Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: nllPT4cA6glT9T5QpJ17zNLaL8GhFhOO7mmryh5mhJI=
Subject key identifier: 14:80:E9:5D:80:25:12:4A:5F:DD:93:49:0C:2B:C6:0F:1D:9A:7E:E2
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019FAB9ACF46F1C55C9C669249B898B921B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 02:01:17 +0000
Manifest this update: Wed 29 Jul 2026 02:01:17 +0000
Manifest next update: Thu 30 Jul 2026 02:01:17 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 5qEJMA5tVwIiIGhfCvJWh4ZJ28435YoIbRbTbjCHrws=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:cf:46:f1:c5:5c:9c:66:92:49:b8:98:b9:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jul 29 02:01:17 2026 GMT
Not After : Jul 30 02:01:17 2026 GMT
Subject: CN=1480e95d8025124a5fdd93490c2bc60f1d9a7ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:4a:75:18:ed:ec:f1:5f:ab:a4:6b:32:b7:
3a:f0:5c:7a:38:2a:66:4f:9a:22:88:72:c4:33:98:
ca:2d:4c:25:c5:2b:8f:a7:a1:d1:c7:7a:3a:df:97:
46:26:ce:bc:59:eb:5e:8c:85:0d:bb:50:be:61:78:
1c:ca:4c:fb:2e:1e:02:85:18:f8:84:e4:9e:ed:f2:
cf:df:97:27:39:da:3f:1b:21:cd:aa:60:a5:93:1c:
ca:f3:22:85:07:fa:15:b7:32:f0:20:07:b1:67:0c:
4d:53:ed:42:9f:4b:f8:80:29:b8:d5:a5:16:bb:8a:
f1:c0:e6:38:e6:48:5a:7e:2f:e7:cb:b1:27:03:41:
d0:b0:b4:01:c9:9a:6c:a0:01:7f:7f:f3:ab:1f:18:
a9:38:e5:4c:a9:78:c4:34:b7:4e:d5:3b:68:68:40:
86:77:30:7e:4f:0a:8d:41:9a:5b:dc:0a:b5:53:3f:
2c:59:88:32:54:f9:0d:e4:da:14:af:8d:bc:6a:81:
c1:d1:fc:05:08:a1:5c:47:a5:f7:80:6d:cc:ed:b5:
be:34:cb:99:27:c3:ea:a4:71:ee:9d:27:a0:33:12:
7b:4f:fb:4a:bd:4a:d9:1d:ab:84:d5:47:c6:d3:9b:
3d:60:f7:4f:49:19:89:26:00:33:5c:0c:a1:46:24:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:E9:5D:80:25:12:4A:5F:DD:93:49:0C:2B:C6:0F:1D:9A:7E:E2
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:19:33:10:59:81:85:4b:6e:6f:93:f7:ef:5c:0c:62:4e:a2:
f1:c1:7f:9c:86:57:91:16:0d:bd:21:6e:97:94:c0:aa:2b:02:
cf:36:6c:7c:76:77:b8:99:2a:a3:45:a8:d2:96:8f:ca:5b:d6:
51:b9:8d:88:1b:6f:47:7e:2b:0a:a9:55:9d:67:8a:c6:5e:82:
ba:a3:87:35:3a:0d:a2:8b:55:ab:1a:54:d8:53:1a:d3:ad:b4:
6a:77:0c:9e:e9:a9:8d:c9:ad:28:94:32:fc:27:5c:f3:c9:03:
b5:56:cf:51:33:6f:20:28:9b:d5:d2:49:c1:63:5f:83:35:e9:
29:b0:86:39:b1:bc:d0:5f:9a:86:78:e1:ab:78:f5:e3:f0:08:
0f:fa:e9:3b:47:c6:02:13:94:d1:bd:32:d3:10:1e:66:cc:a6:
51:3b:0b:cb:61:73:1e:d8:29:a2:04:8f:98:e3:c2:e6:c4:15:
e4:c3:2f:f4:2c:90:0f:09:4a:e4:8f:12:ec:2e:41:31:d1:a4:
0e:dc:f4:0d:de:c0:4d:ac:ba:b0:90:5c:7b:e7:b5:10:3d:de:
a1:79:86:ce:3e:b3:39:ad:7c:7a:31:32:a6:fa:bd:ae:93:91:
a8:82:c1:7f:1d:bd:aa:83:16:74:12:5b:c2:82:89:be:9f:6e:
16:89:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:05:34 2026 by rpki-client