Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: Yo0ncaPLwOgafsU/viL2n1ZVuSbiYSZDjiz66Hl9Aqw=
Subject key identifier: 81:DD:83:F7:04:31:83:F5:D6:29:92:5E:C4:8E:02:90:16:F4:01:88
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019CAA583E903FCF6A834092A5808875A46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 169B
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: LwhKVD50roV0yHaCt5qDOalSlfZVxQ+/MLwhVdhAAko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3e:90:3f:cf:6a:83:40:92:a5:80:88:75:a4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=81dd83f7043183f5d629925ec48e029016f40188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:eb:24:8f:94:30:96:37:ad:6e:78:22:bd:
7a:90:a0:61:56:e3:5f:91:52:e1:47:ab:d8:33:fb:
76:f6:25:34:bc:b5:04:4b:b4:59:a1:e4:d8:77:95:
48:c3:df:85:ca:c8:11:06:ce:8b:1e:50:6e:37:94:
c3:eb:9f:0e:b4:ae:63:b4:c1:c4:c5:aa:04:91:63:
c3:6a:d7:5b:a8:12:fb:3a:fb:b6:cf:04:6d:13:76:
8e:be:d6:7b:e7:0f:fd:83:54:cb:23:49:34:5d:a8:
5a:8d:35:dc:67:83:cd:6e:09:1e:b2:74:d0:79:47:
87:ce:a3:0d:5a:7a:1d:f6:81:ec:c5:0c:13:3a:4f:
a3:6c:0d:43:01:00:15:71:ef:cc:84:0c:12:96:df:
9c:19:78:89:1c:f6:4f:d4:4e:30:88:88:f7:27:51:
55:94:5e:76:b8:aa:77:b3:31:e9:05:b0:19:b2:52:
cc:fa:14:91:ea:36:1a:cc:36:f1:4b:4f:5a:45:d1:
92:f0:d9:48:e7:9a:25:e0:38:0a:84:da:af:ef:7e:
ef:c8:ba:aa:4c:52:ad:b3:77:83:3c:f3:3d:27:6a:
84:a9:e0:98:8e:a8:ee:6c:15:a1:ea:96:4c:79:ec:
a2:23:1d:4c:81:25:df:9c:2f:cb:8f:71:3d:71:d8:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:83:F7:04:31:83:F5:D6:29:92:5E:C4:8E:02:90:16:F4:01:88
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:da:69:dc:e5:00:0c:a2:e1:e8:a0:2a:44:42:7b:00:0c:
0b:95:7f:00:ce:31:52:89:74:ad:7d:3f:0c:a7:55:e5:00:d7:
76:ae:c6:24:65:39:38:9c:b0:6a:27:15:cb:fa:4e:62:09:61:
d2:68:dc:b9:a0:c6:1b:82:17:b7:1f:7c:c8:4f:fc:03:cc:2f:
0e:df:de:2c:ff:7d:a8:7c:05:a8:c0:d3:4b:cd:a9:36:6e:f9:
4b:59:6c:a9:53:a5:41:ec:ea:cd:a7:65:bd:4b:fb:4e:c8:06:
a3:d4:7b:ec:d1:e3:39:b9:5e:eb:b3:32:38:cf:5a:05:b9:f0:
9f:d7:c7:82:85:cb:bb:0c:9e:17:38:8a:34:9e:65:34:d1:30:
a2:fd:9b:ae:d9:46:32:b3:c7:fc:39:a6:e1:41:1b:4f:6c:85:
87:58:8d:27:24:ab:d2:aa:d8:0f:7e:18:d5:cb:0d:b8:be:5e:
b7:de:6f:b3:da:a9:b9:e1:13:34:4a:7a:95:f1:34:17:fb:46:
69:e5:a3:ca:84:16:f6:ea:8c:8c:b6:aa:13:4e:d3:bb:89:e9:
f3:cb:14:6c:67:dc:ec:47:ee:f4:2b:9c:64:c5:0b:bb:a8:a5:
59:b9:c0:ce:f8:f3:0e:d9:74:56:7f:02:bf:03:67:d0:3f:33:
d1:45:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:47 2026 by rpki-client