Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: VaV4yMFWyq4fPAGrcaz0Y10FsBD9AEoW8zUrMUc7dsk=
Subject key identifier: 4D:CE:43:2E:2A:80:A9:4B:89:C1:65:6B:91:F9:E2:FA:C2:9B:C8:6B
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019DCF3E18DFADC06BD9E358E5A506337489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 14:00:46 +0000
Manifest this update: Mon 27 Apr 2026 14:00:46 +0000
Manifest next update: Tue 28 Apr 2026 14:00:46 +0000
Files and hashes: 1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: mjHvB/GL67Whw8ZpPgriEIqZ3hgj4lKZymjn7O3F7DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:18:df:ad:c0:6b:d9:e3:58:e5:a5:06:33:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Apr 27 14:00:46 2026 GMT
Not After : Apr 28 14:00:46 2026 GMT
Subject: CN=4dce432e2a80a94b89c1656b91f9e2fac29bc86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:14:d3:21:eb:b4:e2:bb:97:04:d4:81:f5:
be:de:0d:23:f3:26:96:01:b1:0d:f5:09:2d:ea:be:
49:e4:c5:a1:f4:f3:b8:d4:bc:01:8d:36:7f:b4:e5:
d2:a6:34:9c:a1:c9:04:08:67:02:19:bd:e9:c9:56:
96:93:8d:13:21:ea:87:96:8f:12:72:d4:b8:c7:49:
4d:27:46:e0:ad:d6:d3:7d:06:e9:44:a6:12:e4:c7:
71:fa:e6:b1:98:b9:fd:9e:9b:12:c5:50:53:8f:6a:
f3:24:d8:03:69:d6:d3:cd:16:2f:23:3a:7c:c9:00:
ae:06:fd:1a:ab:70:14:62:57:7e:d3:14:33:95:d8:
95:a8:bd:8d:54:89:23:9b:ea:0f:39:6d:97:23:9b:
64:c7:9a:4f:4c:55:a3:39:45:f7:24:2f:41:c7:ad:
d6:56:01:93:ba:f4:00:2c:66:2c:ec:c4:48:bf:9b:
22:84:31:5a:4c:9e:b5:75:01:84:74:a7:8b:ad:28:
20:c5:97:b2:ef:b2:b7:ac:2d:d7:94:1a:da:64:43:
f1:52:ba:94:cb:eb:58:ce:27:f6:ad:e1:4b:fe:a9:
05:d1:00:3a:69:9e:34:23:90:83:be:bb:22:d3:1a:
e5:7c:47:0a:95:71:c7:50:75:59:b0:02:28:86:52:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:43:2E:2A:80:A9:4B:89:C1:65:6B:91:F9:E2:FA:C2:9B:C8:6B
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a3:87:58:3c:0b:7a:ab:90:04:38:97:f2:9a:47:65:93:ca:
2a:4b:7c:81:74:f7:82:49:50:21:0b:26:de:49:a3:9f:c9:60:
61:0f:04:53:94:42:83:6b:f8:18:c8:87:11:42:0e:a3:4c:57:
b9:80:63:cf:cf:55:ce:c0:8e:b6:4d:d7:16:87:88:a3:f6:b9:
b7:e0:cf:22:8b:10:9c:77:70:cf:39:69:f8:e4:89:c0:95:57:
7b:e8:ce:6d:3c:77:e6:cf:16:5d:b1:2b:d3:cc:76:d5:04:7e:
8b:ee:39:f2:cf:86:46:d8:ce:78:96:d1:8d:29:43:ac:f6:ea:
b8:01:5e:c8:0c:6a:51:db:b3:01:32:78:00:3d:b7:d4:fb:67:
cc:12:20:a8:af:1f:9f:7d:82:83:cc:37:61:f1:ae:2c:92:07:
3a:76:96:97:6e:fa:2f:16:2a:1f:3c:ef:ff:e6:64:5a:a0:78:
80:a8:a9:27:83:27:df:1c:da:b8:0d:df:20:12:24:46:35:24:
50:73:e0:e3:a6:a8:a3:60:f5:ec:76:ed:83:dd:ef:54:34:13:
d2:8f:29:02:a8:a1:11:c7:20:95:cc:17:2e:df:ad:4b:7b:50:
aa:03:90:d3:08:03:8e:b6:60:d6:79:2f:40:02:e9:09:88:dc:
07:bc:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:55:09 2026 by rpki-client