Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: o+IlmP0E0K2B0c5mAY+c/ruAQJq30cshrNJqyniCyf0=
Subject key identifier: 65:2E:58:D2:BD:C0:37:E8:9D:E8:DC:A0:4A:15:AE:D9:0D:04:4C:0D
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019D97E1A0FB4DA0B72FF181A5020EA3A9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 1716
Signing time: Thu 16 Apr 2026 20:00:39 +0000
Manifest this update: Thu 16 Apr 2026 20:00:39 +0000
Manifest next update: Fri 17 Apr 2026 20:00:39 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: yyvTlyhIKnVCUOvkHBGiRX70YrsoqVVEUSypSE89bbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:a0:fb:4d:a0:b7:2f:f1:81:a5:02:0e:a3:a9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Apr 16 20:00:39 2026 GMT
Not After : Apr 17 20:00:39 2026 GMT
Subject: CN=652e58d2bdc037e89de8dca04a15aed90d044c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:46:59:c3:d6:fd:26:64:22:43:16:ac:03:
fa:81:23:34:cb:c0:86:e1:ff:49:43:db:d4:9c:b3:
c6:7d:d6:7f:2c:77:cb:45:95:b4:22:91:5f:87:2b:
b6:6c:fe:3d:93:8e:6d:09:0d:09:c2:07:68:72:31:
97:3d:ae:96:61:2f:06:8c:a6:df:28:a5:b0:3d:6f:
87:20:63:65:c1:a6:8b:42:6b:32:65:60:60:c2:fb:
f8:7d:6b:06:16:03:c9:96:16:35:85:05:fd:69:e1:
ba:97:a9:3a:65:f1:50:4d:1b:c9:22:d3:37:d5:aa:
16:8d:97:62:39:6d:08:14:d0:e4:ba:e4:06:a7:47:
4c:03:04:0e:af:44:35:58:3d:69:27:6a:17:eb:7f:
1c:2c:60:af:47:cd:7f:70:81:9b:5c:52:60:f1:5e:
4f:b9:c3:7c:b1:a9:ec:f7:1f:3f:d8:ce:87:19:46:
56:3b:8b:5f:97:d3:95:20:13:7d:f7:ba:28:4b:26:
11:ee:5c:41:af:40:0e:51:f6:62:0e:d8:01:86:24:
59:d8:99:1a:2d:ba:bf:6f:5a:c6:5f:0a:f1:4e:0a:
0f:71:58:f0:ee:70:a0:87:5c:f4:64:17:a4:75:c8:
4f:65:ef:c1:e1:83:80:03:c4:74:e9:b6:2a:d8:64:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:58:D2:BD:C0:37:E8:9D:E8:DC:A0:4A:15:AE:D9:0D:04:4C:0D
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:d8:b0:23:f6:18:cc:cc:f5:72:15:e6:00:0a:47:f9:c8:
1b:bf:cd:25:8e:73:35:3c:4f:86:9f:1a:52:cc:37:31:f1:bc:
0f:a3:1c:da:35:38:f4:0a:fe:f1:a0:3d:c6:dd:ba:5e:01:04:
cc:96:f9:eb:c4:2b:83:9a:9e:95:3a:67:d4:69:d3:b3:f8:47:
dc:f6:ad:f0:58:8c:77:74:dd:30:e0:03:ab:7a:19:c2:2f:39:
fa:c4:9f:52:ba:85:b2:f0:f9:cb:eb:af:e8:75:db:c3:68:41:
da:0e:b2:ef:cd:5e:31:e2:74:93:99:25:de:5e:5e:17:94:25:
62:ce:f7:16:72:bb:7e:ed:11:99:84:95:2d:eb:e9:bc:f0:5a:
e0:c3:1b:d2:24:b6:7c:3b:b9:b5:ab:97:79:fa:0a:17:e3:22:
e2:4e:9b:99:9e:0b:b9:33:e1:c1:2c:e8:3a:67:d9:93:b2:3f:
c6:17:f8:8a:05:c1:2f:62:07:e1:4d:84:3d:ba:c6:07:a3:1e:
af:79:8e:7a:a5:f0:fe:0f:3a:3b:09:f2:b0:54:c5:86:5e:6b:
0d:bf:6f:bd:ce:76:a5:40:77:10:be:3b:d6:a8:cd:02:41:61:
86:9b:a3:70:70:c1:f1:0f:24:f2:1e:3a:c8:45:75:d9:26:41:
9c:b0:c1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4aD7TaC3L/GBpQIOo6nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1
ODQ3M2IwHhcNMjYwNDE2MjAwMDM5WhcNMjYwNDE3MjAwMDM5WjAzMTEwLwYDVQQD
Eyg2NTJlNThkMmJkYzAzN2U4OWRlOGRjYTA0YTE1YWVkOTBkMDQ0YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvipGWcPW/SZkIkMWrAP6gSM0y8CG
4f9JQ9vUnLPGfdZ/LHfLRZW0IpFfhyu2bP49k45tCQ0JwgdocjGXPa6WYS8GjKbf
KKWwPW+HIGNlwaaLQmsyZWBgwvv4fWsGFgPJlhY1hQX9aeG6l6k6ZfFQTRvJItM3
1aoWjZdiOW0IFNDkuuQGp0dMAwQOr0Q1WD1pJ2oX638cLGCvR81/cIGbXFJg8V5P
ucN8sans9x8/2M6HGUZWO4tfl9OVIBN997ooSyYR7lxBr0AOUfZiDtgBhiRZ2Jka
Lbq/b1rGXwrxTgoPcVjw7nCgh1z0ZBekdchPZe/B4YOAA8R06bYq2GSsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUuWNK9wDfonejcoEoVrtkNBEwNMB8GA1UdIwQY
MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt
Nzc0NGVmM2MwYjk5LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5
LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXzYsCP2
GMzM9XIV5gAKR/nIG7/NJY5zNTxPhp8aUsw3MfG8D6Mc2jU49Ar+8aA9xt26XgEE
zJb568Qrg5qelTpn1GnTs/hH3Pat8FiMd3TdMOADq3oZwi85+sSfUrqFsvD5y+uv
6HXbw2hB2g6y781eMeJ0k5kl3l5eF5QlYs73FnK7fu0RmYSVLevpvPBa4MMb0iS2
fDu5tauXefoKF+Mi4k6bmZ4LuTPhwSzoOmfZk7I/xhf4igXBL2IH4U2EPbrGB6Me
r3mOeqXw/g86OwnysFTFhl5rDb9vvc52pUB3EL471qjNAkFhhpujcHDB8Q8k8h46
yEV12SZBnLDBmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:24 2026 by rpki-client