
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: JwEzk57pJUTNI5BJFV0L1/L/ZerG27gekBpW6jkNgr8=
Subject key identifier: 8F:17:33:85:A5:5F:F7:83:71:5D:6B:7F:8C:F8:52:4E:7B:74:99:1A
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 01A08C0CB1FE3573CD9BDD374CA2673D4895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:00:37 +0000
Manifest this update: Thu 10 Sep 2026 16:00:37 +0000
Manifest next update: Fri 11 Sep 2026 16:00:37 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: ++mVwKwact1Aj0yoxIjMsBU5DjY+xrm2Y9TeIjyZmss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:b1:fe:35:73:cd:9b:dd:37:4c:a2:67:3d:48:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Sep 10 16:00:37 2026 GMT
Not After : Sep 11 16:00:37 2026 GMT
Subject: CN=8f173385a55ff783715d6b7f8cf8524e7b74991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:cf:eb:c9:cf:fc:d0:ed:cf:b8:28:f2:38:
1a:b6:f0:ba:a7:06:62:b5:03:b4:97:36:21:6a:bd:
54:10:09:df:ea:ee:8d:dc:63:c6:d0:40:c9:7a:5d:
a0:a6:d2:19:65:a5:6a:1e:07:e3:5a:14:db:09:1a:
57:f8:1a:b2:92:75:64:0b:d6:e6:1a:a9:1c:27:b2:
c6:08:ea:67:31:5b:7c:db:9b:4b:dd:c2:f4:27:15:
70:f9:4a:d4:8a:50:a9:1c:a8:4e:4e:d2:49:db:2b:
6c:c6:28:4d:fa:6c:fb:46:89:dd:d1:88:2b:88:46:
a8:fd:b2:c8:3e:7b:92:db:72:77:df:07:07:75:7a:
f4:da:f9:53:b4:d7:f9:16:8e:44:5e:30:bd:9e:6a:
cd:5d:2e:f6:0e:ad:24:8b:ee:7a:96:2e:96:9c:7f:
21:62:ea:fe:5e:59:8e:91:52:31:37:df:9d:3f:62:
9b:1e:e3:1d:82:a5:db:63:20:0f:43:67:16:c9:dc:
e0:10:41:9a:71:67:1b:48:b6:39:f1:da:eb:eb:2f:
09:7c:a3:f4:d3:07:1b:05:ae:00:4d:52:7d:2a:0d:
75:be:8c:b0:ef:5a:a1:e3:02:50:b3:46:28:cc:d2:
9e:18:4b:ec:ab:67:78:12:47:d6:44:b7:fa:4f:97:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:33:85:A5:5F:F7:83:71:5D:6B:7F:8C:F8:52:4E:7B:74:99:1A
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a7:52:05:72:5f:a7:b5:9e:ca:92:60:7a:96:87:88:f0:91:
06:91:13:34:32:da:bf:78:4f:04:40:6b:90:a5:59:7b:41:ae:
8d:9f:8f:54:11:96:e9:ad:eb:6c:8e:24:6b:34:03:fb:f3:36:
12:4e:ba:95:ca:0b:21:ad:9e:f9:94:eb:fe:49:c9:64:5b:a2:
1e:dd:12:47:55:07:e1:25:ff:a0:eb:96:f4:c6:d5:66:3f:9d:
0f:7a:61:61:b9:6a:48:e4:54:80:a5:02:81:fb:c7:0b:2e:db:
37:99:e1:57:ae:67:4d:ad:78:32:a0:8d:26:73:fa:e1:90:d2:
8c:2e:71:6a:92:ab:74:e1:b7:f4:b4:25:e4:c3:45:97:75:0f:
54:05:e8:b7:da:dc:b8:c5:e1:d1:11:de:62:c8:39:20:c4:55:
a6:19:a1:11:1b:40:a1:60:5d:fd:bd:3c:4c:6f:c6:8e:ff:65:
50:6c:f2:bc:04:50:16:60:33:3c:ac:58:86:21:95:04:35:3e:
10:a9:6a:40:32:a8:8c:0e:bb:21:9e:27:d4:fd:34:bd:a3:c1:
ef:0a:39:90:68:a7:41:99:bb:0d:3d:36:d6:a1:7e:36:4f:5d:
e3:e5:7d:51:29:96:55:36:99:5a:f6:29:41:a4:f7:b8:6f:2b:
30:68:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client