Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: CHY7RM3WHd/EaAaNbS5BqUN3iS8aJSLMa1vLUqmsnMU=
Subject key identifier: CA:50:8A:C5:A4:7D:54:DF:98:4B:63:F2:42:ED:BE:C7:2F:70:1C:CB
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019EC0DAF84E386C377261C470D7969A8628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0A7A
Signing time: Sat 13 Jun 2026 12:00:36 +0000
Manifest this update: Sat 13 Jun 2026 12:00:36 +0000
Manifest next update: Sun 14 Jun 2026 12:00:36 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: +gPU5jljsIZt7uT9MnWpLtljK/AP9egTMsgTFunkPsQ=)
2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f8:4e:38:6c:37:72:61:c4:70:d7:96:9a:86:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Jun 13 12:00:36 2026 GMT
Not After : Jun 14 12:00:36 2026 GMT
Subject: CN=ca508ac5a47d54df984b63f242edbec72f701ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:df:ef:97:03:21:9f:f8:ea:42:d9:74:d8:
0a:a3:39:6a:46:b1:ef:d2:ec:c3:27:58:8b:d7:1a:
e3:a8:d6:24:34:25:bf:ef:5d:34:41:0c:ee:c9:6f:
5f:13:6e:36:b0:8e:de:8d:56:b3:df:8f:06:20:ad:
02:a1:ce:a8:6d:f9:26:50:f8:da:25:81:f5:40:14:
7a:98:37:ac:ca:f9:b8:80:e7:2c:d6:e6:e2:d3:ee:
7d:83:b0:90:88:03:3a:92:76:6d:f2:2f:fd:55:26:
76:b4:52:f1:27:ba:ca:c4:45:e3:ce:84:37:ee:bd:
75:54:90:d2:53:7a:9a:2c:71:07:a4:99:9d:b1:b0:
ef:cb:e2:ca:55:38:56:dc:45:49:5a:28:e7:43:e4:
d5:37:d6:97:7c:db:31:47:04:04:20:59:18:1a:d9:
cd:5a:f8:34:a2:97:a2:24:86:64:ba:66:2f:e9:42:
71:28:d4:56:d5:68:9f:32:a0:d6:5c:db:01:bc:ff:
1a:f8:03:a1:34:73:6b:90:76:6c:98:16:62:5d:f7:
4c:4d:87:73:90:70:4c:42:cf:c2:34:a5:91:bc:28:
d7:7a:da:e5:18:27:9b:fc:2d:56:5b:31:1b:ea:25:
0d:8a:31:92:0d:a3:87:99:f8:3a:ac:2b:f2:33:47:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:8A:C5:A4:7D:54:DF:98:4B:63:F2:42:ED:BE:C7:2F:70:1C:CB
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7d:69:4f:a9:0e:27:14:b6:db:37:4f:fe:68:27:6c:91:ae:
26:7f:67:20:3f:de:69:06:00:93:ac:27:4b:46:d3:a1:08:53:
52:2f:b1:3a:c5:08:fd:fd:4e:18:19:ae:da:49:03:53:53:00:
c5:16:5b:7d:7d:dd:dc:1b:70:76:8e:89:0b:2f:a7:2a:e5:09:
55:45:81:ce:73:1b:52:d4:fb:9d:3d:d4:2a:36:de:9d:02:23:
22:5e:28:ab:7b:4d:15:6f:1b:70:44:3a:a4:ab:0f:73:cc:9b:
87:b8:f2:30:60:29:5b:43:27:b7:ff:d2:8f:10:39:da:f3:1e:
23:2d:22:28:56:6c:44:0b:b7:20:9e:bf:51:9a:7e:80:09:5c:
d6:08:77:20:88:d5:80:80:14:38:84:56:9e:64:32:3c:03:56:
50:eb:4a:e0:be:d9:8d:8a:fb:c7:4b:97:b0:9e:d5:a5:93:69:
5e:fc:17:4b:71:8a:bf:65:71:5b:e6:b8:8e:25:b1:1c:00:66:
35:e6:70:ce:c2:ee:f7:54:54:26:35:74:74:15:1f:50:df:1a:
e4:69:e9:5d:e3:99:35:23:dc:21:a0:4a:a9:ce:6a:2d:54:eb:
b3:9e:34:14:a8:44:42:f6:c5:77:4c:81:4b:04:a4:33:41:3c:
18:83:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:33:05 2026 by rpki-client