Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: gV9lNkDNw/iphVoHcu29xX3272AdtcqfkvijS+yxLMI=
Subject key identifier: 7E:A4:86:72:74:A6:D0:E3:4C:FD:5B:1B:02:8D:85:2D:B8:BC:BB:CC
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 019EC2928DBCAFD5AD867B24E000175B0B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 168C
Signing time: Sat 13 Jun 2026 20:00:44 +0000
Manifest this update: Sat 13 Jun 2026 20:00:44 +0000
Manifest next update: Sun 14 Jun 2026 20:00:44 +0000
Files and hashes: 1: 1VJc7ft8TlNEuOzgNAve0dUg5ts.roa (hash: u9EUB0oer4BE1uLDqYmT9DNzu0VsYJr/VpAxRhL9w6U=)
2: Fdl_nZxVedWv2AmqCyx2ob7psNo.roa (hash: dF6kmKpoSTBGTgpAPWKjMIqwVCyeLlpSw1AmDj1OHIE=)
3: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: QVMDIteSaHpJNdsBU+GwcD1l95leod/iWkadKx1i5oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:8d:bc:af:d5:ad:86:7b:24:e0:00:17:5b:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Jun 13 20:00:44 2026 GMT
Not After : Jun 14 20:00:44 2026 GMT
Subject: CN=7ea4867274a6d0e34cfd5b1b028d852db8bcbbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:f5:2c:70:6c:2d:0c:19:31:69:c1:2d:c1:
1b:79:be:39:1c:82:2b:7b:59:e3:df:ae:18:34:49:
db:b5:9c:e4:ee:ef:d3:aa:d3:f3:14:6b:cd:fa:25:
85:ae:19:df:39:d6:84:03:e2:5e:90:f3:8f:23:70:
70:17:0c:dc:1a:1b:f4:b0:45:45:98:47:d8:58:79:
d3:3a:d9:bf:3d:e0:80:1e:6f:4a:d2:ee:64:f8:6e:
77:32:a2:7c:74:e7:aa:12:b2:2c:93:eb:84:ee:2b:
cf:fb:1e:68:95:3b:7f:46:2d:2d:00:7c:8a:14:a8:
91:64:cc:2a:dd:b7:80:ed:f9:61:da:6e:32:5c:ac:
91:b4:ca:3c:fa:51:76:74:7f:81:71:92:50:2f:a5:
13:d2:d2:65:2a:b6:2a:74:d0:2d:42:bb:0a:21:b2:
d2:7c:7e:94:fd:99:0c:1f:70:ef:fb:49:26:41:d9:
2d:5f:7b:d3:2a:93:ec:ae:03:0a:4e:ab:f1:3e:95:
0a:b6:76:db:03:60:e4:19:4e:43:8a:28:d6:42:c5:
58:e2:c4:da:1e:8c:65:95:13:6e:46:0a:c2:af:78:
d7:07:d8:d6:f2:31:7e:33:ff:a4:88:2f:26:73:3d:
2e:f2:f1:27:1b:18:ec:48:1c:db:d1:9f:38:02:dc:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:86:72:74:A6:D0:E3:4C:FD:5B:1B:02:8D:85:2D:B8:BC:BB:CC
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:cb:25:6e:fb:4f:48:ed:ea:09:a7:21:17:a6:1c:c6:ed:
e6:f8:07:cc:55:76:e2:07:f5:30:f2:c0:92:75:0f:64:05:83:
2b:fe:5a:f9:79:d9:84:b9:c7:c1:e5:e5:4b:62:c1:ce:92:b5:
f4:31:01:63:df:03:bf:31:30:ff:35:7b:17:b2:7b:f7:a0:85:
42:5f:09:ad:f6:f2:c1:33:8f:1a:f4:ce:b1:b7:a3:0f:af:eb:
1a:d7:b5:ac:5b:03:78:f6:bd:8b:26:44:13:ff:13:b7:79:89:
e2:41:e7:70:60:75:53:1e:24:b2:c4:8d:54:82:74:76:b3:93:
e2:80:61:30:29:5b:24:54:6a:a4:06:e1:be:b6:2c:02:7c:cb:
19:83:69:c9:58:fd:c0:55:b6:cc:b4:d0:2a:c4:d4:25:12:5d:
b1:d7:69:06:17:e1:4a:bd:a4:26:65:47:af:af:59:d8:eb:6c:
59:f6:c6:a4:45:fa:10:69:ad:7b:48:61:d4:8e:0d:a6:31:5c:
5b:c7:1a:39:d0:03:2a:65:93:74:7c:fe:b5:25:ce:f6:55:b4:
08:93:01:e1:00:e0:b2:68:58:c4:34:08:c7:79:94:35:d9:62:
d6:89:6d:1b:c4:a9:8e:c9:a3:af:0a:fc:fc:f4:3a:d1:06:95:
f2:8e:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:10 2026 by rpki-client