Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: Y+TVASWcgBkQ3Wrr7shN6YA6LH28VMDZNRvPDc3Rga4=
Subject key identifier: 19:A7:0E:AE:0A:74:C9:48:0A:35:A8:13:77:9C:92:10:FB:D8:D3:AB
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019E1F7F24DCAE6ECB4A3106EA5212114CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 159B
Signing time: Wed 13 May 2026 04:01:26 +0000
Manifest this update: Wed 13 May 2026 04:01:26 +0000
Manifest next update: Thu 14 May 2026 04:01:26 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: aHJJTXLne4st57hvCwV0UvRxfKbiFe411MWQoQL46t4=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:24:dc:ae:6e:cb:4a:31:06:ea:52:12:11:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: May 13 04:01:26 2026 GMT
Not After : May 14 04:01:26 2026 GMT
Subject: CN=19a70eae0a74c9480a35a813779c9210fbd8d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:56:07:f3:8f:27:75:37:41:17:e3:08:d8:
cf:57:20:86:90:bf:26:d6:23:cc:d4:0e:8d:f7:0a:
cd:7f:30:eb:54:3b:bc:c2:c1:e9:f3:99:bf:f9:c3:
da:f1:cd:23:99:fe:79:69:c1:2d:73:1e:32:eb:e3:
17:95:e0:71:5c:46:55:c8:b1:03:7e:f9:e1:a8:62:
bc:d8:e6:61:7f:ca:14:db:9c:ea:ec:ef:95:13:60:
56:ce:12:b2:f1:09:29:bb:b2:58:74:94:51:a4:44:
02:02:0f:e7:59:8d:e9:bc:45:38:e2:04:98:2f:7b:
71:7a:30:1a:7e:e8:53:a2:bd:b1:a6:c1:19:49:94:
17:83:ca:80:af:b5:1e:17:33:ee:89:6f:56:63:a6:
6a:b1:66:c0:26:f5:17:5d:2b:1d:1e:a9:a2:d8:2e:
e2:d0:c5:0b:f3:80:29:26:1b:fa:8c:1b:5e:29:41:
20:9a:39:2a:bb:63:fc:a7:4d:8a:42:26:2e:49:08:
8e:f8:07:29:e2:7b:c0:73:d1:52:b8:fe:f7:70:46:
2f:d8:3a:4b:73:ce:e5:8b:d5:9b:36:35:ab:9a:46:
1e:04:84:35:74:82:77:97:39:82:52:ba:aa:40:fa:
05:3a:56:ab:26:03:03:89:9d:4b:38:e7:6e:c3:9b:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:0E:AE:0A:74:C9:48:0A:35:A8:13:77:9C:92:10:FB:D8:D3:AB
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:27:12:52:0f:5e:48:4f:8d:98:3b:e0:c0:3a:c7:b0:a0:3e:
90:05:9f:0f:6b:be:45:41:59:99:41:62:c0:83:fd:93:9b:2e:
09:1c:1c:9b:7d:45:24:34:8f:9d:43:6a:3d:a4:cb:9c:65:5f:
a4:da:5d:90:c4:37:99:8e:49:a1:c3:b6:7b:b7:bd:46:ce:cf:
dd:71:68:9a:09:a5:2b:2d:fe:0e:e4:a1:23:5b:37:a4:40:b2:
a8:ef:a8:f1:af:3b:b5:b7:aa:5f:29:18:23:33:93:2f:d5:7f:
d3:87:e2:da:8f:66:e3:69:67:f7:76:e5:6a:f0:c0:36:00:22:
fd:7f:77:c4:2b:12:9e:d2:ec:7f:40:8a:94:79:93:67:87:c3:
37:45:ef:4d:a3:89:cf:03:32:07:a7:b3:07:2b:ff:c2:bc:40:
e3:17:43:a3:a1:5f:b0:90:10:36:66:d0:1e:51:d3:0e:40:de:
15:14:27:be:05:23:e5:32:20:80:a3:b8:2a:98:fa:46:bb:35:
0a:d8:7a:f4:50:f0:fc:b3:c7:c3:30:10:22:cc:b5:ed:c3:63:
97:95:57:46:75:07:8f:5d:d1:d0:33:3a:8d:21:53:17:44:66:
6b:68:d2:6a:d2:e7:f2:ca:0b:ee:a2:28:d5:20:d2:bf:0c:c6:
13:98:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:04 2026 by rpki-client