Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: er5UQMoZmkhdH7kz3h0cJ1j6pUa/sZp02/fpuJD9WbQ=
Subject key identifier: BB:C4:24:F9:A1:90:12:F7:07:C8:61:0F:05:91:F6:24:64:43:18:1E
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019DD087AF78B83ED12796DB5FE3CBB7377E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 20:00:46 +0000
Manifest this update: Mon 27 Apr 2026 20:00:46 +0000
Manifest next update: Tue 28 Apr 2026 20:00:46 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: x0NFBJw+MJXdwOviTW9iwGBTgX7v5XARu2JQQL9bYKQ=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:af:78:b8:3e:d1:27:96:db:5f:e3:cb:b7:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Apr 27 20:00:46 2026 GMT
Not After : Apr 28 20:00:46 2026 GMT
Subject: CN=bbc424f9a19012f707c8610f0591f6246443181e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:d9:44:96:47:a5:58:d6:c7:b8:c4:bd:6a:
47:99:34:4f:b8:37:88:b8:99:8b:05:38:64:84:42:
50:94:db:60:6d:71:c9:b4:76:a2:7e:a8:93:de:88:
a6:e4:a4:bb:a9:91:76:f9:09:77:86:10:29:2c:bb:
6d:75:76:03:18:2a:78:3e:fb:97:46:8d:63:71:38:
69:e2:65:b0:c9:de:50:0a:72:a3:3d:fe:53:26:ac:
0a:0a:54:e2:cf:a9:55:21:a2:fd:af:d9:33:7b:4e:
4b:8f:fe:34:40:16:4c:46:5b:40:e6:bf:c2:cd:0c:
27:a9:07:d6:1e:04:b5:de:35:36:22:df:41:55:08:
9e:86:a2:5b:3f:0b:25:24:91:57:b0:87:77:a8:ac:
37:36:9f:d0:94:0a:e6:2f:84:fd:a2:c5:0f:3a:36:
fc:40:22:75:90:34:9e:30:17:81:90:d9:68:b0:56:
51:50:14:2a:6b:36:63:38:0b:1d:e1:34:14:c4:db:
23:15:5c:3a:fe:c9:42:5c:e5:c4:2d:dc:83:7a:f0:
42:ee:d6:b8:f1:d4:6e:71:d6:c5:5f:a1:ec:aa:1a:
22:ec:0b:c1:2f:c0:82:14:f0:df:08:a0:3f:28:ac:
8a:97:0c:91:9b:e7:2d:cc:5d:ce:45:fa:2c:4f:9a:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C4:24:F9:A1:90:12:F7:07:C8:61:0F:05:91:F6:24:64:43:18:1E
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0d:54:b7:ce:92:56:70:7b:65:7a:67:64:da:40:96:77:5b:
ee:a5:43:dc:8b:60:86:28:c0:3f:ed:f1:56:a8:d5:39:1e:62:
0d:46:ec:a2:bb:58:20:58:18:90:57:40:b0:d6:c8:5a:1c:54:
a5:7a:bb:55:30:58:d0:b1:d1:1f:c9:81:54:70:a3:84:1b:57:
64:f3:b3:42:f3:89:e5:7e:d2:2a:67:dc:96:bf:ca:9c:b1:79:
58:0b:84:f7:66:af:d5:92:2e:73:fa:cc:40:c2:7b:ee:75:94:
8f:de:4b:4d:8b:71:1a:a8:9e:96:70:4f:4a:c8:d3:5e:54:05:
3f:71:48:ee:0c:0e:00:c3:7f:33:3d:d6:08:9e:d4:70:de:d2:
63:04:3b:20:64:24:e6:ea:6c:93:21:5c:c9:41:cd:18:59:69:
0c:fc:a9:e8:03:68:a5:53:25:dd:6d:62:9b:84:ea:d3:6e:78:
17:14:37:e4:56:f6:2d:0c:5b:d3:72:a2:07:1c:6e:51:8d:84:
7e:c7:90:bc:4d:e7:07:ab:8e:09:1b:8b:c5:87:73:2f:9d:75:
a2:be:ed:e5:d7:fe:b0:b1:1f:5d:b5:82:d0:b1:92:ac:55:24:
01:86:b3:9b:69:71:46:29:e7:10:7a:1a:d2:5e:56:eb:f7:ee:
ff:95:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:53 2026 by rpki-client