Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: sIe48YyrNuLF03/praAxeuKkLPprz5QJm1GNonaTbMg=
Subject key identifier: 64:99:6F:82:86:EF:15:FE:86:46:5D:F5:5B:9C:E4:DE:F0:56:05:32
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01A001DD9D16D2AD0015B975FB3195E22E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 20:01:35 +0000
Manifest this update: Fri 14 Aug 2026 20:01:35 +0000
Manifest next update: Sat 15 Aug 2026 20:01:35 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: b9ya/9aLpyB/Agwd9nkXgHa+iBH+xnHhlzGYqrsF0YU=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:9d:16:d2:ad:00:15:b9:75:fb:31:95:e2:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Aug 14 20:01:35 2026 GMT
Not After : Aug 15 20:01:35 2026 GMT
Subject: CN=64996f8286ef15fe86465df55b9ce4def0560532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:c0:73:76:8b:ce:22:4b:2b:80:a1:20:1c:
18:71:c5:91:06:a5:ac:4b:5a:0c:2c:e8:ef:91:6e:
9c:93:ae:9a:a8:21:8a:d7:ca:05:8c:6d:10:f1:0d:
d7:e5:fc:b0:7c:42:dd:de:34:0b:f9:fd:a9:ad:6e:
2c:dd:53:ae:bc:b9:64:93:dd:21:60:db:d9:6b:f9:
0f:bd:b8:3b:21:32:fd:de:42:cf:ef:45:48:08:7d:
f1:73:00:20:c4:82:5c:83:2a:56:31:73:e3:a0:fb:
9b:46:31:f9:d1:15:e8:ce:d1:59:61:2c:ed:6e:32:
3a:ec:b0:e9:b0:27:5a:f7:b6:7b:8d:e3:56:1e:c0:
a0:e4:22:44:14:5a:ff:f1:14:21:b6:dd:ff:49:bb:
04:4a:2f:6f:2f:ef:dc:f2:e4:13:3c:c8:d2:f3:b5:
04:bd:4f:57:74:97:62:65:a5:a2:32:04:7b:0c:76:
f9:3a:3b:4c:c5:13:70:3e:b5:ad:12:08:98:bf:77:
77:0c:86:d8:89:4a:f9:10:04:0f:41:6d:a5:d0:7d:
73:2a:19:9b:07:da:a2:01:a8:39:8a:ab:b8:34:f3:
9a:90:60:2c:01:05:61:ab:b2:5e:16:3f:9c:1c:40:
cb:ac:37:b5:fe:23:1c:84:1d:63:1c:46:d2:ac:84:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:6F:82:86:EF:15:FE:86:46:5D:F5:5B:9C:E4:DE:F0:56:05:32
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:6e:c7:25:09:98:e5:f7:d8:4b:47:db:bd:b5:fa:92:b9:
bf:c6:9a:75:b1:09:71:c0:f5:e2:38:cb:fb:a0:8e:5f:fc:c6:
00:c1:0c:f8:94:7f:c5:ea:0a:4b:de:c3:68:ec:5a:44:38:88:
27:9f:c9:d2:94:35:26:1d:c0:5b:3d:1e:1d:6f:45:3f:ff:82:
c2:6f:d3:3f:dd:2e:8e:c6:19:af:57:74:d1:4f:3c:9b:f9:9d:
ac:12:e1:ea:8f:19:40:7e:96:48:bf:d1:1b:31:3e:f2:15:58:
8f:5b:96:6f:4f:6b:d1:3c:8f:92:b5:11:71:bf:8d:ab:aa:d8:
72:b0:98:60:d1:a7:46:5d:7f:ab:56:a6:43:c7:a2:71:a3:d2:
fa:a2:5d:eb:b7:7e:3d:66:4a:4f:f0:b7:e1:b1:78:db:d5:6c:
16:b7:46:8a:16:73:b4:c2:a4:0f:bd:6b:30:5d:f3:c6:ad:2c:
49:16:af:d8:ff:7a:37:05:f0:37:a4:c3:f7:d9:7a:0e:9d:90:
eb:87:db:64:c8:38:3c:7c:71:8a:52:b1:58:21:b0:36:e3:85:
ba:69:3c:7c:6a:f1:09:8a:d1:18:5c:31:09:84:b9:73:0d:33:
06:10:e6:e0:e2:6b:9b:db:36:86:ae:c8:30:4b:84:0b:6d:26:
06:35:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:12:15 2026 by rpki-client