Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: asH4ALN+kPFJ8RqVJUx6Vq+AndFzWrnnn4xVkeRIkpM=
Subject key identifier: FC:0C:36:AA:B0:3A:3D:52:53:38:2C:E3:68:E4:68:7F:AF:C8:96:D8
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019E1E6CC10E45820EE6820393AD1FC59D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 18B4
Signing time: Tue 12 May 2026 23:01:44 +0000
Manifest this update: Tue 12 May 2026 23:01:44 +0000
Manifest next update: Wed 13 May 2026 23:01:44 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: ad+Ak+aP96H8/PinBiniF5PcMGK58wLfxWCOiLRSLEk=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:c1:0e:45:82:0e:e6:82:03:93:ad:1f:c5:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: May 12 23:01:44 2026 GMT
Not After : May 13 23:01:44 2026 GMT
Subject: CN=fc0c36aab03a3d5253382ce368e4687fafc896d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:d0:db:ad:d2:d6:7e:31:c8:6e:e1:9f:a8:
89:b7:e2:06:bc:32:ff:82:2c:92:e0:96:66:e9:ab:
68:84:61:b8:4f:dc:e8:27:ac:b6:29:66:d3:46:32:
28:01:fd:5a:96:77:9d:2e:c4:46:00:6c:4e:cb:6e:
d9:af:25:82:2c:8a:51:79:46:02:2c:66:d0:60:38:
f4:69:71:13:8f:21:9c:f0:b0:44:2b:11:1f:27:54:
75:3a:a9:b9:67:67:01:33:12:f1:cc:a6:b2:49:16:
7b:c5:a9:a5:5f:df:78:3a:7f:e7:a2:ba:32:83:89:
43:45:46:e8:70:ed:ef:81:18:63:87:40:2d:6d:29:
98:b4:c0:88:34:1a:2c:43:88:e1:ca:83:d0:d2:38:
c4:30:97:2f:75:3a:59:c4:43:dc:15:f2:22:4d:76:
5c:d3:6f:7e:b4:80:26:e3:e5:dc:3b:e9:71:9b:9d:
90:8f:74:c1:04:e5:93:7a:80:2e:f1:a5:d0:1d:91:
25:3f:c7:8a:12:0d:e5:6b:7a:7b:04:eb:2c:5e:1c:
98:9b:55:c6:95:6b:c7:00:76:8f:a9:d9:56:a0:09:
31:21:9f:74:a9:de:32:8f:c8:34:c9:da:af:2f:7a:
94:77:ae:95:91:19:db:d5:ac:d7:6a:f9:6e:87:4a:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:36:AA:B0:3A:3D:52:53:38:2C:E3:68:E4:68:7F:AF:C8:96:D8
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:48:81:9b:ac:2d:5d:c6:60:7e:8d:27:f3:fb:ab:55:0f:
e3:d5:6c:ff:4c:1d:35:61:74:db:06:6a:24:d9:47:59:50:ee:
5a:68:66:9a:d9:b0:ae:44:53:30:54:e2:91:87:ee:98:6a:28:
48:b9:03:26:29:b9:41:23:ba:e1:8e:0a:88:be:b5:25:4b:44:
9c:86:09:25:3f:e8:a1:73:c8:66:ad:c1:88:0a:03:bd:45:6a:
4c:21:21:f5:ec:90:5d:f2:47:e3:43:63:62:e0:ed:1d:4d:b0:
41:85:95:2e:dc:2f:f2:80:be:d0:49:d9:b9:88:52:0e:03:89:
f8:13:77:30:2e:ad:99:70:bb:19:90:aa:29:65:b7:41:8f:98:
07:46:cd:97:8e:0b:e7:b5:c3:fa:e6:61:e7:47:63:38:76:03:
e7:6f:06:fa:5d:a5:5f:53:48:23:b1:f7:87:d3:71:a2:e1:5a:
f7:b4:0d:eb:12:89:84:d4:b8:b5:2a:28:19:3a:6d:36:1f:cf:
b1:15:68:a2:8c:9d:1d:ed:d0:19:8c:b5:ca:25:01:20:0e:e0:
13:46:b3:7d:18:a6:b6:dc:d9:e8:92:24:6d:d7:ea:37:be:ea:
02:97:ff:3a:c5:b9:b0:bb:36:c6:8a:89:1b:79:f2:13:0e:de:
13:c7:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:46 2026 by rpki-client