Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: YKRDEV5UlhPY8XUBfnAkHtuPfYwu1WsR4neasBG9JOc=
Subject key identifier: B7:90:80:41:AA:63:23:0D:F7:D3:9D:32:36:90:05:78:F1:64:11:16
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019D3977E539E6F1A8377D16715041F27F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 13D5
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: Vh+tbU5JEjKBq9PGKG9vZHE6+0iVzAuaRSZgwaY4aXQ=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e5:39:e6:f1:a8:37:7d:16:71:50:41:f2:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=b7908041aa63230df7d39d3236900578f1641116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:80:46:e0:74:4b:da:8d:84:13:f5:c4:57:
a5:79:f4:d9:35:ef:17:2e:3e:17:88:13:9b:fc:00:
fd:6a:6e:23:5c:2f:26:10:72:d6:6f:27:7a:58:12:
19:7b:f3:4b:ba:ac:70:ca:16:e4:b6:c1:40:e6:bf:
3f:b0:f4:f7:b1:a5:e2:0d:e4:f5:1b:e6:b7:00:1b:
da:e4:d9:c7:d2:02:e8:5f:a3:41:7f:62:a1:ce:f6:
54:16:8b:38:30:ec:1b:13:e0:88:4b:b1:7c:eb:e5:
00:3f:f3:9e:cd:11:28:c7:15:39:83:44:f3:62:30:
b1:4e:0d:b6:a8:67:ec:24:9a:f8:47:1b:91:c7:28:
96:a8:ca:d0:93:4c:67:c8:b3:02:17:6a:98:c8:0c:
ae:3d:fb:fe:0d:02:96:15:34:df:f7:d8:17:95:c6:
3f:3b:dd:c7:7c:45:a3:54:d5:ce:ac:48:74:1e:c9:
04:d3:40:68:b3:3c:33:45:f2:b6:a2:07:02:18:c4:
ce:8e:97:af:45:a0:58:ed:90:59:5e:46:ec:9a:38:
e9:a6:66:d2:b2:04:62:1b:33:65:78:c2:cf:cb:87:
f3:75:52:d5:43:05:1e:75:b7:18:49:9e:4e:dd:ea:
4d:a6:08:5a:07:a0:a3:e3:39:3a:f1:94:3d:d8:71:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:80:41:AA:63:23:0D:F7:D3:9D:32:36:90:05:78:F1:64:11:16
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:ff:75:e4:26:04:35:99:2f:2c:86:96:c8:de:31:5c:eb:
e6:8c:92:b0:17:f6:20:b1:33:3d:99:d6:d9:ab:5c:eb:b9:e9:
70:60:c1:97:4b:a9:35:e5:f8:4e:b5:a9:0e:59:92:84:4d:86:
87:de:07:0c:a2:5a:16:52:eb:e5:7a:fd:56:09:59:5a:ef:37:
ad:e3:b1:c3:96:0f:5e:f5:d0:75:e3:93:3e:84:68:97:bd:d7:
be:71:be:21:64:c6:28:57:6b:70:3b:42:fe:2b:46:0a:bf:1c:
9c:31:e0:d9:6e:84:e3:32:9f:57:19:b7:f3:df:21:e9:39:e7:
3d:82:13:ca:16:da:c9:42:d3:0d:de:60:e9:16:b4:99:ee:f1:
7a:b6:30:0e:25:52:ef:66:4b:0e:33:3f:18:0c:a8:e4:81:ca:
21:92:9d:17:cd:66:81:81:ed:27:86:b4:37:eb:5b:5e:f0:5d:
d6:09:9c:1d:14:8a:58:06:f7:0f:f7:63:46:82:ad:5b:73:a9:
34:40:0e:09:27:bf:8d:f9:3c:56:f0:45:02:f0:4c:74:1c:c8:
52:52:83:81:d1:68:d2:a2:e0:92:2d:f5:64:08:94:26:49:34:
69:0e:90:1b:fd:13:3a:64:6c:f1:82:72:74:a4:77:5a:d2:44:
69:32:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:38 2026 by rpki-client