Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: IOa/pDNyivgLhN0mCELvUYP9COq0kC5PFf8LZERy0Ak=
Subject key identifier: B8:C7:36:67:D0:5B:C0:FD:71:FA:8C:31:4A:BF:4E:85:FA:0C:6F:D2
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01A08F0E4764C5C954A2058789EA3F120A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 158F
Signing time: Fri 11 Sep 2026 06:01:12 +0000
Manifest this update: Fri 11 Sep 2026 06:01:12 +0000
Manifest next update: Sat 12 Sep 2026 06:01:12 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: sVjZSK2vd3fu5HobqlFpD/QgvuBaOKgWtXP69QXn4Pk=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:47:64:c5:c9:54:a2:05:87:89:ea:3f:12:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Sep 11 06:01:12 2026 GMT
Not After : Sep 12 06:01:12 2026 GMT
Subject: CN=b8c73667d05bc0fd71fa8c314abf4e85fa0c6fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:c6:9e:76:c4:47:6d:28:d5:69:07:10:22:
12:bf:5e:72:1b:a4:5d:43:72:6a:70:46:5f:49:f2:
e0:df:eb:a7:56:e7:47:c9:98:c4:08:8f:40:e7:2d:
eb:5f:b6:77:4d:9a:a1:92:7a:c4:e9:c2:38:91:bb:
d2:84:e1:d1:4a:cd:1c:bb:d4:28:92:6f:fa:f7:fa:
3f:69:1e:5d:c5:0c:4a:ad:e4:ae:df:1d:29:dc:e4:
6d:88:10:b6:5c:ab:7c:2d:45:9b:e3:00:60:23:a0:
ec:ab:68:d7:8d:60:18:d6:87:40:01:97:b2:20:86:
82:f4:b9:2f:7a:9a:eb:a9:ff:a1:76:32:a8:ea:da:
bf:f5:f3:c8:f4:8f:39:84:f6:ef:a2:36:3e:d8:29:
21:b7:e7:04:2a:b2:78:b2:79:b2:10:4e:8c:1a:53:
39:21:7d:7d:b3:33:81:f4:0e:7f:cf:c5:62:32:da:
93:ea:54:41:11:1b:79:07:79:85:e2:34:41:1c:d3:
03:00:c8:a9:50:7d:47:ee:6a:45:da:83:cc:48:d2:
3c:e0:c5:b8:e2:d7:8a:3a:d1:f2:7e:28:26:26:b2:
96:c9:eb:4c:75:3a:04:18:8b:2d:b9:69:0f:f3:36:
ea:5a:c6:7b:c4:23:09:51:e2:1a:3d:96:cb:28:be:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:36:67:D0:5B:C0:FD:71:FA:8C:31:4A:BF:4E:85:FA:0C:6F:D2
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:23:d7:b9:ff:b9:51:e0:f2:c9:42:bb:68:62:16:ec:43:c6:
e4:ea:e4:e0:89:0d:7e:d0:00:02:e9:6f:cf:ab:37:c4:98:7c:
1c:1b:b3:89:d0:7e:9d:15:db:1b:65:35:66:1b:39:fb:e9:d8:
ea:72:2d:f2:d6:4f:a2:86:8f:59:6a:ea:ca:b9:d1:34:67:32:
b3:64:ab:94:b3:22:56:88:58:3d:ed:28:80:fe:9c:d7:a8:bf:
60:12:e7:d8:c5:d7:81:7f:2e:11:6f:81:17:fc:a8:2f:c9:75:
83:c5:32:f8:ab:5a:3a:f7:ff:f6:67:c8:59:32:b7:33:6a:f7:
07:96:e1:fb:95:b9:c5:3b:f1:50:d9:e0:be:5e:37:59:c3:2d:
cb:51:8f:1e:af:d8:c7:98:ce:ba:43:ca:2f:01:3c:50:8f:f5:
8c:1f:5a:93:eb:44:4e:2e:7e:f5:65:ec:b0:15:44:21:e3:b8:
01:23:e5:f9:9d:6c:82:e4:2f:53:09:45:73:d7:ec:55:66:48:
a1:b0:94:01:76:65:07:85:cb:00:d7:52:e1:08:5d:94:a0:87:
96:84:cc:d3:1e:91:cc:e4:28:a4:ec:3c:fb:bb:65:b5:14:81:
44:88:09:e3:86:52:40:60:03:e3:7c:15:c0:ee:5c:f4:85:27:
b9:9b:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:08 2026 by rpki-client