Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
File: FvLalTudPdkr-T3cMtdfCQwhaIo.mft (raw, json)
Hash identifier: IuFd9iQbeN67ecp1ugt9l3bQUh7sz7TwIrs15RBw/ww=
Subject key identifier: 45:EA:B8:A2:90:C9:E3:56:CC:3A:DF:C8:59:15:83:7E:76:55:C0:95
Authority key identifier: 16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
Certificate issuer: /CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Certificate serial: 01A0BEB09EDC32DB7B23C2F23E9A073EBD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
Manifest number: 8E
Signing time: Sun 20 Sep 2026 12:00:41 +0000
Manifest this update: Sun 20 Sep 2026 12:00:41 +0000
Manifest next update: Mon 21 Sep 2026 12:00:41 +0000
Files and hashes: 1: 6rA0LXSt08NUBPhJSG_oai4J-rE.roa (hash: nmJl/0XmzX7COjsp7I0rKKF/K7SYrnKOPs6qkB2yoYU=)
2: FvLalTudPdkr-T3cMtdfCQwhaIo.crl (hash: lEDW8OJk9IqMYTDyBJgDKtDE/VaStojoklrbr6VtC+E=)
3: lLwMeVFSg8evI7HZjl9LHsfSeyE.asa (hash: CcQTipbmqCYSf3mUpBvLrd7ZVVPZaQ7Hjd2RCzQytHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:9e:dc:32:db:7b:23:c2:f2:3e:9a:07:3e:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Validity
Not Before: Sep 20 12:00:41 2026 GMT
Not After : Sep 21 12:00:41 2026 GMT
Subject: CN=45eab8a290c9e356cc3adfc85915837e7655c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:36:53:23:41:1b:34:b9:1c:1e:c7:cf:d1:
05:77:e9:1d:2f:50:90:ca:0d:35:52:a5:1f:98:3a:
18:00:6e:a4:16:50:ae:b6:29:8a:c0:33:6d:a5:2b:
44:ed:25:14:18:33:0a:1d:34:8a:06:5f:d2:55:82:
d7:0d:00:4a:e8:d3:63:fe:ca:6b:af:f2:87:50:8e:
0d:27:b0:aa:40:41:a7:28:dd:7e:d1:a1:e5:23:3e:
42:60:18:af:05:81:a2:43:90:86:71:9f:a6:1c:4f:
ee:7a:d7:d1:c8:9b:31:ca:4b:66:2e:a6:1f:f5:be:
59:7c:8b:9c:3c:c3:9f:92:64:fd:0f:98:1c:06:36:
46:5a:13:b1:bd:3d:94:ae:3e:1c:19:cc:17:b3:f1:
73:54:62:65:63:61:88:c5:3c:3d:e2:5d:cb:b0:4b:
94:b7:da:39:fc:c6:d3:a0:33:ff:4a:30:46:c1:94:
69:95:23:19:88:5b:9c:22:10:b8:f5:96:6b:48:12:
76:f6:2f:c2:c1:09:8b:35:c7:62:75:c3:fd:d3:6d:
ba:3a:3b:8a:9e:ac:14:56:ee:9e:11:d4:55:31:26:
8e:15:19:5f:3a:d6:d5:61:e2:cc:f7:91:da:4e:6b:
79:2f:2e:41:83:0a:32:95:cc:47:7a:76:bb:5f:42:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:B8:A2:90:C9:E3:56:CC:3A:DF:C8:59:15:83:7E:76:55:C0:95
X509v3 Authority Key Identifier:
keyid:16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:05:37:e6:09:3d:f6:da:03:80:cb:50:1a:5f:ee:c4:be:cb:
ef:83:fb:e5:33:32:4f:4d:42:11:e3:90:e4:48:87:c5:85:fa:
e7:4e:5c:d9:ec:f3:04:2b:8f:b0:2c:f0:e5:ef:48:d0:5a:be:
9a:b4:38:3e:c4:96:ba:8b:11:b9:54:f5:ba:6a:84:5c:b8:59:
cb:94:ed:92:83:36:8e:62:82:36:79:29:9c:bc:70:42:65:8d:
ff:17:f2:c2:2e:59:ca:a3:a3:95:6a:37:24:1b:4a:f2:d0:01:
ab:e7:9d:85:da:26:42:00:66:a7:20:e0:99:05:e9:31:fc:b7:
cc:54:01:13:79:2c:63:c0:b5:53:bb:a0:5d:d9:cf:96:12:7f:
0b:c5:99:9c:8c:a2:d9:ae:87:57:f6:e4:27:35:92:61:9d:65:
59:06:f8:02:1a:de:4e:e2:09:f9:0f:07:12:61:48:a3:4e:85:
7c:cd:c3:33:6d:9d:66:0e:c5:6a:b2:54:e5:4d:7e:63:a6:dd:
4f:a4:6d:60:a0:62:6c:a4:79:db:12:79:1a:fa:3f:1c:b3:ef:
30:b6:d9:8c:82:93:c7:8e:ad:f8:1a:9c:05:13:0c:f8:74:ed:
44:f8:40:1a:89:53:d8:9b:91:e6:64:80:14:20:38:6b:0c:ee:
12:e0:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:57 2026 by rpki-client