1:08:d0:6a:7b:b9:21:1f:b2:42:
27:55:1f:b0:b1:8f:28:f9:eb:35:a6:ad:43:9d:27:
be:ea:be:16:2d:02:41:47:f2:b0:9d:fa:9c:3c:c4:
7c:7c:0d:21:fb:f2:1f:14:04:6c:f7:92:be:fc:fe:
7e:f8:29:14:0e:ba:20:9f:81:72:97:b2:f6:9a:ba:
26:ae:ce:00:df:43:ff:bf:31:1d:76:d4:07:41:63:
33:56:a5:e1:c2:fd:59:0c:cb:57:33:a4:bb:37:fc:
93:39:81:5b:f3:cf:87:f3:f0:22:90:13:ce:cc:d9:
67:45:3b:c2:c9:73:32:90:b6:2c:c6:c2:52:86:c2:
21:29:9e:53:b8:70:2b:ad:e3:4e:c5:49:36:ba:ea:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:40:BB:4E:F4:94:1F:AE:91:58:42:C1:33:B8:F6:2E:37:14:84
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:16:5a:b6:9e:a2:a3:34:03:a0:57:1d:b6:24:30:f3:2d:6e:
25:af:4f:0f:ce:80:08:59:44:d8:51:5f:25:1d:a5:2f:f3:67:
13:2d:b7:dc:53:61:a5:64:f3:f6:41:55:29:64:3d:b7:3a:e3:
a5:27:e4:b4:5a:df:98:dd:c8:dd:08:56:5a:b8:71:bb:27:4d:
59:1d:39:26:33:e6:00:f0:39:c7:8f:41:27:7b:76:31:da:87:
dc:c3:36:da:15:8e:87:0c:84:c9:b1:e0:60:9f:58:c1:92:44:
1b:00:d1:b6:ed:8a:71:5a:80:60:80:81:b1:fd:f3:fd:fc:d0:
8b:d0:f2:5b:16:7e:4b:d5:4d:30:bf:47:b2:15:4f:a7:d5:74:
4a:2b:08:31:78:aa:a6:d0:92:64:a7:65:ad:6c:24:df:6a:69:
bd:70:0f:7b:36:7d:cf:dc:15:cf:17:49:69:6b:48:d5:0c:1d:
6e:38:e3:e5:d8:6c:94:82:cd:46:09:08:ac:48:c3:b3:c0:48:
9a:a5:50:01:6a:79:d2:fb:71:37:3a:29:dd:df:ff:bd:31:cd:
8c:73:36:d8:0e:04:98:67:27:e0:1c:c7:c4:53:86:27:26:80:
44:81:c9:d5:61:53:a8:58:c2:4a:d3:d2:8d:3b:d8:c7:ba:ca:
6b:db:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:11:47 2026 by rpki-client