Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: PTr/rrfpoLBXdyeVcal2L9Ij4yjZhSYGXvTZiqnOIUE=
Subject key identifier: 63:A3:66:8F:17:EC:C1:00:8B:A8:91:DF:06:13:D0:F3:82:64:9B:A8
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019F1A1F9ACD6AAEFEE581352BDA57984B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 17DE
Signing time: Tue 30 Jun 2026 20:01:46 +0000
Manifest this update: Tue 30 Jun 2026 20:01:46 +0000
Manifest next update: Wed 01 Jul 2026 20:01:46 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: byo9H13/cYdUXG2cvEOXa5m2tnb+7Qc/D2r7Qn0TgV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:9a:cd:6a:ae:fe:e5:81:35:2b:da:57:98:4b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jun 30 20:01:46 2026 GMT
Not After : Jul 1 20:01:46 2026 GMT
Subject: CN=63a3668f17ecc1008ba891df0613d0f382649ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:9f:61:c1:7a:64:56:76:ce:13:c2:d7:99:
3d:e8:21:c1:09:0d:b8:b5:42:a8:07:57:f2:21:c6:
4a:e5:b0:e1:cc:3e:64:6b:54:dc:c5:2d:9b:9c:64:
02:8c:21:39:e2:46:a3:23:41:d4:48:3e:98:90:e0:
1a:71:80:df:3d:b5:b9:e7:26:15:ac:cc:97:48:55:
70:c2:44:8e:df:46:57:18:90:b4:e7:a5:44:25:ca:
67:cf:22:0f:f5:9b:99:49:05:73:07:97:53:36:5d:
8f:13:cb:06:da:f2:e8:1d:1f:e1:85:aa:6e:fb:96:
b1:5c:2a:20:7b:ea:a8:bf:d7:90:d3:88:33:4d:d7:
ee:2e:f8:18:d5:ce:53:8d:e4:45:a4:9a:96:23:5d:
4f:31:12:9d:58:21:e8:df:f9:1e:2a:0b:ef:fa:8b:
a6:eb:58:1a:17:13:b2:42:76:b0:14:00:cc:92:09:
d8:0f:29:32:f5:2d:0b:54:eb:b3:24:55:97:43:e6:
e0:7c:d1:e5:3e:c2:be:21:73:c9:ac:d8:7b:c6:95:
8d:14:51:4c:46:85:2e:c6:b5:76:2a:81:c2:df:64:
5f:ce:84:4d:b1:ea:57:22:25:0e:42:f5:16:1d:f0:
75:e8:8b:70:9f:7f:5d:82:78:cd:38:6a:9a:32:26:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:66:8F:17:EC:C1:00:8B:A8:91:DF:06:13:D0:F3:82:64:9B:A8
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:f2:75:79:6a:1c:d8:c0:e4:d8:26:4c:f8:b3:d2:ab:4f:
b0:2d:14:b0:ef:9b:7b:88:07:e0:33:65:82:23:6b:14:e7:a0:
1c:e8:a8:7e:b4:51:e3:13:8c:c6:e9:f4:23:f0:a6:52:e3:91:
4e:be:b3:7b:05:bb:f5:1f:9d:04:56:c9:91:6f:dc:e6:86:84:
60:d1:83:3d:31:91:44:cf:f5:d8:bd:7b:fd:a3:93:3c:ac:d3:
ca:1c:93:2e:62:c0:19:44:5e:91:03:ce:eb:67:0f:14:b9:a3:
0c:a3:69:de:63:ff:20:01:b8:f6:7e:33:ed:07:e3:e6:fc:d1:
e2:91:5c:9c:0c:15:eb:c7:91:cf:62:08:be:9f:e6:9e:11:9e:
49:8e:e8:cb:53:91:00:ad:f6:17:d2:48:02:d6:34:d4:d6:8f:
bc:df:b5:13:11:4c:e8:6d:d4:71:f9:23:fd:c6:33:1f:32:40:
12:25:7d:79:cc:ac:b2:ba:0e:79:cc:dc:05:0f:6e:77:95:c1:
6d:d6:7b:6b:4a:9c:41:d7:0a:d7:ee:0c:62:4f:f4:7b:ef:40:
b0:90:a9:26:95:b3:e1:45:64:6c:de:04:8d:db:96:b1:0d:6b:
6e:6b:6e:b4:d6:df:2b:d1:b2:46:8c:dc:4b:03:cd:79:b4:9c:
94:5b:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:21 2026 by rpki-client