Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: WzU9xdIHf0q222rpJW8lwu9oApdqtyHPFrUDSQ0yxZ0=
Subject key identifier: 40:D3:98:DD:AB:B0:ED:ED:BF:2E:0E:2E:94:9E:5B:10:46:B5:5E:B0
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 019FAA1A238406FCFBDC66A919610985622E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 19:01:07 +0000
Manifest this update: Tue 28 Jul 2026 19:01:07 +0000
Manifest next update: Wed 29 Jul 2026 19:01:07 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: QYJodT/AJN6D7AJHIbTmFopYAdVmkSZHVR+WQWliTns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:23:84:06:fc:fb:dc:66:a9:19:61:09:85:62:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Jul 28 19:01:07 2026 GMT
Not After : Jul 29 19:01:07 2026 GMT
Subject: CN=40d398ddabb0ededbf2e0e2e949e5b1046b55eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:81:68:26:26:a3:3a:2b:80:77:74:93:6f:
85:8f:0c:52:d3:96:33:a7:21:f5:a5:b4:13:98:de:
0c:2d:39:49:54:ea:a8:82:43:72:65:7e:ec:05:99:
a3:f7:04:95:cd:cf:0d:8b:f7:5e:b2:5d:4d:75:5d:
68:bf:e4:7b:55:7c:97:0d:5c:88:cf:46:b1:28:d4:
87:3a:6e:cf:d4:d8:98:79:be:82:59:90:0c:a6:a8:
ae:c0:ad:5b:32:79:4e:8a:08:1b:1e:37:eb:64:41:
a2:84:c8:d4:83:a5:3f:b1:41:a8:e3:8f:91:4d:93:
09:ba:8e:2d:dc:7e:de:1d:96:cf:2b:71:95:1e:56:
66:88:f8:db:5f:05:9e:01:31:c7:e4:9f:f6:2e:00:
6b:69:16:9e:71:c3:bd:fd:a2:3e:73:8e:ce:fd:0c:
bd:82:a0:fc:60:65:f9:c6:7c:7c:ae:e1:fc:ca:59:
b3:29:a5:42:8f:8b:c8:15:e1:44:e3:1d:48:76:6e:
d9:f3:b3:95:43:60:8c:d6:77:f3:6d:0e:7d:a5:d3:
22:a1:57:30:8e:3c:2b:3f:e8:9d:f0:a9:31:72:13:
24:72:08:9e:79:28:d4:e9:60:17:1d:36:d6:86:c9:
4f:e4:b2:94:60:b7:be:17:ba:55:b8:a0:35:69:eb:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:98:DD:AB:B0:ED:ED:BF:2E:0E:2E:94:9E:5B:10:46:B5:5E:B0
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:16:36:ff:17:0e:92:36:d0:2a:82:d1:40:bf:5c:df:30:5c:
4c:02:db:bd:32:2f:da:73:1e:93:63:ad:41:2b:c0:66:0b:58:
13:41:00:0b:bd:a4:41:4b:a3:0c:54:fe:c8:8f:7b:90:1e:a1:
65:b9:93:49:0c:e2:9a:6a:16:e7:88:7a:1b:0b:63:79:81:10:
64:d6:1c:ef:c3:f7:59:6e:3a:22:ff:c4:19:2e:d4:fe:07:83:
47:3c:21:fd:de:68:d2:ac:0c:10:c8:24:ab:9e:95:b6:1b:e6:
51:1c:c7:39:45:7b:a5:03:f5:11:97:fc:e9:2d:cb:68:66:32:
86:bc:e6:b2:07:8c:cd:b5:a0:8c:d0:1f:b0:3c:80:8f:71:9a:
2b:99:cf:ed:39:e0:3a:83:8e:34:17:fd:aa:08:05:59:f7:9e:
d3:75:98:94:c2:13:50:36:b8:0a:39:1d:7f:82:73:55:a9:86:
db:3e:64:a0:52:b2:93:8d:e4:58:df:b6:20:0f:59:db:55:68:
de:20:90:e6:7e:ff:d0:1c:84:40:01:32:80:7b:8a:53:4f:20:
a7:6a:d1:75:92:8e:31:65:2b:69:55:f9:fd:59:cb:f6:38:f1:
ff:a2:63:c0:11:1e:72:8c:b8:23:29:b3:46:9f:1d:d2:d5:8f:
99:cd:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:07 2026 by rpki-client