Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: Pyv004zKIYxlni7vy+f+bAMbNGRtdaibKMiOFKo9Im4=
Subject key identifier: 57:05:F6:F9:94:F4:C3:A7:2F:61:23:EE:DF:6C:69:70:FD:A8:5E:61
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 01A0C8C65377C41DB6ED10AAF513D68113F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 18BD
Signing time: Tue 22 Sep 2026 11:00:35 +0000
Manifest this update: Tue 22 Sep 2026 11:00:35 +0000
Manifest next update: Wed 23 Sep 2026 11:00:35 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: 6k99fe8nBcY9dOmeySGJwVBtHZeWdATiMRtPs5XEDlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:53:77:c4:1d:b6:ed:10:aa:f5:13:d6:81:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Sep 22 11:00:35 2026 GMT
Not After : Sep 23 11:00:35 2026 GMT
Subject: CN=5705f6f994f4c3a72f6123eedf6c6970fda85e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:75:3f:72:c6:0c:da:42:ab:90:ec:55:5a:
54:e7:00:27:9c:cf:d9:b1:6d:e7:60:18:4a:e3:bc:
12:5d:df:0a:fa:54:1d:25:cd:4c:22:3c:b8:4d:74:
8d:5f:59:e2:61:2c:a2:88:b7:af:3a:c1:f3:a8:95:
3d:79:62:2b:04:df:bb:d7:61:1a:8b:b4:fb:6c:4b:
87:fb:71:69:1b:a0:58:d9:23:2f:aa:69:83:22:43:
22:08:74:44:1c:1b:27:34:46:06:5e:cf:cf:64:13:
40:fe:34:e5:5e:4b:2f:07:fc:33:61:40:ea:d9:68:
22:08:d9:17:87:e0:f4:1a:98:fe:64:0e:2f:93:2f:
be:49:0f:eb:ad:4b:c0:79:4c:47:4f:09:19:b6:3d:
80:28:1f:93:b0:c6:87:ed:c7:d5:6e:48:2c:88:f5:
f4:a1:03:d7:b2:de:ef:3a:50:c2:99:b1:df:15:6c:
64:d8:f3:b6:83:a7:9c:2e:b2:ec:45:d4:7f:ed:77:
81:8d:b1:11:91:47:eb:f5:ec:b7:8d:aa:8e:75:6e:
0e:08:e1:7c:1e:32:ba:21:0a:44:c2:28:a0:b0:0e:
53:92:7c:ae:a5:89:7e:85:cc:c2:ed:75:39:18:ce:
6c:d4:b8:1e:ee:a9:2e:78:5f:d9:fa:db:d9:ce:18:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:05:F6:F9:94:F4:C3:A7:2F:61:23:EE:DF:6C:69:70:FD:A8:5E:61
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:86:82:a3:ee:35:e6:d0:88:0f:ce:e2:a8:2d:6f:e4:55:
64:de:82:5e:81:8b:42:e4:96:7b:74:ba:a8:99:a0:f5:dc:01:
5f:1d:66:79:43:3b:7e:89:1b:d0:a9:58:c8:cb:38:44:36:59:
b6:9a:d9:8d:a7:83:72:40:e5:1a:5c:aa:43:64:01:c9:30:7a:
a8:7a:a2:90:a6:7c:b6:94:14:6a:76:b8:69:7d:9f:21:55:6e:
c5:26:b4:ac:e1:f8:91:da:9a:69:64:03:fa:7d:b9:d1:c4:1e:
a0:fa:7b:35:a3:1d:db:b3:d9:aa:f5:bf:91:a2:bc:69:74:d8:
2f:d0:42:37:09:7f:fc:ed:f0:97:be:74:35:7c:10:03:9c:fc:
08:05:f8:87:99:93:7d:5d:e1:c7:a8:ce:9c:24:6e:d5:a8:b1:
f1:87:a2:2b:27:19:fe:e6:75:07:ff:52:99:e4:8c:56:22:a4:
3b:73:0c:5f:5a:0f:cf:b0:da:80:53:95:0d:bd:65:36:df:ca:
86:07:98:19:f0:e3:65:61:12:5a:4d:01:68:23:dd:90:f9:ee:
bd:00:b6:51:2a:82:0e:8d:10:e5:b6:36:c8:04:10:24:6d:6b:
fb:b2:6f:07:23:27:71:c0:21:85:ca:1c:00:27:86:a8:e3:7c:
bb:10:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:33 2026 by rpki-client