Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: VQ6nAYZ0DblnNm29wXMRlCW6JEODfqB+wrcAybicl94=
Subject key identifier: 89:C7:E4:2A:B4:EF:BF:2B:8A:69:AC:48:C4:90:A6:D2:B5:28:DB:16
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019DCD878B7CDECF57A93152D1D297D679E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 06:01:45 +0000
Manifest this update: Mon 27 Apr 2026 06:01:45 +0000
Manifest next update: Tue 28 Apr 2026 06:01:45 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: grX6y5756AvhX8OCJWhxWQOuwvaEjnyPRWBiUfsYPkQ=)
2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:8b:7c:de:cf:57:a9:31:52:d1:d2:97:d6:79:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Apr 27 06:01:45 2026 GMT
Not After : Apr 28 06:01:45 2026 GMT
Subject: CN=89c7e42ab4efbf2b8a69ac48c490a6d2b528db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:81:35:b1:5f:29:67:8d:e8:fd:1e:16:58:
29:9d:6e:51:cf:6b:70:47:e9:80:f7:a6:68:6d:54:
89:15:4c:f0:9e:93:db:2f:95:78:6e:53:9f:8d:9f:
d7:12:4c:9d:7e:e3:af:98:23:a9:cb:4d:4f:31:53:
69:8d:30:84:a0:8a:21:ee:ef:fd:d5:2f:60:40:b6:
61:1d:5d:5b:0f:8d:3e:d4:52:06:e7:89:f7:2b:36:
0a:be:5f:a8:43:56:91:df:f5:c7:30:4f:87:ea:70:
8b:c8:75:d0:f4:b0:77:2c:30:a9:b5:70:6b:cc:db:
e0:88:a6:8f:89:42:6c:4c:ae:f5:f2:9b:aa:71:31:
e0:ae:64:5e:56:8d:74:53:ed:4f:11:f3:96:7f:22:
76:c6:b1:17:06:3a:d0:38:ae:26:76:07:01:13:d4:
73:05:17:98:33:94:ea:ab:ed:73:f3:f2:7b:7d:2c:
97:2b:e8:25:40:4d:86:a3:2e:66:7a:7c:d9:33:40:
3e:ef:a7:5a:2f:b5:bf:a5:80:fd:99:2c:53:ce:90:
76:ca:5f:f2:e6:ed:e9:02:93:86:82:28:26:7a:62:
48:be:e7:8c:03:bd:e1:04:96:73:61:e9:4c:df:62:
c7:15:66:37:69:88:df:c5:7b:0f:8e:9b:f1:37:27:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:E4:2A:B4:EF:BF:2B:8A:69:AC:48:C4:90:A6:D2:B5:28:DB:16
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:dd:dd:f3:55:fa:0d:ee:1a:1e:0b:51:1b:e8:98:fa:0b:
0b:89:33:76:2d:4c:d6:c3:da:af:1f:16:7b:70:5f:1b:67:fe:
e2:2f:a8:34:fc:83:f2:eb:8b:0b:68:a4:f9:64:71:f6:73:02:
b4:93:0c:32:45:a0:7b:2e:79:2c:d6:b8:ea:b9:83:97:86:42:
0d:29:8b:41:af:9b:58:c9:1e:49:8b:75:1b:99:25:da:c9:53:
44:de:bf:08:0a:35:f9:b8:82:01:ac:ab:6e:45:12:89:f0:62:
f5:b2:c1:98:81:58:b4:23:fe:d7:f0:99:12:43:c3:1c:3b:47:
a2:e0:85:3b:54:ac:75:8b:1f:2c:bc:12:d9:2a:9b:db:c6:d5:
a7:d2:57:e1:b4:87:6c:6e:80:1c:50:22:81:c5:fc:88:f8:03:
51:a3:27:bb:40:c9:e5:33:41:31:62:d3:f8:84:6f:1e:46:b4:
4d:f8:15:02:19:b8:d9:fb:32:ca:4c:11:63:8f:4e:e5:c5:d9:
42:0a:0f:05:b7:c7:7c:8d:82:a0:37:da:3b:d0:55:50:8c:66:
ce:9e:dd:d4:56:f4:a2:44:c9:dc:df:e5:4b:0d:a9:b8:a2:95:
70:ed:0c:8d:e0:64:83:f0:60:d6:ca:cf:99:87:28:7a:eb:40:
29:fe:9f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh4t83s9XqTFS0dKX1nnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjYwNDI3MDYwMTQ1WhcNMjYwNDI4MDYwMTQ1WjAzMTEwLwYDVQQD
Eyg4OWM3ZTQyYWI0ZWZiZjJiOGE2OWFjNDhjNDkwYTZkMmI1MjhkYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoOBNbFfKWeN6P0eFlgpnW5Rz2tw
R+mA96ZobVSJFUzwnpPbL5V4blOfjZ/XEkydfuOvmCOpy01PMVNpjTCEoIoh7u/9
1S9gQLZhHV1bD40+1FIG54n3KzYKvl+oQ1aR3/XHME+H6nCLyHXQ9LB3LDCptXBr
zNvgiKaPiUJsTK718puqcTHgrmReVo10U+1PEfOWfyJ2xrEXBjrQOK4mdgcBE9Rz
BReYM5Tqq+1z8/J7fSyXK+glQE2Goy5menzZM0A+76daL7W/pYD9mSxTzpB2yl/y
5u3pApOGgigmemJIvueMA73hBJZzYelM32LHFWY3aYjfxXsPjpvxNyfGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInH5Cq0778rimmsSMSQptK1KNsWMB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyDd3fNV
+g3uGh4LURvomPoLC4kzdi1M1sParx8We3BfG2f+4i+oNPyD8uuLC2ik+WRx9nMC
tJMMMkWgey55LNa46rmDl4ZCDSmLQa+bWMkeSYt1G5kl2slTRN6/CAo1+biCAayr
bkUSifBi9bLBmIFYtCP+1/CZEkPDHDtHouCFO1SsdYsfLLwS2Sqb28bVp9JX4bSH
bG6AHFAigcX8iPgDUaMnu0DJ5TNBMWLT+IRvHka0TfgVAhm42fsyykwRY49O5cXZ
QgoPBbfHfI2CoDfaO9BVUIxmzp7d1Fb0okTJ3N/lSw2puKKVcO0MjeBkg/Bg1srP
mYcoeutAKf6fSQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:42:04 2026 by rpki-client