Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: n+sfmE1wDFBAjRWmzBg1voAMMTdd0XDiMyeArijbwsM=
Subject key identifier: 55:41:0F:14:DA:5A:60:E8:DA:1E:85:0F:11:89:15:D1:2D:EA:0E:8F
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019DCFE37B5B5B83F091B124AB2F0AF6408C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 17B9
Signing time: Mon 27 Apr 2026 17:01:25 +0000
Manifest this update: Mon 27 Apr 2026 17:01:25 +0000
Manifest next update: Tue 28 Apr 2026 17:01:25 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: gQS88us8P1Uj+RNvsicAmZRy52L9Kt3BOBaqXODbkqA=)
2: K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa (hash: v1gwKHJC5TEruomxCVoo3M10PFXjPvm/5QWXyyAdr3M=)
3: q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa (hash: mUJ6CfqZZS7USPUfxMuvlTw60JrCy/sd8I2pytEOK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:7b:5b:5b:83:f0:91:b1:24:ab:2f:0a:f6:40:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Apr 27 17:01:25 2026 GMT
Not After : Apr 28 17:01:25 2026 GMT
Subject: CN=55410f14da5a60e8da1e850f118915d12dea0e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:3b:12:4e:52:9e:42:29:3b:b5:04:8a:a1:
58:16:ef:d6:bc:02:9b:f4:3d:b6:2e:ac:5c:18:a9:
b6:53:a9:6d:b4:3b:be:94:4a:a0:e9:28:a3:2c:ff:
f4:f2:ab:65:29:70:2e:b6:d7:d2:f9:70:6b:af:81:
dc:89:df:27:37:57:2d:e6:38:ac:56:65:83:15:6b:
7a:37:08:f4:7f:37:75:aa:bf:16:9b:7a:61:74:78:
7e:68:2c:f7:19:3a:5e:1c:51:09:8c:1f:a4:29:06:
dd:3c:ec:6b:28:23:ca:ae:06:7f:69:d7:e9:66:00:
9a:21:50:8d:fe:0d:f1:df:e7:da:cc:7a:35:20:ee:
16:cd:8f:d1:1c:38:0a:a2:09:83:b7:8e:36:3a:74:
3d:17:72:2a:d1:77:0f:34:a1:5b:a7:d9:fb:e0:27:
03:6f:7c:1d:46:0c:f8:47:5c:10:e1:70:f4:55:28:
8e:77:e0:f1:bd:41:dc:5d:9e:47:5a:70:bf:b2:4a:
cf:9f:09:2d:3d:17:6d:7e:af:98:e0:41:0f:3e:b1:
90:74:1b:3b:f4:ff:40:4a:15:66:2e:e8:85:f6:1b:
91:17:6b:e2:97:dd:38:23:55:53:5b:dd:6b:96:9a:
76:fc:e9:4d:e0:31:11:45:3a:b4:26:53:35:b5:7a:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:0F:14:DA:5A:60:E8:DA:1E:85:0F:11:89:15:D1:2D:EA:0E:8F
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dd:93:e1:46:6d:7e:25:47:ed:00:85:cb:61:7f:0b:dd:68:
13:ff:e6:e3:bf:c7:59:76:bd:35:87:9a:3f:1f:b7:10:e0:86:
86:23:d4:c0:10:5e:13:60:cd:bb:e4:64:4d:f8:1e:cf:e9:3d:
14:a7:19:00:72:ea:b7:76:f9:c2:f2:8b:36:b3:d4:c5:f4:74:
e4:9f:77:c9:2b:3a:90:1f:c9:32:4b:e5:e8:79:01:5f:3b:0b:
5c:7d:99:f8:3e:cf:09:5d:b1:35:9d:cb:e1:bf:1d:d3:2e:20:
a6:f4:05:0c:ac:64:b9:ee:54:2d:66:e5:74:de:2e:46:98:1b:
03:73:8b:d7:2b:95:6d:14:d2:c9:e0:79:35:1e:de:e7:f5:9c:
33:c3:da:7f:b9:74:2c:85:d7:1f:a0:95:16:3d:c8:ef:a4:82:
17:48:d6:a7:ad:d4:97:b7:82:2d:9a:37:5c:40:cb:9b:01:1c:
9a:07:bd:15:87:1f:ba:83:d5:b1:59:e1:75:28:48:c8:73:3b:
f8:2b:b8:95:8a:ba:22:09:b4:7d:c5:95:20:38:d6:05:07:16:
0b:7a:d7:27:11:31:3e:e6:ad:53:91:ef:6a:2d:ea:4d:a4:34:
f3:58:bd:25:80:92:97:15:f8:f5:b1:98:a5:79:d2:00:da:8d:
25:96:17:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P43tbW4PwkbEkqy8K9kCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5
NjA1NzgwHhcNMjYwNDI3MTcwMTI1WhcNMjYwNDI4MTcwMTI1WjAzMTEwLwYDVQQD
Eyg1NTQxMGYxNGRhNWE2MGU4ZGExZTg1MGYxMTg5MTVkMTJkZWEwZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEI7Ek5SnkIpO7UEiqFYFu/WvAKb
9D22LqxcGKm2U6lttDu+lEqg6SijLP/08qtlKXAuttfS+XBrr4Hcid8nN1ct5jis
VmWDFWt6Nwj0fzd1qr8Wm3phdHh+aCz3GTpeHFEJjB+kKQbdPOxrKCPKrgZ/adfp
ZgCaIVCN/g3x3+fazHo1IO4WzY/RHDgKogmDt442OnQ9F3Iq0XcPNKFbp9n74CcD
b3wdRgz4R1wQ4XD0VSiOd+DxvUHcXZ5HWnC/skrPnwktPRdtfq+Y4EEPPrGQdBs7
9P9AShVmLuiF9huRF2vil904I1VTW91rlpp2/OlN4DERRTq0JlM1tXqcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVBDxTaWmDo2h6FDxGJFdEt6g6PMB8GA1UdIwQY
MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt
YjlkYmRjOGI0MzljLzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj
LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN2T4UZt
fiVH7QCFy2F/C91oE//m47/HWXa9NYeaPx+3EOCGhiPUwBBeE2DNu+RkTfgez+k9
FKcZAHLqt3b5wvKLNrPUxfR05J93ySs6kB/JMkvl6HkBXzsLXH2Z+D7PCV2xNZ3L
4b8d0y4gpvQFDKxkue5ULWbldN4uRpgbA3OL1yuVbRTSyeB5NR7e5/WcM8Paf7l0
LIXXH6CVFj3I76SCF0jWp63Ul7eCLZo3XEDLmwEcmge9FYcfuoPVsVnhdShIyHM7
+Cu4lYq6Igm0fcWVIDjWBQcWC3rXJxExPuatU5Hvai3qTaQ081i9JYCSlxX49bGY
pXnSANqNJZYX5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:38 2026 by rpki-client