Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: nLxwHql1lA9Rd2YnWQyVclPmenIaA+X+agKaPFW0vWI=
Subject key identifier: 3F:6B:4F:69:7B:35:0F:65:1D:6C:18:73:9C:50:49:CC:11:22:E0:DC
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01A0C96AC83BE19693ABCAF48081F2B8A475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 14:00:13 +0000
Manifest this update: Tue 22 Sep 2026 14:00:13 +0000
Manifest next update: Wed 23 Sep 2026 14:00:13 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: HVUMRDdPJjb5KNwLDJe+RBUA8X2llpTUACd0s+xJYFE=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:c8:3b:e1:96:93:ab:ca:f4:80:81:f2:b8:a4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Sep 22 14:00:13 2026 GMT
Not After : Sep 23 14:00:13 2026 GMT
Subject: CN=3f6b4f697b350f651d6c18739c5049cc1122e0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:75:5e:b5:fb:ae:81:a8:15:84:04:7c:ae:
31:0f:69:ef:5a:ea:72:66:04:d0:a9:3c:ea:89:ec:
07:6e:cc:2f:0b:ec:6e:b9:46:03:38:f5:1b:11:c7:
52:62:ce:46:da:f8:38:f9:3a:19:86:53:d1:a0:4e:
67:04:71:8f:fd:58:0b:62:22:f4:3d:57:71:26:ca:
f7:3c:19:28:ea:fb:40:2d:f3:9e:e7:1e:9f:cc:78:
a0:70:59:49:f9:f3:0e:76:a8:ce:f0:e5:55:e5:57:
08:f9:13:e7:86:c2:96:90:2d:b1:a7:0e:7a:1a:13:
af:9b:bb:58:2f:46:f9:d6:e1:cd:12:34:03:08:e9:
f8:93:c7:a3:e3:b2:bd:54:26:86:f9:c0:67:45:11:
81:8a:9e:a9:20:6d:d9:62:81:93:b3:71:16:01:76:
7c:d5:d2:de:e9:0f:4e:32:8b:b5:ab:14:a6:d0:67:
56:ca:d0:14:3a:df:1d:18:e4:2b:00:25:17:76:d9:
4b:41:07:61:63:6f:b1:0b:b6:82:bd:13:13:35:f0:
4e:95:a2:4a:58:8c:eb:83:4c:68:5f:dd:ee:b2:e6:
6e:63:c6:ca:a4:44:f9:7d:26:9d:a6:c2:d3:bd:26:
82:49:b7:07:84:d3:40:e5:cc:91:cb:6b:1b:f1:e4:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:4F:69:7B:35:0F:65:1D:6C:18:73:9C:50:49:CC:11:22:E0:DC
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:77:cf:a6:e1:7e:7b:86:24:d1:69:f8:de:1d:6a:2e:24:3d:
ae:0d:c6:59:29:7e:ed:6b:ed:77:80:86:d0:31:05:78:1a:67:
a8:ca:45:9a:e2:b7:a4:6e:24:ed:06:0b:83:81:d1:e8:c8:42:
34:e8:89:dc:c4:71:bf:90:66:32:78:13:08:9e:e7:cb:ea:4e:
7b:63:6e:13:04:b6:1d:1a:e3:78:d5:14:a9:03:a6:2d:fd:f7:
91:23:f5:51:aa:d0:cf:f6:94:e2:28:22:d8:86:75:31:e7:b7:
f0:4e:9a:aa:b7:d2:69:e9:57:66:37:1d:fc:27:7b:90:51:52:
ab:22:af:7a:50:78:67:ec:a0:32:b4:70:77:88:5f:af:28:dc:
9e:05:93:e7:16:f4:cd:33:0b:06:62:95:b4:34:90:ba:82:77:
81:85:1b:13:5c:54:a8:60:7f:5a:a7:08:98:84:37:d5:db:59:
3e:c3:ad:5c:3c:86:ea:aa:47:73:4a:09:cc:72:fe:7b:e2:63:
f7:bd:65:bd:b1:38:57:34:b8:da:93:28:b9:99:d9:5e:ba:da:
93:f0:cc:31:ec:a0:cf:41:22:57:f9:1a:9f:b3:20:14:2e:6b:
da:70:c2:a4:7f:b1:22:d5:69:35:f9:db:9a:57:e8:02:c1:46:
66:8c:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:55 2026 by rpki-client