Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: uBo7lHl/UlUqS4t8hmu0kuuN/DNBhM+K0kXViEX7RMA=
Subject key identifier: B3:5E:D9:68:B6:EA:A8:2C:C3:36:24:11:D4:47:14:FA:7B:F4:79:3C
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 01A08C7A6DC3BBF8541BE0D9FD36D7869FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 18:00:28 +0000
Manifest this update: Thu 10 Sep 2026 18:00:28 +0000
Manifest next update: Fri 11 Sep 2026 18:00:28 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: +OWaS5EQMWn0cdxu5zc64MTOt/tC9aAUBlluLD8+KL4=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:6d:c3:bb:f8:54:1b:e0:d9:fd:36:d7:86:9f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Sep 10 18:00:28 2026 GMT
Not After : Sep 11 18:00:28 2026 GMT
Subject: CN=b35ed968b6eaa82cc3362411d44714fa7bf4793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:d2:db:c5:79:4b:ba:35:b8:db:3e:ae:6d:
5b:da:f6:0e:4e:b3:28:d1:3d:5c:99:04:a2:b1:30:
65:bb:28:95:84:0c:d8:a7:23:bf:1e:15:34:a1:dd:
ff:10:df:28:29:cd:05:ff:03:d8:1a:4c:74:d4:db:
76:41:5c:4c:95:6e:da:f5:ac:56:f4:9c:12:f6:f4:
27:53:df:d5:03:61:a5:03:14:52:62:fc:cd:80:0d:
32:f6:2b:24:85:32:d3:f6:1a:c6:ef:40:41:9f:52:
83:22:11:3d:06:9e:58:74:21:d4:4d:df:0c:fb:f0:
ab:9e:b3:b5:da:9a:4a:ba:96:6c:a7:90:6a:57:00:
83:c4:25:38:c2:a8:0e:12:25:37:a8:33:ec:8f:60:
3a:f0:84:43:48:17:5a:9e:a9:2e:ca:ac:d0:6d:69:
7e:78:09:e7:26:ee:2c:89:cd:25:42:35:23:b7:23:
38:8f:e8:7c:11:c5:08:b5:66:fe:8c:2f:18:8b:1f:
46:e7:44:e8:bc:e0:41:02:94:26:32:5a:6f:d7:62:
3c:49:51:6c:b2:50:47:ae:96:9b:70:22:1f:5b:e6:
4a:3e:74:54:af:a5:90:c2:6f:26:9c:37:39:a3:b5:
c0:db:c2:ba:19:d1:75:96:76:34:03:37:38:c7:6c:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:D9:68:B6:EA:A8:2C:C3:36:24:11:D4:47:14:FA:7B:F4:79:3C
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:ca:6f:67:4c:7c:37:ed:82:ad:16:ef:a9:7c:d5:c6:72:
0c:31:57:69:c9:ce:92:75:5a:92:80:e9:4d:99:7e:ef:e1:7a:
48:32:66:13:f0:56:e3:fd:f9:1a:84:e6:0f:f2:95:74:5d:48:
4c:5b:82:3b:2f:e0:14:a0:63:73:49:11:58:aa:7e:e4:e3:09:
12:46:14:33:bf:72:9a:4c:1c:d4:76:c0:33:ad:0a:2e:63:7f:
a5:d3:fd:32:a3:95:8b:d7:12:06:1c:3f:56:f0:e5:98:ea:6b:
bf:c2:11:4f:a9:29:37:28:48:1b:23:29:5d:3a:f6:d6:8e:b9:
fb:40:07:3d:ea:f4:0c:77:af:8d:74:aa:49:58:8e:8a:3d:86:
c5:6d:8e:39:75:30:cf:17:d9:0c:03:85:c4:b4:2c:39:58:5a:
a6:7d:ca:c6:31:e4:d6:86:9b:a4:7e:a7:ef:22:13:48:ae:79:
39:ce:84:b2:09:b0:f1:fc:06:79:91:38:70:f3:5f:14:07:83:
4a:1c:dc:78:fb:af:4c:c8:33:2a:e0:ba:69:53:d0:27:ef:05:
5f:6c:87:15:0c:22:22:c5:b1:dc:c5:1d:a3:01:7f:1f:4f:2a:
84:a5:c3:2c:49:20:26:83:f2:e8:a2:63:df:a3:9f:21:84:cc:
9e:ed:ea:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMem3Du/hUG+DZ/TbXhp/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmUwZDAyNGNkZGJhZjg2ODIyOTEyMjE1ODk3MTQ3MmIy
NGNiNGQwHhcNMjYwOTEwMTgwMDI4WhcNMjYwOTExMTgwMDI4WjAzMTEwLwYDVQQD
EyhiMzVlZDk2OGI2ZWFhODJjYzMzNjI0MTFkNDQ3MTRmYTdiZjQ3OTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv83S28V5S7o1uNs+rm1b2vYOTrMo
0T1cmQSisTBluyiVhAzYpyO/HhU0od3/EN8oKc0F/wPYGkx01Nt2QVxMlW7a9axW
9JwS9vQnU9/VA2GlAxRSYvzNgA0y9iskhTLT9hrG70BBn1KDIhE9Bp5YdCHUTd8M
+/CrnrO12ppKupZsp5BqVwCDxCU4wqgOEiU3qDPsj2A68IRDSBdanqkuyqzQbWl+
eAnnJu4sic0lQjUjtyM4j+h8EcUItWb+jC8Yix9G50TovOBBApQmMlpv12I8SVFs
slBHrpabcCIfW+ZKPnRUr6WQwm8mnDc5o7XA28K6GdF1lnY0Azc4x2z6iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNe2Wi26qgswzYkEdRHFPp79Hk8MB8GA1UdIwQY
MBaAFBb+DQJM3br4aCKRIhWJcUcrJMtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYt
NWIyZjkwZGY3OTZkLzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYtNWIyZjkwZGY3OTZk
LzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNrKb2dM
fDftgq0W76l81cZyDDFXacnOknVakoDpTZl+7+F6SDJmE/BW4/35GoTmD/KVdF1I
TFuCOy/gFKBjc0kRWKp+5OMJEkYUM79ymkwc1HbAM60KLmN/pdP9MqOVi9cSBhw/
VvDlmOprv8IRT6kpNyhIGyMpXTr21o65+0AHPer0DHevjXSqSViOij2GxW2OOXUw
zxfZDAOFxLQsOVhapn3KxjHk1oabpH6n7yITSK55Oc6Esgmw8fwGeZE4cPNfFAeD
ShzcePuvTMgzKuC6aVPQJ+8FX2yHFQwiIsWx3MUdowF/H08qhKXDLEkgJoPy6KJj
36OfIYTMnu3qMw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:39 2026 by rpki-client