Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: PwgZXXBHQf0oe1iHrKcZTxWVBXcALzHUf73Io+9Lh8M=
Subject key identifier: 0F:3B:87:36:F1:AB:EA:B7:23:99:8A:64:F1:FD:86:98:A5:AE:FE:69
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019FAB2C87DC832A2AC58D7454CB3D7A1371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1519
Signing time: Wed 29 Jul 2026 00:00:49 +0000
Manifest this update: Wed 29 Jul 2026 00:00:49 +0000
Manifest next update: Thu 30 Jul 2026 00:00:49 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: moN0NZi5t+OysNOgQWcQqjbTAB6Jn3UyLG60cY+fs/A=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:87:dc:83:2a:2a:c5:8d:74:54:cb:3d:7a:13:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jul 29 00:00:49 2026 GMT
Not After : Jul 30 00:00:49 2026 GMT
Subject: CN=0f3b8736f1abeab723998a64f1fd8698a5aefe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:31:5d:fe:90:f3:70:4b:ef:3c:a9:3d:06:
de:1d:19:4c:8d:f3:cf:fe:29:68:ad:d2:a0:bf:71:
5f:01:b8:f3:07:5a:61:2f:92:bf:fa:13:11:5b:25:
4b:34:35:8e:97:d6:a0:e9:82:18:8a:a5:4a:51:47:
14:85:4a:4e:39:64:2c:68:b9:f9:77:97:59:e4:2e:
4a:9f:f4:71:3b:8e:08:b8:1b:30:57:cd:1c:4b:69:
25:12:d3:3f:5e:f3:46:b4:d5:95:18:6c:8f:d8:87:
d0:ab:97:d4:7f:b2:4a:87:18:cb:de:b4:8f:7e:a9:
97:7e:92:47:57:8b:45:d4:71:94:37:d2:3a:ff:dd:
5c:ad:c3:a8:92:57:86:bc:7c:65:d1:cb:0f:5c:1d:
fe:f4:a1:db:bb:10:b3:62:e2:13:93:3b:76:bc:eb:
7f:30:b8:ee:63:7f:73:99:94:33:ac:5e:ce:c3:5f:
5f:c1:85:c2:ff:f7:bc:81:7a:23:68:bd:8f:8c:27:
1a:ca:7a:ae:6e:67:6c:ae:ed:a3:9c:22:68:71:b7:
a4:a9:23:ac:5e:06:06:1f:77:bc:41:b4:0b:78:ab:
32:bb:fa:fe:05:cd:93:b7:38:d5:50:de:ef:ae:46:
08:6e:59:db:09:c5:bb:f2:3b:01:2c:f4:62:e6:92:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:87:36:F1:AB:EA:B7:23:99:8A:64:F1:FD:86:98:A5:AE:FE:69
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:02:0d:02:d5:7a:df:4c:6e:b4:e4:ca:5e:31:27:49:34:34:
d4:2b:48:b9:91:e0:40:c7:92:91:3b:1b:0b:cb:0b:aa:d2:17:
5c:57:5a:3f:61:92:a5:3c:fb:e0:9d:dc:99:de:a7:9c:ec:81:
98:4b:f4:d1:6f:00:63:92:b7:34:94:49:2d:c8:02:77:70:4a:
19:49:fa:fe:32:b6:fb:dd:40:24:fe:01:4f:d1:fd:4b:8f:13:
bd:06:7c:72:ca:6c:18:01:9f:e5:4e:67:5e:a1:32:7d:0d:78:
3e:9b:17:7c:3b:28:f8:ad:b0:b1:df:2f:4a:3a:8e:ae:bd:24:
92:b6:33:d9:38:59:bb:33:8c:e5:4c:77:d2:51:1e:96:fa:ec:
35:db:e8:5e:0c:ab:21:e4:b5:86:ea:6e:b4:a8:c6:97:9a:4b:
c4:0b:b1:e4:2c:62:ff:cc:70:5e:75:69:b2:88:aa:56:f4:a7:
d1:0c:82:5d:4f:72:59:c8:d0:3b:e1:d3:8a:9a:67:98:8b:1f:
1a:27:8a:54:d0:23:21:ce:62:ae:7a:2b:2c:ba:5a:0a:2c:ff:
4e:c0:c8:9c:af:e2:71:e1:77:a7:d2:01:1b:ed:3a:2b:03:f0:
92:b4:c7:81:f9:96:e2:14:e3:94:13:dc:d5:6a:b6:c2:55:6f:
39:60:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:35 2026 by rpki-client