Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: /rj+QrMEHXbfbRLJnnIVxPkEzXAHrIiMjKw3naDI+BA=
Subject key identifier: 29:50:FB:29:D2:49:99:E8:CF:0D:C4:67:55:30:8F:B1:6E:04:92:A3
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019D9818BAE808E8D3FEB2459EB003D0F49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1406
Signing time: Thu 16 Apr 2026 21:00:50 +0000
Manifest this update: Thu 16 Apr 2026 21:00:50 +0000
Manifest next update: Fri 17 Apr 2026 21:00:50 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: y3AVZ6kija3cA5kmHng2x0bClx7VUbT3sGd/LE5xbx0=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ba:e8:08:e8:d3:fe:b2:45:9e:b0:03:d0:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Apr 16 21:00:50 2026 GMT
Not After : Apr 17 21:00:50 2026 GMT
Subject: CN=2950fb29d24999e8cf0dc46755308fb16e0492a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:0a:c4:6c:f4:09:cc:9e:69:6b:2a:e6:82:
99:73:a5:b3:99:86:b6:83:90:1c:f7:e0:f9:9b:4f:
78:4d:2b:95:07:81:58:d8:79:92:42:fe:3f:2f:48:
16:5b:91:64:d8:f5:d0:b5:ff:4a:25:ee:3b:2c:38:
ad:9c:91:3f:7d:c7:1a:3d:be:63:21:46:d6:3b:bc:
79:9d:24:25:50:9e:ba:bf:36:62:36:32:17:2f:bd:
93:23:1a:21:de:40:a5:a8:9a:96:65:59:fb:a1:2f:
1c:f1:7f:d3:58:45:58:bc:a7:85:a8:d6:ba:85:a0:
14:74:db:7b:7d:92:85:1e:96:70:3c:c3:48:49:20:
f2:65:8c:5b:45:c7:a6:db:61:88:87:52:9b:b4:2e:
ac:53:b6:0e:5a:5f:f9:a1:91:fb:8e:af:87:87:22:
30:0f:85:e3:97:bf:af:b3:1f:68:e4:79:ef:6b:79:
41:05:ea:2e:55:93:fc:ea:28:d5:3b:15:68:d5:ed:
31:bd:0c:32:02:c1:77:10:61:15:c7:a0:5d:46:ae:
aa:5f:ef:e7:9e:4f:8c:fc:6b:b3:47:4d:35:76:06:
8f:4c:aa:6d:19:c1:c1:a1:16:f5:d8:d4:0f:1e:a0:
f5:b0:3c:ba:11:48:4b:4d:a4:5e:27:29:ad:ce:05:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:50:FB:29:D2:49:99:E8:CF:0D:C4:67:55:30:8F:B1:6E:04:92:A3
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4c:17:0b:2e:4b:b3:2a:31:24:20:0a:90:3a:c8:74:41:1f:
16:d2:da:ed:84:79:d6:e8:85:d5:4a:78:c4:73:85:6f:1b:ec:
0d:1b:f9:61:3e:82:ac:42:5b:d5:53:0c:38:46:21:dd:c5:a7:
1f:0a:ee:d0:6c:40:00:2f:96:72:81:a2:e6:c8:e1:74:51:ae:
f3:8c:c9:94:d7:76:37:aa:2c:db:af:ec:fe:b5:07:13:a4:5f:
3f:e2:77:ed:d9:50:c9:93:92:3c:61:7b:ce:c1:cd:53:7c:85:
a5:d0:80:33:a7:43:8f:ec:43:1b:a2:d9:cf:f9:78:79:ed:e3:
df:43:af:4b:f7:9d:86:17:2b:c2:5e:43:3e:a4:71:c6:ec:8c:
db:54:3a:e2:5a:e3:e6:95:42:02:bb:0f:3f:c9:da:1d:6c:d8:
48:65:0f:c8:ae:b8:27:14:ef:a5:c8:70:8e:44:c7:cf:53:05:
9f:81:bc:84:3f:3a:51:fe:82:2f:0c:91:44:eb:3d:db:91:f8:
f8:c0:a5:f4:47:85:53:21:35:2a:59:9a:7c:78:cb:64:3a:c4:
bc:9c:ff:5b:f6:40:64:d8:29:6a:5f:db:32:3a:1b:cb:e2:38:
3f:1a:bf:3e:10:15:7e:a9:78:9d:b0:40:68:6e:76:dd:c9:e8:
7c:13:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:12 2026 by rpki-client