Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: RxpV+tQhi+BirOHiTXsaXISHIXhPEWxxII8v258AWis=
Subject key identifier: 04:F8:BA:74:32:CE:BA:63:FC:0E:53:AE:2B:3C:A6:E4:B5:56:44:D4
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019E2023B946B4E217A7C505AC52C0AC3781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 18DF
Signing time: Wed 13 May 2026 07:01:12 +0000
Manifest this update: Wed 13 May 2026 07:01:12 +0000
Manifest next update: Thu 14 May 2026 07:01:12 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: EAuvn3IhhXDYGguNxt2hylGGNxKZI8WMF2BI/cZmYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:b9:46:b4:e2:17:a7:c5:05:ac:52:c0:ac:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: May 13 07:01:12 2026 GMT
Not After : May 14 07:01:12 2026 GMT
Subject: CN=04f8ba7432ceba63fc0e53ae2b3ca6e4b55644d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:1d:6a:f2:8e:50:3e:9d:74:4e:90:2b:2b:
e1:f5:48:dd:8a:61:b6:96:f1:ba:fd:83:eb:d2:66:
22:47:91:e4:b0:81:c7:1f:ea:4f:33:44:7d:4e:f5:
23:67:70:ba:42:31:b9:24:29:24:84:7e:f4:ed:93:
77:10:dd:14:86:19:c3:02:9a:4a:b0:ae:12:81:bf:
cc:76:e6:f4:e3:07:84:e5:99:d7:c5:b5:45:b5:55:
ce:ec:f6:d1:e4:71:cf:30:b9:32:1d:fa:ee:b6:c5:
44:77:7c:d2:c5:3f:19:9a:3e:c6:f2:65:e8:b8:4f:
05:ff:00:23:70:d5:19:92:27:2b:60:96:6f:1d:bb:
38:a8:53:f7:35:a5:2f:58:3f:8a:6d:25:64:06:b5:
64:85:20:fe:b9:b8:01:b6:c4:66:ab:6d:54:2b:5c:
4d:09:6a:83:d9:a0:00:32:1e:58:6b:aa:8a:fd:bb:
a4:d3:f4:ae:d4:bc:4d:74:6b:b4:79:eb:7c:b1:a8:
24:a9:6b:46:e5:a8:28:de:73:71:f9:55:db:67:f8:
dd:cd:b3:f8:8c:b0:d8:95:be:0f:3b:d8:45:9a:c6:
93:8d:b3:71:7d:6a:6b:89:0f:66:e1:55:53:26:ba:
f9:60:bf:ba:8b:70:bb:97:19:c7:fa:c2:91:35:b2:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:BA:74:32:CE:BA:63:FC:0E:53:AE:2B:3C:A6:E4:B5:56:44:D4
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1f:d3:fe:86:bf:60:97:77:c5:b8:3e:83:39:91:9b:b4:b3:
a7:07:84:cc:e4:b9:74:52:8e:09:f0:78:a2:5c:d2:55:f2:e3:
4c:2c:38:bf:a0:fa:42:38:19:22:6a:79:c9:8b:00:95:7b:02:
11:25:e7:ad:fe:ee:9d:0e:ec:a6:65:6c:38:c5:91:00:fa:ea:
e2:fe:42:01:02:b6:1e:58:b2:16:fe:6d:4e:dd:d3:3d:98:32:
14:ec:ff:db:f9:53:8f:7e:48:96:a8:71:57:ea:86:67:22:71:
0a:1d:d8:76:63:08:41:08:fa:75:2e:15:9e:46:74:aa:28:fa:
cd:9f:25:af:02:db:71:2e:aa:88:d1:96:93:1d:24:48:38:e5:
65:22:dc:c1:3c:73:ba:ff:e7:9b:50:01:d8:e1:b6:da:2d:cf:
3d:3c:d0:96:66:c7:44:81:9b:3c:6b:27:3c:35:48:61:9a:51:
0c:22:17:2c:98:8c:df:42:48:1c:2f:0b:e1:59:15:33:f0:b9:
8e:76:b0:a7:4e:57:2a:e5:5c:be:30:12:af:51:87:5d:50:52:
ba:f4:ad:5e:29:aa:fc:a2:fc:7d:32:43:55:5e:16:96:2d:e0:
89:32:97:2c:40:02:99:cf:04:cf:7a:70:ec:7a:d5:9f:a1:8e:
c8:5a:d4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI7lGtOIXp8UFrFLArDeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjYwNTEzMDcwMTEyWhcNMjYwNTE0MDcwMTEyWjAzMTEwLwYDVQQD
EygwNGY4YmE3NDMyY2ViYTYzZmMwZTUzYWUyYjNjYTZlNGI1NTY0NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWwdavKOUD6ddE6QKyvh9UjdimG2
lvG6/YPr0mYiR5HksIHHH+pPM0R9TvUjZ3C6QjG5JCkkhH707ZN3EN0UhhnDAppK
sK4Sgb/Mdub04weE5ZnXxbVFtVXO7PbR5HHPMLkyHfrutsVEd3zSxT8Zmj7G8mXo
uE8F/wAjcNUZkicrYJZvHbs4qFP3NaUvWD+KbSVkBrVkhSD+ubgBtsRmq21UK1xN
CWqD2aAAMh5Ya6qK/buk0/Su1LxNdGu0eet8sagkqWtG5ago3nNx+VXbZ/jdzbP4
jLDYlb4PO9hFmsaTjbNxfWpriQ9m4VVTJrr5YL+6i3C7lxnH+sKRNbLlEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT4unQyzrpj/A5Tris8puS1VkTUMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh/T/oa/
YJd3xbg+gzmRm7SzpweEzOS5dFKOCfB4olzSVfLjTCw4v6D6QjgZImp5yYsAlXsC
ESXnrf7unQ7spmVsOMWRAPrq4v5CAQK2HliyFv5tTt3TPZgyFOz/2/lTj35Ilqhx
V+qGZyJxCh3YdmMIQQj6dS4VnkZ0qij6zZ8lrwLbcS6qiNGWkx0kSDjlZSLcwTxz
uv/nm1AB2OG22i3PPTzQlmbHRIGbPGsnPDVIYZpRDCIXLJiM30JIHC8L4VkVM/C5
jnawp05XKuVcvjASr1GHXVBSuvStXimq/KL8fTJDVV4Wli3giTKXLEACmc8Ez3pw
7HrVn6GOyFrUuA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:31:46 2026 by rpki-client