Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: mxTCfrQpJ23nFZnw5dh7XPoQYaEWTfhf5e/D++TFwko=
Subject key identifier: C9:EF:B0:A3:4C:6E:A2:52:DF:05:DD:28:FD:C4:FA:66:88:9A:09:53
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 01A181BDA76A6E296F9F11D0E275683C9A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 09:00:52 +0000
Manifest this update: Wed 28 Oct 2026 09:00:52 +0000
Manifest next update: Thu 29 Oct 2026 09:00:52 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: GvbB+J4CZzfol/Q/1lxJuApeli8nJ63hSxBEmewHZB0=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:a7:6a:6e:29:6f:9f:11:d0:e2:75:68:3c:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Oct 28 09:00:52 2026 GMT
Not After : Oct 29 09:00:52 2026 GMT
Subject: CN=c9efb0a34c6ea252df05dd28fdc4fa66889a0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:25:d9:c3:3a:5d:de:3e:70:bc:4a:50:9d:
ce:01:0b:fe:9d:48:b6:e7:d4:29:71:76:95:8e:0a:
f0:ea:45:82:e0:b0:b7:d5:67:29:00:3a:ff:3e:d4:
5a:5d:61:df:67:60:fe:f5:55:5a:2f:fe:16:ca:e2:
58:db:b2:17:2f:ca:31:7e:46:c8:b7:84:79:06:89:
cd:07:43:39:d3:2c:2e:3f:a7:96:a4:9b:ac:a9:f7:
27:8b:02:a6:8e:02:16:b7:40:28:aa:da:39:e1:49:
61:23:42:54:c7:6f:e9:5c:08:dc:93:03:56:65:c3:
f6:aa:e6:55:7d:c5:ca:03:1c:3f:b6:9a:0a:c8:24:
ac:1f:84:c6:a8:c8:36:da:ea:54:45:38:eb:1a:4b:
20:c8:8e:f3:1e:59:f4:63:20:84:e9:99:0c:db:d8:
ea:6f:dd:d5:b7:59:86:c0:d1:d1:ce:93:df:8e:cb:
0d:4b:a6:d2:fe:54:bf:94:b2:e1:42:7d:32:bb:90:
f2:66:75:10:3b:96:cb:26:08:75:b7:e9:cd:37:a9:
81:76:2b:d1:6b:b8:f0:9b:ea:e9:20:fc:9f:c4:18:
a7:eb:77:de:13:c4:28:e3:f4:d5:93:6b:00:ce:4f:
44:0a:2f:d6:a5:6b:4d:61:4e:0c:18:04:a5:8b:d7:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:B0:A3:4C:6E:A2:52:DF:05:DD:28:FD:C4:FA:66:88:9A:09:53
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3f:5e:8a:e1:ee:a9:e4:a9:a7:02:eb:c7:0a:6e:49:ad:a2:
e7:d8:63:05:ee:31:7b:78:0b:66:b3:3a:99:ed:97:84:28:d6:
87:18:23:64:a0:cf:37:81:d7:ac:ea:d8:0a:8c:66:b9:f1:db:
c6:55:ca:0f:94:7a:70:97:26:bb:03:84:90:b7:46:61:80:bb:
83:06:42:2f:21:b0:2d:86:1e:7d:9b:99:4d:cb:6d:1b:35:7e:
4c:22:28:6d:c0:b8:f3:96:18:93:28:ba:b1:15:bc:a9:98:9e:
3c:17:a6:8c:75:ca:af:30:df:4c:e6:32:03:d5:52:a5:0d:77:
7d:bf:8a:e0:85:d7:08:bd:9d:76:ec:0f:b9:30:77:ed:f8:1b:
fb:aa:c9:92:64:20:c0:9e:61:b3:98:4a:6e:e4:9d:da:5e:41:
d2:b5:e5:b7:0c:ed:e2:26:05:68:64:95:29:53:0e:e3:13:36:
6d:b6:b8:0b:dd:8c:74:43:7f:dd:b7:2b:d8:75:6f:a0:a6:b2:
22:71:0a:cd:20:a7:b8:78:9e:0f:bc:36:4f:e1:48:e0:0b:c4:
fb:9c:58:c0:f1:cb:a0:11:15:13:2e:a4:8a:e2:02:93:76:cd:
6c:06:2c:8d:4a:9d:8b:44:54:b2:68:91:4b:0b:b9:fa:54:3b:
04:49:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:58 2026 by rpki-client