Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: 1PA00WlptZdMJMgq4F5OcRzqy0t8nYALzotFabd4FkU=
Subject key identifier: 67:8D:A2:F2:C7:79:C0:68:06:34:1E:73:B4:4C:18:E9:7F:E3:D4:40
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019D35646A443B1A20B60A128304EF226C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 16E3
Signing time: Sat 28 Mar 2026 17:01:06 +0000
Manifest this update: Sat 28 Mar 2026 17:01:06 +0000
Manifest next update: Sun 29 Mar 2026 17:01:06 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: ROlCCH1rE84alm/HbVealdFMFCGgSjDPzwKQAdFt+uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:64:6a:44:3b:1a:20:b6:0a:12:83:04:ef:22:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Mar 28 17:01:06 2026 GMT
Not After : Mar 29 17:01:06 2026 GMT
Subject: CN=678da2f2c779c06806341e73b44c18e97fe3d440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:56:f8:98:eb:59:f4:bd:1d:99:5d:ae:4d:
80:56:5a:67:ac:d3:84:b0:32:5b:76:62:03:57:51:
9c:ee:53:d2:a9:18:8a:86:8b:4c:37:e7:3e:41:b3:
5a:c0:cf:df:22:c5:11:ae:7e:82:28:35:07:a1:41:
bc:bd:2e:c4:02:ce:82:e3:28:df:20:33:bd:9b:52:
49:14:78:d2:e6:1c:19:25:d9:f9:a1:28:81:1a:9a:
41:57:c5:d0:f8:91:b5:68:11:43:a3:d8:6c:2d:cb:
c4:18:bd:e5:a9:ad:b3:48:57:5b:40:a4:43:e1:12:
ab:7e:2c:45:8f:73:bb:f4:e4:3b:5a:5f:c8:25:25:
8e:27:a4:40:03:98:72:ac:dc:13:bf:d4:2b:70:a2:
4b:80:8d:dd:cf:64:60:f1:61:97:6f:c1:34:a4:43:
e7:12:9a:55:ee:66:83:f7:2c:09:0e:77:58:6f:ec:
cb:3c:02:ef:9f:39:da:bc:6c:55:df:9b:f5:a7:5f:
cc:12:93:f4:b9:5d:e6:29:08:2c:df:c9:0a:56:d3:
d8:7b:86:95:3a:ff:e5:89:6f:95:93:fc:30:81:33:
1b:4b:cc:4a:ae:3b:70:77:8c:9f:36:fb:0c:80:53:
e5:8f:41:2b:d7:ea:c9:5f:53:23:b4:ac:f2:0a:af:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:A2:F2:C7:79:C0:68:06:34:1E:73:B4:4C:18:E9:7F:E3:D4:40
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:db:98:92:dd:7b:29:40:ea:d4:ae:bd:68:6c:84:15:b5:e5:
2e:3c:84:c3:5f:72:e4:89:53:9d:ac:e0:32:0d:52:7b:f7:05:
23:0c:78:91:33:47:4a:25:f2:64:6b:d2:da:05:4c:ec:69:05:
eb:7d:bd:cd:74:f9:48:89:aa:c2:f6:ef:7d:43:52:c8:0f:44:
61:41:14:42:e8:18:2a:24:1c:41:d3:78:72:d7:5b:30:2d:83:
81:b7:d6:8a:35:3a:75:68:77:49:13:4d:19:3d:44:b4:3e:b2:
00:8d:7a:4c:a3:7f:2e:67:4d:3a:d5:6a:87:07:61:ae:90:ba:
26:e3:b5:1d:ea:e4:6f:ab:ca:88:6e:d0:55:43:2c:d2:72:98:
97:20:c3:b5:51:f0:98:b1:4e:2a:23:bb:8b:ed:4a:38:8e:7c:
a6:6a:54:ac:3c:bb:eb:9d:77:23:ea:ce:c8:02:57:85:7a:81:
59:7c:b2:c0:2e:01:bb:3b:b3:a8:47:93:80:36:91:ce:2e:92:
25:2f:47:66:73:8d:e6:6c:7c:f1:f2:77:22:45:2f:5d:0a:61:
48:8e:9c:69:90:90:f7:27:89:c5:80:1d:9c:2f:8a:e0:a6:00:
86:3c:5a:6c:39:9d:49:67:f5:08:2b:35:c5:11:de:7e:10:94:
1b:d4:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:09:01 2026 by rpki-client