Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: jmqjQL8ZmOJETjECfc3Erse7KFyWsu8/4GszktWPWus=
Subject key identifier: 6D:B6:37:F7:73:85:32:3A:4E:6E:78:BD:1F:24:FD:E1:D4:DE:02:A6
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019EBF91B33F9305494A3D74A888285E9128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 149F
Signing time: Sat 13 Jun 2026 06:00:57 +0000
Manifest this update: Sat 13 Jun 2026 06:00:57 +0000
Manifest next update: Sun 14 Jun 2026 06:00:57 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: NYzA9KS8xMuo+2yu/KcZmsgAPAMAUveRrBGtVcYvKS0=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:b3:3f:93:05:49:4a:3d:74:a8:88:28:5e:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jun 13 06:00:57 2026 GMT
Not After : Jun 14 06:00:57 2026 GMT
Subject: CN=6db637f77385323a4e6e78bd1f24fde1d4de02a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:1a:2c:84:82:ab:be:22:b0:b6:a8:c8:e6:
c2:9c:79:5e:cb:bc:40:1d:52:22:a8:f1:59:86:a8:
12:1d:fe:ef:12:5c:a6:57:b4:55:cc:55:9c:3d:3e:
f6:97:85:9b:17:99:1a:5d:8d:3b:f8:b3:26:eb:c9:
2b:b6:5c:13:bd:71:22:7e:cd:da:b9:c3:8b:cd:1d:
51:42:43:d9:88:17:ce:a1:39:cb:07:74:07:58:62:
88:cc:47:05:ae:77:b3:16:5e:7f:d3:b8:78:a8:df:
a0:aa:e5:46:c2:8a:c3:e4:ad:a3:d6:20:c1:5b:bb:
00:1e:29:6d:38:34:1b:a8:e7:0f:16:91:60:4d:48:
4c:cb:bd:e8:90:bd:b6:fd:18:21:eb:2b:c1:e5:76:
44:78:77:a6:ee:c0:84:1f:0c:84:8a:d2:7d:15:c5:
be:dc:94:8d:6d:9f:60:a3:00:88:02:13:92:e8:55:
8a:de:91:78:39:3f:59:0a:d0:53:0d:19:7b:c6:b4:
d3:67:67:b7:9c:17:f5:8c:a6:6d:15:52:32:37:a7:
96:ea:bb:97:81:c4:1a:74:09:8f:85:fa:5f:7b:be:
ea:06:12:35:97:40:c2:7c:fd:22:9c:60:f3:80:e6:
3c:9e:84:cf:02:8e:ad:75:0c:51:f5:d7:c6:4a:75:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:37:F7:73:85:32:3A:4E:6E:78:BD:1F:24:FD:E1:D4:DE:02:A6
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:12:ec:41:08:5a:22:7b:b4:a5:c6:2b:fd:db:6c:88:d8:7e:
bf:bc:07:7b:0a:82:22:9d:4c:52:63:98:35:06:90:50:d4:27:
6e:46:91:82:94:4e:30:51:a3:b6:7a:04:b7:16:87:c7:3c:4c:
61:52:ee:85:34:5b:1c:4e:cb:90:22:80:b7:58:65:a5:50:c5:
b2:05:a6:60:ec:06:ba:72:7f:68:2f:d5:c0:d6:e9:c8:04:49:
39:cf:a8:b5:68:18:b7:05:5f:e6:df:49:6d:51:94:6d:eb:a9:
72:5e:5e:b6:91:bb:87:41:4d:50:bd:94:d6:ee:ab:66:c2:b9:
c4:53:a9:ca:fb:97:52:f3:ee:40:40:35:c0:d3:35:a5:46:66:
6c:3f:a1:0b:08:92:66:91:d9:9a:3e:47:2d:93:84:8e:62:09:
89:13:69:cf:81:24:25:dd:80:6d:5b:60:38:57:b3:0f:3e:1c:
63:69:61:15:c7:7c:40:59:4a:a6:15:42:34:a4:5e:44:fb:35:
c5:93:9a:7a:b6:2f:41:1e:55:dd:9e:af:e8:b7:6e:b1:ae:6b:
13:c7:8c:0d:4d:ff:6c:c0:40:8f:6b:f9:bd:a7:ca:d2:4d:cd:
54:f6:67:c7:cb:e5:83:73:32:26:2d:8c:c1:f4:6e:a8:46:03:
c8:39:6c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kbM/kwVJSj10qIgoXpEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjYwNjEzMDYwMDU3WhcNMjYwNjE0MDYwMDU3WjAzMTEwLwYDVQQD
Eyg2ZGI2MzdmNzczODUzMjNhNGU2ZTc4YmQxZjI0ZmRlMWQ0ZGUwMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkkaLISCq74isLaoyObCnHley7xA
HVIiqPFZhqgSHf7vElymV7RVzFWcPT72l4WbF5kaXY07+LMm68krtlwTvXEifs3a
ucOLzR1RQkPZiBfOoTnLB3QHWGKIzEcFrnezFl5/07h4qN+gquVGworD5K2j1iDB
W7sAHiltODQbqOcPFpFgTUhMy73okL22/Rgh6yvB5XZEeHem7sCEHwyEitJ9FcW+
3JSNbZ9gowCIAhOS6FWK3pF4OT9ZCtBTDRl7xrTTZ2e3nBf1jKZtFVIyN6eW6ruX
gcQadAmPhfpfe77qBhI1l0DCfP0inGDzgOY8noTPAo6tdQxR9dfGSnVEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG22N/dzhTI6Tm54vR8k/eHU3gKmMB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxLsQQha
Inu0pcYr/dtsiNh+v7wHewqCIp1MUmOYNQaQUNQnbkaRgpROMFGjtnoEtxaHxzxM
YVLuhTRbHE7LkCKAt1hlpVDFsgWmYOwGunJ/aC/VwNbpyARJOc+otWgYtwVf5t9J
bVGUbeupcl5etpG7h0FNUL2U1u6rZsK5xFOpyvuXUvPuQEA1wNM1pUZmbD+hCwiS
ZpHZmj5HLZOEjmIJiRNpz4EkJd2AbVtgOFezDz4cY2lhFcd8QFlKphVCNKReRPs1
xZOaerYvQR5V3Z6v6Ldusa5rE8eMDU3/bMBAj2v5vafK0k3NVPZnx8vlg3MyJi2M
wfRuqEYDyDlsUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:06:59 2026 by rpki-client