Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: vrQwmkmpFztJVn03HUFsKq/Au3eZ0SYuATMBU51A91s=
Subject key identifier: B6:FF:AA:3F:90:D7:8F:D0:10:12:85:1E:EF:1B:8F:1F:68:7C:D1:9D
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019CAAFD0A0C7EBA4A0A4E2B69CE787453E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: XfP4rvFUUwNgrk6lg8KDAQrmO5gcAsJv3XAW4G4udNI=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0a:0c:7e:ba:4a:0a:4e:2b:69:ce:78:74:53:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=b6ffaa3f90d78fd01012851eef1b8f1f687cd19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:79:3a:fd:f0:e6:68:30:a5:c5:2d:8b:e5:
c5:3b:25:d4:5d:75:85:e8:e7:44:71:58:e9:a0:87:
c3:9c:e3:dd:03:e6:3e:d8:df:7a:f2:3e:ad:4c:65:
21:c9:07:90:ee:3b:b3:78:1b:c2:8d:fb:d5:88:a9:
df:a9:5b:fc:07:8c:01:aa:91:9b:77:b7:26:54:c1:
16:0d:f5:1d:b4:23:f9:24:49:ca:45:7b:bc:cf:23:
b6:c0:02:1b:20:1e:09:f9:67:50:b7:cd:bb:e6:68:
8e:f5:30:0e:5e:af:52:6e:1e:a4:4c:77:b6:a5:2d:
13:15:62:96:a3:a4:01:6b:e4:e1:28:7c:e4:76:b3:
e1:33:47:87:fd:7e:9f:e9:3a:ff:14:bf:c4:97:49:
0c:7b:df:8b:80:05:1d:72:c6:f5:3c:7b:1f:44:bb:
a1:c2:3e:ba:f4:2f:5a:32:c5:cb:3f:e2:23:a4:cf:
da:2f:d2:73:b4:02:fc:d0:9e:d7:97:32:b8:72:b3:
75:8a:0c:3e:9b:c7:d9:72:22:62:ed:41:c7:7d:63:
c0:8c:f5:f6:ac:4b:11:77:d0:f5:8c:dc:66:bb:c1:
90:d3:fc:4b:06:0a:0f:b7:d6:e7:f0:59:a5:d7:c9:
88:0d:be:ad:1d:f6:d8:32:f4:bd:14:29:14:0f:7c:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:AA:3F:90:D7:8F:D0:10:12:85:1E:EF:1B:8F:1F:68:7C:D1:9D
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:76:6c:cf:41:ba:c2:9a:89:12:57:5a:77:7e:4a:a1:ef:
e6:ef:78:c6:e0:0c:af:b6:d7:0b:3c:5d:bf:ed:41:e7:09:a3:
75:83:83:b7:a7:2a:35:85:0f:33:14:46:0c:04:33:f2:cc:63:
ed:0d:ba:2d:8c:82:70:d1:0b:95:24:a6:2c:79:a5:da:fe:f1:
12:33:dd:76:80:60:45:08:06:49:88:70:ef:f0:05:bb:f9:ba:
ed:50:6c:8d:5a:1a:83:a6:35:18:d8:11:ef:54:3e:32:75:6e:
74:a0:e9:61:9d:dc:05:8f:ff:d2:2a:50:7e:c3:c7:ab:10:e4:
39:1c:67:d9:82:06:33:29:e7:9c:60:a0:f6:19:03:7d:0a:05:
d0:6b:69:78:ba:30:ae:84:50:45:09:49:09:80:ae:0b:9d:69:
a7:28:80:cf:70:33:0a:98:1e:9e:ea:b4:ae:df:cf:e8:2c:0b:
2c:05:df:b3:65:14:c7:7f:6e:4f:6c:a3:cf:da:ef:40:73:da:
52:5b:e3:91:d5:7a:16:92:d3:1d:e1:d1:a2:82:d9:eb:9f:42:
92:93:19:85:cb:fd:4f:c5:6b:6b:65:04:ff:f2:48:b4:4d:8d:
c5:c9:d7:c9:b4:9b:34:0f:41:3c:fd:69:58:ca:fa:f7:99:c7:
3f:d5:d5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QoMfrpKCk4rac54dFPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjYwMzAxMjAwMDM1WhcNMjYwMzAyMjAwMDM1WjAzMTEwLwYDVQQD
EyhiNmZmYWEzZjkwZDc4ZmQwMTAxMjg1MWVlZjFiOGYxZjY4N2NkMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oZ5Ov3w5mgwpcUti+XFOyXUXXWF
6OdEcVjpoIfDnOPdA+Y+2N968j6tTGUhyQeQ7juzeBvCjfvViKnfqVv8B4wBqpGb
d7cmVMEWDfUdtCP5JEnKRXu8zyO2wAIbIB4J+WdQt8275miO9TAOXq9Sbh6kTHe2
pS0TFWKWo6QBa+ThKHzkdrPhM0eH/X6f6Tr/FL/El0kMe9+LgAUdcsb1PHsfRLuh
wj669C9aMsXLP+IjpM/aL9JztAL80J7XlzK4crN1igw+m8fZciJi7UHHfWPAjPX2
rEsRd9D1jNxmu8GQ0/xLBgoPt9bn8Fml18mIDb6tHfbYMvS9FCkUD3x6ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb/qj+Q14/QEBKFHu8bjx9ofNGdMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm52bM9B
usKaiRJXWnd+SqHv5u94xuAMr7bXCzxdv+1B5wmjdYODt6cqNYUPMxRGDAQz8sxj
7Q26LYyCcNELlSSmLHml2v7xEjPddoBgRQgGSYhw7/AFu/m67VBsjVoag6Y1GNgR
71Q+MnVudKDpYZ3cBY//0ipQfsPHqxDkORxn2YIGMynnnGCg9hkDfQoF0GtpeLow
roRQRQlJCYCuC51ppyiAz3AzCpgenuq0rt/P6CwLLAXfs2UUx39uT2yjz9rvQHPa
UlvjkdV6FpLTHeHRooLZ659CkpMZhcv9T8Vra2UE//JItE2NxcnXybSbNA9BPP1p
WMr695nHP9XVrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:59 2026 by rpki-client