Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: Px7rddM61nx3zBL+hbtpAOhKiQf19exud7zgo+4Kwxk=
Subject key identifier: 4E:42:FC:B2:75:46:FB:AD:66:40:B5:51:B7:35:E0:10:58:EA:0E:22
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019EB7A0E80B8799D88B7CAA03558F6A8FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1965
Signing time: Thu 11 Jun 2026 17:00:36 +0000
Manifest this update: Thu 11 Jun 2026 17:00:36 +0000
Manifest next update: Fri 12 Jun 2026 17:00:36 +0000
Files and hashes: 1: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
2: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: iXEfgUHxXlHfvxKwSmZXK6PHtmCKoMCxQJs1n1/3/OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:e8:0b:87:99:d8:8b:7c:aa:03:55:8f:6a:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jun 11 17:00:36 2026 GMT
Not After : Jun 12 17:00:36 2026 GMT
Subject: CN=4e42fcb27546fbad6640b551b735e01058ea0e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:94:32:30:27:70:d7:31:d1:96:9c:60:cc:
10:a5:57:db:0b:09:85:4a:61:57:cd:e5:d0:06:0c:
8b:6a:74:cf:67:05:e9:24:a5:82:11:59:11:b1:c4:
77:22:3f:a8:43:9e:0a:e3:36:91:47:fd:29:08:e1:
58:d2:df:46:53:53:ed:ab:32:16:8b:04:b9:6f:c1:
58:62:ae:4c:f5:d4:9d:c7:76:51:78:f0:ae:0c:58:
10:b8:02:28:06:35:39:ca:1d:2a:60:fa:5d:b9:e9:
49:be:c0:dd:45:4c:04:6c:2e:dc:4b:f6:92:10:73:
e2:8b:9a:f5:35:a0:fb:d6:24:5f:43:2f:7a:f0:c4:
38:79:22:fc:3f:95:8c:1a:a3:dc:04:f4:3e:3a:30:
bb:84:30:b8:58:2b:1e:cc:94:1e:09:4b:03:0d:04:
7c:0f:b0:e2:b3:c3:3d:98:09:93:e5:44:e6:3f:b9:
e4:75:c4:d6:da:cf:85:32:0e:dc:75:7e:70:a0:5e:
34:d0:c4:c1:86:81:6e:e0:bf:aa:44:b6:f4:0c:e5:
6a:25:d5:4f:1b:35:15:ec:4a:5c:2c:45:c9:22:4f:
2e:13:a3:d8:31:86:99:f8:f6:ab:e8:a6:4d:c4:9e:
3a:65:46:67:4b:b3:fc:5a:88:26:60:5c:7f:dd:05:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:FC:B2:75:46:FB:AD:66:40:B5:51:B7:35:E0:10:58:EA:0E:22
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ba:0a:cb:b3:56:a6:1a:2c:83:ea:af:7b:10:04:3f:2b:20:
7a:75:6a:36:dc:a9:68:cf:8d:36:66:fc:56:c6:f2:f4:c4:b3:
a2:9d:06:8a:91:db:14:19:24:f7:c7:78:e3:17:37:b9:19:02:
34:9f:a9:79:04:94:e3:45:60:98:5d:d9:99:17:e4:ca:12:f0:
86:91:d9:e7:23:74:ca:11:b1:1b:a5:eb:e2:21:ec:df:4d:ef:
5b:e8:cc:72:43:88:a0:ed:ac:b9:19:39:61:55:ba:24:c1:9c:
85:c3:e3:8e:4d:68:5e:8b:92:e9:69:9d:ae:35:9d:2d:82:f3:
a9:88:1a:57:97:e8:8a:28:50:f7:89:e1:35:21:09:83:84:45:
2f:a1:ab:e8:4d:0c:6d:ce:8e:0e:db:1c:ce:e0:0d:bb:ac:de:
43:8b:7b:a0:bc:87:1c:ee:06:d0:5d:c8:8d:89:1e:e2:be:61:
88:dd:c3:ab:75:74:3b:6a:14:6d:7a:68:ff:f0:61:a4:38:45:
f0:21:16:76:d9:e0:5f:22:56:13:a6:ab:f7:b8:54:f7:2d:e7:
ca:0a:2f:a6:86:6e:cb:f7:a4:a3:8a:70:94:64:8c:ec:ba:79:
9f:25:b9:f6:77:ac:06:82:30:8b:a7:cf:0c:4e:ee:85:22:10:
8e:27:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:05:48 2026 by rpki-client