Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: xczzyT5vdFEMrnsx3WOvHV9SV+1uA1X+3sx1im3VkVY=
Subject key identifier: 2F:B3:E8:1A:22:F9:96:6F:BC:2E:A7:D3:75:24:68:6E:94:BF:C3:26
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019E202364499E7BA34638CEC0BA65166BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0421
Signing time: Wed 13 May 2026 07:00:50 +0000
Manifest this update: Wed 13 May 2026 07:00:50 +0000
Manifest next update: Thu 14 May 2026 07:00:50 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: b1RmMjqqPyeID0g4B1/79lsz7ydHGbfAVljFWNiG5Dw=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:64:49:9e:7b:a3:46:38:ce:c0:ba:65:16:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: May 13 07:00:50 2026 GMT
Not After : May 14 07:00:50 2026 GMT
Subject: CN=2fb3e81a22f9966fbc2ea7d37524686e94bfc326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:fb:38:51:30:6f:ee:91:ba:2a:a9:c4:69:
94:59:1d:20:5e:79:e7:9a:ee:fe:9e:76:73:46:71:
3f:e0:61:b4:39:39:54:7a:28:b3:0c:cd:38:05:cf:
20:20:1d:b0:19:63:40:1c:0b:64:b8:51:81:37:d7:
61:c6:3f:7e:ab:75:d2:01:87:76:73:09:0e:d9:61:
66:ec:2f:ed:46:01:63:3c:2a:35:3f:6f:09:3b:e8:
c0:f1:98:83:a3:8f:2d:d1:21:e3:65:fb:80:a1:b6:
1d:23:2c:23:bf:47:46:6a:df:8c:5f:a1:25:9b:ee:
4e:24:de:70:78:02:51:35:98:5d:90:3f:b2:d7:59:
14:b5:ff:5f:df:ab:c2:3a:46:83:3a:e5:83:dd:e2:
d5:f2:65:fd:e0:b2:ec:cd:78:82:71:a2:33:6c:ff:
fa:31:d6:83:98:cd:9b:b4:ec:df:7f:e4:ad:95:3f:
e7:9a:2f:bc:9f:bb:b7:b7:1c:01:f8:e0:55:d6:9f:
d4:57:d2:c9:20:52:d7:1c:72:f0:0d:24:73:a6:ac:
12:2a:e4:7d:75:38:75:bc:ce:15:3e:9a:85:9b:0a:
0e:2e:e5:3c:6e:d1:c9:08:4d:6d:c1:28:b6:76:14:
74:75:0c:b3:d8:88:7f:8c:b2:51:42:51:92:36:38:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:E8:1A:22:F9:96:6F:BC:2E:A7:D3:75:24:68:6E:94:BF:C3:26
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:52:0f:6a:ee:93:82:c0:7f:4b:de:aa:3d:af:9c:6b:a9:15:
37:16:1d:c0:51:63:e9:6d:67:c9:c6:49:99:03:da:f7:51:c0:
73:e7:2d:b1:c4:1f:a9:ee:2f:ca:01:65:fb:11:cc:a1:74:ee:
09:f8:07:f7:a2:76:4b:c5:64:61:44:fc:ef:ac:e1:8b:7a:ea:
06:46:fe:55:1b:17:0f:97:7b:d8:6b:c6:94:ef:3c:ff:fa:3d:
53:91:cb:06:79:8c:77:cb:e1:cb:b1:d1:44:9a:58:51:62:23:
b7:6b:74:9d:93:39:47:e9:e9:c4:94:50:8f:8c:ac:19:91:2f:
1b:ca:18:b7:bd:aa:cd:ec:89:c1:c5:32:14:bd:f2:52:a1:95:
7c:c8:9f:3c:e0:0d:76:f6:59:c4:cf:f5:00:47:b3:71:e8:3c:
ac:e7:e0:ed:cb:34:5f:ba:64:36:26:68:09:00:c0:27:8b:bd:
a4:d8:3c:0b:88:12:a1:f1:f2:c8:6c:1b:30:7e:28:1a:c3:d3:
ce:ee:46:ae:84:f1:91:b0:c4:51:93:71:2b:d2:ca:40:3e:dc:
23:53:6d:51:d1:c1:8b:61:17:7e:5e:89:fb:40:99:32:51:e4:
ba:75:fe:28:23:62:e6:8c:b4:61:b2:b5:ba:f4:98:84:87:52:
7e:53:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:05 2026 by rpki-client