Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: CVLrAVHMKrVhp5rpEmh22d96JiOk/zX676p+xfMf5UU=
Subject key identifier: 77:2B:B2:5A:05:88:F3:EB:65:9B:E2:02:DD:F4:6A:33:84:6B:49:DD
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019EC0A470FC4857E9D65FB5030163CB1A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0985
Signing time: Sat 13 Jun 2026 11:01:02 +0000
Manifest this update: Sat 13 Jun 2026 11:01:02 +0000
Manifest next update: Sun 14 Jun 2026 11:01:02 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: Tsju+cJMfQgetJfAtFuGzr/iehIBOy5jMoH0orqqhTw=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:70:fc:48:57:e9:d6:5f:b5:03:01:63:cb:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jun 13 11:01:02 2026 GMT
Not After : Jun 14 11:01:02 2026 GMT
Subject: CN=772bb25a0588f3eb659be202ddf46a33846b49dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:69:5b:dc:96:17:0d:70:8e:6b:49:45:d2:
54:b3:04:6b:f2:2b:c2:99:81:35:8c:de:02:09:38:
ea:76:04:15:17:ef:39:52:aa:87:a6:8a:25:76:b4:
bb:db:4b:9b:af:7c:cb:a7:ca:76:5f:2d:e1:77:a3:
ee:fd:de:d5:eb:1d:55:50:75:08:a3:77:9e:e9:26:
55:eb:02:94:7b:92:d1:0c:08:aa:05:42:a2:1a:bf:
7e:29:c9:e9:70:51:91:55:fa:e6:3d:25:77:8d:59:
6d:67:51:8a:d5:e2:b8:d2:c7:8f:f7:ee:19:01:c1:
1e:83:b5:d1:90:dc:96:97:e0:c9:78:c7:fd:67:e5:
26:8d:df:3f:21:0b:a9:c2:bc:67:6b:fb:c3:fa:98:
dd:0c:95:47:d0:d1:e4:aa:22:68:31:3d:45:3d:27:
ad:f3:76:75:f6:f6:33:57:ae:f8:e8:f5:95:a7:23:
cd:6a:2d:cb:d2:60:07:0b:4a:f7:4c:e8:28:8a:e2:
e6:1b:2c:7b:77:80:cb:2d:b1:1a:81:c4:bb:04:34:
d4:6f:67:fc:be:83:7f:8d:99:7b:15:9e:98:6e:67:
c5:67:2c:a6:17:28:f0:e9:c1:4d:6c:61:7b:6b:81:
ba:53:fb:4e:61:f7:76:ac:ca:05:38:f3:ae:cd:8b:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:B2:5A:05:88:F3:EB:65:9B:E2:02:DD:F4:6A:33:84:6B:49:DD
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7a:48:a2:ff:df:78:49:2e:0e:5b:92:bf:48:4f:b6:65:23:
d0:5b:2e:82:ba:84:30:d0:6e:28:e2:6f:52:13:42:5c:ae:1f:
98:2e:6f:bb:60:fe:d1:d1:f5:c3:c8:a0:c7:c8:3a:37:fc:02:
ee:71:c3:0d:cd:64:ec:fa:4c:44:86:6c:23:f9:ce:91:3b:4d:
1f:df:7d:41:2d:5e:9b:e0:50:54:d1:0b:88:e9:0d:40:0f:c5:
a8:15:d7:2f:9c:bc:a2:a4:4d:8a:c1:a8:72:c6:29:5d:d8:9a:
e6:07:62:90:7a:fa:95:55:5e:a5:ee:78:86:66:de:e5:95:c5:
64:c6:27:70:b4:7c:39:3e:24:4d:fd:90:34:76:92:31:f4:f7:
58:4e:51:86:27:1c:d2:12:58:98:ec:f6:22:7b:82:81:84:c0:
d3:91:d8:2c:18:b0:73:f5:ad:eb:25:39:49:ff:cc:86:d4:64:
93:2d:33:cd:da:8e:9f:4d:a8:88:12:9b:e3:59:c9:77:ce:96:
6c:b1:5a:48:d0:1f:83:b7:fc:f8:8e:2b:e9:c4:5d:7a:28:94:
ca:ad:15:ff:1d:ca:54:93:2c:4d:72:88:ab:b7:06:0f:21:93:
84:10:50:83:04:4f:f2:57:18:65:b7:ec:89:ef:89:75:c5:ad:
e8:ca:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:59 2026 by rpki-client