Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: oj3uYVIKlB7dzCc+VAX/WOapc/82OekmDsm/FYdwLFM=
Subject key identifier: 24:92:87:F7:93:27:5D:B1:2B:ED:0F:3B:6A:4A:44:62:E0:55:DD:FF
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019CAA8F71FEFF5B93227ECE32B194DBDB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 138B
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: y3Xq/G0UE5s7fA5tNLhghsvYmZw2UpMjycY0nSUXIIA=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:71:fe:ff:5b:93:22:7e:ce:32:b1:94:db:db:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=249287f793275db12bed0f3b6a4a4462e055ddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:77:39:ed:c2:cc:e8:43:e3:d1:18:e2:9d:
17:44:1c:f9:20:4c:41:70:c7:31:47:69:0a:bb:51:
5a:15:c5:f6:4e:34:50:a9:0d:a4:fc:e8:09:ad:58:
47:bd:9e:ce:61:aa:2e:3d:8d:7b:4f:95:14:b4:86:
b9:c3:e8:23:ab:88:b0:67:b0:e2:96:64:a8:21:6d:
84:64:a3:f8:c2:09:c9:07:01:ce:85:77:2d:a8:6f:
da:b8:fb:90:87:a7:ec:80:55:61:94:0a:d5:23:7e:
23:ca:66:61:3d:c7:03:cd:60:13:0b:e1:92:d1:12:
73:48:b9:d5:53:08:c2:2d:65:a4:cf:50:d5:e1:cc:
bb:fc:02:15:19:9d:4c:c3:f4:e5:64:ab:8a:00:2a:
e7:2f:df:38:f9:7e:aa:dc:36:6b:8d:4f:58:0a:72:
e0:8f:4b:3b:38:b6:02:46:ab:aa:42:b2:d6:f0:c1:
0e:47:2b:43:e3:8c:cc:69:67:a2:da:5f:e1:50:39:
93:91:56:be:10:bf:cd:a8:bb:44:95:29:73:1c:d2:
8f:32:ad:c3:2a:e2:47:3f:c3:22:48:ed:53:3c:09:
5a:e7:e8:ce:f3:3c:4f:45:ce:ac:01:13:f0:a6:89:
34:75:f2:39:16:d9:4b:a4:8f:a0:b7:a9:09:9f:60:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:87:F7:93:27:5D:B1:2B:ED:0F:3B:6A:4A:44:62:E0:55:DD:FF
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:1c:06:4d:c6:54:3d:25:5e:e1:50:41:19:61:48:0e:65:
e3:61:f3:8d:3e:f1:6c:34:98:24:8d:d2:45:d1:34:92:17:26:
34:ee:32:19:94:b8:1d:d9:60:c4:89:33:00:bc:0e:15:bb:d0:
56:91:f1:ad:5f:c8:ea:22:fc:d6:9c:9a:38:80:3d:e2:26:c5:
c5:b8:80:cf:60:23:48:cc:a6:a5:68:6e:7b:3c:d7:c8:08:09:
c9:20:b2:ef:1f:32:c9:34:d3:8b:ed:ad:45:e6:f9:79:b8:eb:
1e:31:cf:1f:d5:f3:1c:f9:5e:2f:6c:6a:60:24:32:65:58:d6:
b5:02:e3:5b:f3:e9:52:d9:43:b4:fd:26:21:ba:6a:30:ec:bd:
df:e2:83:36:f6:ea:c9:56:3a:8b:ac:af:5d:77:e7:fb:b6:d4:
1c:0a:bd:60:c4:88:43:e7:42:fa:50:23:d9:d5:47:af:cf:e7:
5c:44:c0:d6:a6:7d:7f:d1:73:06:0c:c1:47:ba:b2:b0:08:72:
09:d5:24:c3:33:8a:f7:dd:bb:f2:35:61:c0:f4:2d:78:6e:b2:
ad:ca:69:c6:4a:69:49:6a:0b:06:61:3a:83:a1:90:f3:dd:3b:
2b:90:33:10:c7:ff:7b:77:ae:88:12:c6:23:8f:3a:3f:bb:a8:
f4:93:b0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3H+/1uTIn7OMrGU29t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjYwMzAxMTgwMDUzWhcNMjYwMzAyMTgwMDUzWjAzMTEwLwYDVQQD
EygyNDkyODdmNzkzMjc1ZGIxMmJlZDBmM2I2YTRhNDQ2MmUwNTVkZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZx3Oe3CzOhD49EY4p0XRBz5IExB
cMcxR2kKu1FaFcX2TjRQqQ2k/OgJrVhHvZ7OYaouPY17T5UUtIa5w+gjq4iwZ7Di
lmSoIW2EZKP4wgnJBwHOhXctqG/auPuQh6fsgFVhlArVI34jymZhPccDzWATC+GS
0RJzSLnVUwjCLWWkz1DV4cy7/AIVGZ1Mw/TlZKuKACrnL984+X6q3DZrjU9YCnLg
j0s7OLYCRquqQrLW8MEORytD44zMaWei2l/hUDmTkVa+EL/NqLtElSlzHNKPMq3D
KuJHP8MiSO1TPAla5+jO8zxPRc6sARPwpok0dfI5FtlLpI+gt6kJn2AWZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSSh/eTJ12xK+0PO2pKRGLgVd3/MB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVccBk3G
VD0lXuFQQRlhSA5l42HzjT7xbDSYJI3SRdE0khcmNO4yGZS4HdlgxIkzALwOFbvQ
VpHxrV/I6iL81pyaOIA94ibFxbiAz2AjSMympWhuezzXyAgJySCy7x8yyTTTi+2t
Reb5ebjrHjHPH9XzHPleL2xqYCQyZVjWtQLjW/PpUtlDtP0mIbpqMOy93+KDNvbq
yVY6i6yvXXfn+7bUHAq9YMSIQ+dC+lAj2dVHr8/nXETA1qZ9f9FzBgzBR7qysAhy
CdUkwzOK99278jVhwPQteG6yrcppxkppSWoLBmE6g6GQ8907K5AzEMf/e3euiBLG
I486P7uo9JOwNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:21 2026 by rpki-client