Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: Z/Uk7gah0qxECW2AHTua5MCHh1V09WSxI5X7XKgU2fA=
Subject key identifier: 4E:67:E7:8F:71:B0:9E:02:19:AC:7E:65:5D:71:D7:AB:D4:37:39:DA
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019DCE62B3A2D53938D610216E9BECC75283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 10:01:08 +0000
Manifest this update: Mon 27 Apr 2026 10:01:08 +0000
Manifest next update: Tue 28 Apr 2026 10:01:08 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: l7vsFH/vR3RmzTgPUPAYhjKARunLppbHxNNkave26fw=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:b3:a2:d5:39:38:d6:10:21:6e:9b:ec:c7:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Apr 27 10:01:08 2026 GMT
Not After : Apr 28 10:01:08 2026 GMT
Subject: CN=4e67e78f71b09e0219ac7e655d71d7abd43739da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:b3:8e:33:4f:c3:b9:49:c5:28:f3:55:66:
b3:ce:92:a1:d5:ec:aa:3b:57:a7:48:9b:55:5f:b6:
b8:5b:f6:2d:19:a0:d9:ea:49:03:4e:65:c3:e3:a4:
08:3b:7a:c4:d1:8d:41:79:fa:a9:a1:aa:e4:76:23:
51:df:3f:80:57:e8:84:90:7a:55:4a:f5:8f:0b:93:
68:dc:ed:3f:06:af:de:b8:8f:75:fe:2f:20:05:19:
c2:18:f6:d3:35:b1:c7:4d:a2:f2:d9:1b:c3:ab:57:
b3:f3:73:35:84:6d:ad:ae:52:db:85:6e:f0:8a:99:
90:36:56:11:79:12:ef:e5:44:83:00:38:df:e6:6e:
23:70:a5:4b:10:2b:07:39:db:fd:3b:31:86:70:6b:
e2:36:94:77:13:63:61:5a:ed:4d:fb:49:b6:5d:8a:
2b:f3:17:cd:72:8f:7d:5d:bf:34:43:a8:c9:2d:6e:
c8:4c:8a:fc:80:36:ac:90:00:5b:04:cf:2b:d8:b8:
7b:90:e7:4e:a7:c2:24:6a:aa:74:64:db:2f:6c:cf:
4c:17:74:37:5b:05:33:39:68:e5:fa:27:e0:25:e2:
97:f7:f6:6a:4a:61:65:fc:5e:df:93:2c:97:cd:74:
a4:f0:c8:44:ed:57:2c:b5:83:4e:0f:ca:50:ea:0e:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:E7:8F:71:B0:9E:02:19:AC:7E:65:5D:71:D7:AB:D4:37:39:DA
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:56:93:4c:50:4e:92:8d:c8:78:f9:7c:46:39:1b:69:fd:41:
40:31:26:0c:de:de:ae:53:56:66:40:f1:3c:39:82:15:d5:53:
2c:e2:72:41:25:43:f8:8a:63:6a:7e:92:f9:1f:0b:8d:b5:e2:
f8:ef:ca:47:dc:b6:11:91:90:9a:a5:56:63:8c:de:9f:aa:7a:
4a:b3:26:c6:55:3f:76:34:43:15:8f:0c:20:e9:5f:36:f3:ce:
c5:b3:30:22:a6:c5:dd:f0:d8:b5:0f:6d:be:c8:fc:13:5e:27:
45:69:2d:56:f7:6e:a8:da:28:0a:bf:f3:ce:97:c0:a0:9b:39:
bc:7c:b7:ea:f6:1d:99:90:33:64:89:aa:36:6e:8f:fc:62:d1:
ac:2d:8f:83:58:26:e8:cf:03:ac:d2:d0:76:80:80:ad:95:18:
e4:6d:0c:d8:33:da:be:4f:d7:bb:06:14:6f:c2:78:c1:8f:28:
ab:fb:3e:3b:f9:60:cc:8b:6a:62:db:58:f0:93:d2:f8:0f:2d:
e1:c5:2a:38:6d:c8:eb:9b:ca:9b:a5:28:63:fb:0b:04:29:44:
80:6c:fc:94:a4:6b:33:fc:fa:20:21:f7:78:9d:6d:eb:16:79:
07:e8:25:28:79:bd:5c:72:73:b7:6a:ea:be:d4:db:46:71:1e:
ee:da:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:12:16 2026 by rpki-client