Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: eBz41vv5ws3FTZ0I/IUnRQ7dIYtDCOlqsZKSWPwi70U=
Subject key identifier: 8A:F2:AE:3E:ED:39:38:58:39:A2:C4:AA:78:10:69:BE:A0:03:BA:97
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 019D9A07244C55D10FAE2A815E0445DA671C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 065D
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: CvfDNt_o3V9Xyed6qs_Km7x3Pic.roa (hash: vJACC0uKZmQi+4OgqVZ0iCIi7einYP0jPPi7IU1FuY4=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: flSqJeWYb2oORKuimz4TVtDVut4Wbxb8Ay2F65Rg9T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:24:4c:55:d1:0f:ae:2a:81:5e:04:45:da:67:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=8af2ae3eed39385839a2c4aa781069bea003ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:6d:63:cd:1d:21:8f:9d:33:12:6c:1b:fc:
ba:96:5a:a6:a1:4c:59:a9:a0:ba:ed:bd:42:6a:70:
34:d4:06:f0:3e:4d:fc:ad:c1:c2:50:9d:c0:d3:cb:
17:a4:f7:53:4c:f4:77:af:3f:89:ff:62:6e:dc:0c:
3f:5a:76:26:a8:8b:45:bc:fe:f3:20:c0:fb:c0:c2:
60:18:a4:95:9c:b6:d8:24:5a:ea:f1:24:ac:85:5c:
14:0b:72:c7:8d:9e:5e:12:d9:53:a6:98:f7:45:15:
df:4f:f8:ac:9b:53:a9:c0:37:91:1a:56:96:de:39:
a0:66:0e:5e:63:99:87:e7:c0:11:a4:6c:6f:80:d8:
35:0a:63:93:d5:14:ff:46:be:83:44:a9:c9:81:6f:
68:52:41:3f:dc:6a:3a:ac:12:9d:73:e6:f5:2d:52:
e3:6c:1c:a3:4a:f6:aa:02:fc:b2:66:b4:2e:da:79:
a5:cf:6c:26:80:07:90:f1:18:02:11:13:af:45:5f:
15:6d:1f:ac:52:73:95:89:f2:cb:30:66:d0:39:61:
36:07:11:dc:94:4d:2d:6b:50:ba:28:2f:4a:ad:14:
ab:b9:33:fc:d8:11:22:52:59:8c:c0:de:77:fb:de:
54:a2:90:83:d1:f3:57:43:fd:a6:9a:9b:b2:26:19:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:AE:3E:ED:39:38:58:39:A2:C4:AA:78:10:69:BE:A0:03:BA:97
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:43:93:6f:de:a1:85:8d:c1:72:81:b9:d7:b1:28:a6:d4:
3c:e5:10:bd:63:fe:c0:81:c0:99:0e:d3:39:f0:83:89:93:c7:
a1:97:fc:98:90:f9:a5:a1:f9:ea:68:7c:f0:34:75:16:4d:8a:
41:dd:d6:16:91:e3:79:f6:6e:05:75:75:98:44:44:9e:3d:5c:
68:b6:0c:9a:0f:96:31:57:e9:95:69:ba:b5:d9:dc:af:e3:87:
ea:69:fb:e8:07:a0:46:74:ef:59:36:eb:68:d2:cf:54:dc:d6:
8a:78:c1:7e:e2:0a:87:e0:c1:c5:f9:6f:43:72:66:65:44:65:
09:00:bc:87:bc:30:f2:28:ae:c3:76:03:b4:71:23:21:0d:74:
89:6c:ae:40:7e:9d:13:d5:40:ef:6c:3e:b2:5c:86:5e:01:29:
ff:67:b4:d1:f1:0b:8a:cf:86:26:ae:cf:13:62:d9:1d:72:82:
3d:bc:b4:ee:e8:22:d5:b0:50:57:28:aa:c9:b4:56:d4:b6:34:
65:cd:be:3d:d6:2e:69:cb:10:2a:42:c5:68:24:2f:b7:b3:91:
59:28:c9:86:f8:05:08:df:58:bd:b9:b7:60:53:3e:c1:3b:79:
97:03:c8:bd:c0:03:6b:b7:ab:72:93:9e:37:09:8e:09:4b:0b:
8e:85:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:20 2026 by rpki-client