Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: CijHBsBxuzwS9tMy7xDp1XQ496h+0UIYh8Hb2jxTbOk=
Subject key identifier: D8:AC:7B:21:55:F4:03:2B:52:16:B8:64:8F:CB:01:BB:4F:B2:02:10
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 01A1219CD897028BDB2069ED1C02ED7AC389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 18EB
Signing time: Fri 09 Oct 2026 17:01:29 +0000
Manifest this update: Fri 09 Oct 2026 17:01:29 +0000
Manifest next update: Sat 10 Oct 2026 17:01:29 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: Lgc8cLnIT5QqIVyd3ZG0DP9ChGhSRNdDzd0dfW2zPV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9c:d8:97:02:8b:db:20:69:ed:1c:02:ed:7a:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Oct 9 17:01:29 2026 GMT
Not After : Oct 10 17:01:29 2026 GMT
Subject: CN=d8ac7b2155f4032b5216b8648fcb01bb4fb20210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:9d:fc:70:c1:a4:66:c7:d0:4a:bb:f5:73:
f0:7e:c6:e0:0c:bb:4d:de:d6:f6:f6:8c:2a:d8:d6:
79:4d:f1:e3:8d:e3:0f:90:a4:66:fd:70:7c:41:b2:
1d:27:c5:86:e2:4f:ae:80:35:8b:ad:87:7c:09:55:
79:38:ac:0d:55:18:11:fd:53:bf:fc:be:a3:65:db:
2c:0f:c6:ce:da:e3:18:f4:c5:f0:d2:8c:fc:19:0d:
d4:05:f8:da:97:29:b4:24:a3:72:b5:74:80:48:a8:
5f:83:66:bb:91:e0:fa:47:19:65:00:1c:55:ef:86:
db:c9:28:92:03:83:8a:2d:aa:61:cc:ad:aa:93:b6:
5b:a0:5f:53:c5:44:9f:f3:b2:1f:50:6a:72:48:8c:
d4:d7:20:b5:19:f0:b0:e0:53:03:d5:0d:a6:52:90:
f0:c8:78:05:36:04:d4:1e:cd:52:e1:5f:ab:18:88:
89:94:e3:48:08:c1:36:80:cb:19:35:e2:8a:44:a4:
e7:1c:03:4f:d2:0e:9a:c2:4a:22:22:9d:6a:64:8b:
75:67:e5:dc:43:cf:ae:38:68:d7:22:a3:5b:ca:53:
9e:7f:4e:1f:7f:b4:bd:ff:57:c6:d3:9d:f5:7c:bf:
70:e1:46:21:68:9f:a3:f4:41:5b:77:35:9d:ce:71:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:7B:21:55:F4:03:2B:52:16:B8:64:8F:CB:01:BB:4F:B2:02:10
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0b:a3:74:ba:24:65:40:99:32:2e:f5:58:0d:e1:76:1b:15:
18:c9:c2:e8:c5:75:a1:5a:3b:9d:73:08:3d:28:5f:2b:ae:5b:
5a:ae:f8:28:67:3c:81:15:36:c2:0e:ee:2d:b5:ed:a3:8b:7f:
dd:d4:70:c4:d9:f0:64:5c:f1:84:3f:b2:12:8c:22:ad:d2:fb:
42:e3:e2:d2:8f:21:59:f2:ff:de:76:9c:9f:8f:d4:3e:38:96:
ea:6e:30:33:dc:9a:b0:d1:71:ff:27:a2:49:b6:86:9f:fa:cf:
0d:60:9a:ad:1f:15:09:dd:6b:27:b3:66:28:ce:6a:02:5d:63:
9f:f5:9f:a7:42:b9:93:0d:85:af:e1:6d:52:61:71:24:03:94:
2b:3b:74:85:b0:94:7f:ab:07:dd:76:63:00:bb:b5:59:a8:f3:
04:8f:4a:ae:0d:e1:e5:38:45:bf:ec:07:8b:a4:0d:4c:ca:e0:
35:dc:a6:d1:fb:56:4d:ad:53:28:6a:05:ee:31:b4:7b:24:01:
94:04:49:93:f3:59:e3:5c:b6:aa:4d:58:3e:1f:71:df:4e:89:
1a:27:23:57:ca:b2:30:30:a4:25:44:52:30:5b:45:08:c8:5d:
03:69:30:5f:39:22:b4:c8:99:58:68:bc:7a:f5:53:20:e4:2e:
fa:24:86:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhnNiXAovbIGntHALtesOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1
ODQ3M2IwHhcNMjYxMDA5MTcwMTI5WhcNMjYxMDEwMTcwMTI5WjAzMTEwLwYDVQQD
EyhkOGFjN2IyMTU1ZjQwMzJiNTIxNmI4NjQ4ZmNiMDFiYjRmYjIwMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Od/HDBpGbH0Eq79XPwfsbgDLtN
3tb29owq2NZ5TfHjjeMPkKRm/XB8QbIdJ8WG4k+ugDWLrYd8CVV5OKwNVRgR/VO/
/L6jZdssD8bO2uMY9MXw0oz8GQ3UBfjalym0JKNytXSASKhfg2a7keD6RxllABxV
74bbySiSA4OKLaphzK2qk7ZboF9TxUSf87IfUGpySIzU1yC1GfCw4FMD1Q2mUpDw
yHgFNgTUHs1S4V+rGIiJlONICME2gMsZNeKKRKTnHANP0g6awkoiIp1qZIt1Z+Xc
Q8+uOGjXIqNbylOef04ff7S9/1fG0531fL9w4UYhaJ+j9EFbdzWdznGlOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiseyFV9AMrUha4ZI/LAbtPsgIQMB8GA1UdIwQY
MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt
Nzc0NGVmM2MwYjk5LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5
LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggujdLok
ZUCZMi71WA3hdhsVGMnC6MV1oVo7nXMIPShfK65bWq74KGc8gRU2wg7uLbXto4t/
3dRwxNnwZFzxhD+yEowirdL7QuPi0o8hWfL/3nacn4/UPjiW6m4wM9yasNFx/yei
SbaGn/rPDWCarR8VCd1rJ7NmKM5qAl1jn/Wfp0K5kw2Fr+FtUmFxJAOUKzt0hbCU
f6sH3XZjALu1WajzBI9Krg3h5ThFv+wHi6QNTMrgNdym0ftWTa1TKGoF7jG0eyQB
lARJk/NZ41y2qk1YPh9x306JGicjV8qyMDCkJURSMFtFCMhdA2kwXzkitMiZWGi8
evVTIOQu+iSGwA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:15:50 2026 by rpki-client