Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: fXp2KecXBZFKbkUaePyYWK81lnHs+igdG4RBIIPCCyM=
Subject key identifier: 8F:77:C5:8B:CA:2A:80:0A:28:EA:DB:E5:67:31:FB:FB:83:1E:48:D6
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 019F2812B794EF7DA2BCB12D223E56393645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 085F
Signing time: Fri 03 Jul 2026 13:02:22 +0000
Manifest this update: Fri 03 Jul 2026 13:02:22 +0000
Manifest next update: Sat 04 Jul 2026 13:02:22 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: golWQfEBJbI45KzfpcCzp7bA9E8xPuLx5Q5P3rQAX3I=)
2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:b7:94:ef:7d:a2:bc:b1:2d:22:3e:56:39:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Jul 3 13:02:22 2026 GMT
Not After : Jul 4 13:02:22 2026 GMT
Subject: CN=8f77c58bca2a800a28eadbe56731fbfb831e48d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:79:7c:d0:e5:b8:62:b4:92:07:4a:af:9c:
14:d2:c4:d4:de:e0:a8:6a:8b:cf:40:72:37:e5:69:
c1:4f:ab:c0:2c:4c:a1:6b:af:56:92:9f:ba:27:1b:
25:1c:fe:05:8c:81:4b:c5:22:6e:d4:0d:b9:e0:ef:
61:8b:aa:ae:1f:b7:8b:37:5a:6e:9d:c0:6f:11:20:
5d:42:76:b8:d5:9b:05:1f:9e:97:c2:d8:70:9a:98:
77:21:b7:f0:24:85:2d:97:60:73:61:28:d2:1c:ea:
23:a9:5b:65:6a:95:d1:a5:45:c3:0f:cf:2e:90:bf:
bd:38:4c:82:94:10:1c:87:cf:e7:27:aa:3e:bd:71:
2b:02:67:e0:68:3e:03:ff:bb:55:21:95:c9:3d:2c:
b2:5e:04:64:cc:fb:2d:1f:72:4a:ed:ee:fb:cd:ce:
3b:45:c1:33:18:b8:ca:4a:fa:cd:ba:ea:71:9f:6c:
b6:5e:54:5e:8f:4f:26:27:02:5c:1a:d9:0d:6c:9b:
f5:8b:12:a5:26:43:9e:a7:f1:5e:a6:21:de:31:f3:
e2:dd:aa:9f:1b:d4:19:82:55:bc:56:5f:8d:19:73:
71:58:9f:5c:68:86:4c:53:12:29:2c:53:13:47:10:
0a:e5:a4:f9:79:36:08:d2:2b:a2:55:fa:9e:8b:b8:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:C5:8B:CA:2A:80:0A:28:EA:DB:E5:67:31:FB:FB:83:1E:48:D6
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:67:cc:81:04:9f:70:a0:3a:55:ef:18:7f:7a:54:95:d0:
31:cd:79:b9:70:58:0f:2e:e4:58:38:04:4e:81:bf:81:00:7f:
bd:61:63:74:a3:33:bf:84:a6:84:ee:88:90:e6:00:ea:b9:a1:
ce:59:57:ed:1d:c6:dc:cb:23:55:49:8c:2a:b2:cc:40:b6:b6:
e7:b8:72:63:a0:a6:95:86:b9:63:82:31:42:84:cf:89:24:c6:
40:86:06:be:87:7f:84:31:43:5e:ec:8b:cb:7e:2b:db:41:a2:
6c:89:17:b8:f7:b7:e5:81:17:a8:84:3f:f0:89:72:4f:4d:91:
78:e7:f5:d7:fe:ef:72:3e:60:72:a7:9e:02:d8:0d:fb:f0:c8:
d6:c3:53:3c:a3:55:9d:77:bf:77:b8:da:1b:7f:19:a3:ed:54:
0f:47:bd:20:1b:bd:22:46:cb:5f:d1:b4:8f:8a:cd:b7:65:c6:
bb:4a:a8:37:0f:d4:fe:aa:82:b7:b7:08:86:9a:dd:4e:ab:39:
f9:dd:36:a7:f7:f2:46:c7:ac:5d:bb:a6:cd:19:e3:1a:8b:cf:
59:65:21:0e:e0:15:38:1c:9f:79:57:d2:8d:8a:0d:f5:c0:e6:
c8:3c:2e:cd:9e:fb:fd:45:40:09:89:b7:0d:75:06:e8:56:7b:
2f:1f:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:33 2026 by rpki-client