Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: 0y2gh5I+Yw/F6JSP1/rYkbElfZ/MRiCPyVsSRk3apGk=
Subject key identifier: 4C:53:4C:53:A2:A6:28:7C:05:B6:89:86:AD:08:AE:EA:EE:DB:A6:25
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019E3297F5729F59FB7CA9CFBAE303FBDEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1456
Signing time: Sat 16 May 2026 21:01:20 +0000
Manifest this update: Sat 16 May 2026 21:01:20 +0000
Manifest next update: Sun 17 May 2026 21:01:20 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 6M8tUWofQWOKdnVqsC8Pn39RvqCcIKDpdg8dgurnJjQ=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:f5:72:9f:59:fb:7c:a9:cf:ba:e3:03:fb:de:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: May 16 21:01:20 2026 GMT
Not After : May 17 21:01:20 2026 GMT
Subject: CN=4c534c53a2a6287c05b68986ad08aeeaeedba625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:c6:6d:84:13:ef:33:7b:a0:cd:12:b6:bb:
31:82:83:16:f2:4e:2c:a1:35:54:eb:48:e8:87:eb:
54:fa:ea:37:3a:b3:79:a3:b4:70:f3:8f:25:b8:c3:
d3:de:b5:95:c8:b1:3d:94:78:61:e6:4c:f7:5f:21:
b2:f7:02:74:64:24:a2:73:9e:24:45:5f:86:bc:db:
1e:d1:5e:25:c4:96:f3:ec:42:a3:9d:a3:b6:58:03:
f8:d6:bf:ed:5d:e1:36:7c:76:fd:92:db:2a:a7:2a:
97:af:74:ae:c6:ce:68:d6:98:7e:89:69:42:0a:d4:
cc:42:1f:4f:04:9b:40:4a:62:91:96:6b:0d:b1:97:
5d:49:45:44:26:f9:61:a2:94:c4:83:3a:45:a5:cc:
51:a2:6e:ad:b1:ae:5b:8c:e9:e7:83:56:dd:ea:9d:
1b:5c:51:96:2c:5c:f1:3c:cd:04:8b:fa:d7:d4:b4:
0d:08:7a:99:ba:fd:12:0c:e9:48:a1:75:b6:e5:51:
77:b8:7a:a8:23:e9:e3:1e:c9:bf:72:c4:ce:3b:a0:
36:1f:51:c7:51:04:44:da:3f:de:34:17:f6:76:5e:
df:f0:aa:58:f6:15:fa:c6:d0:38:e9:1d:5b:4d:8c:
5c:b8:ba:b9:9c:a0:06:ae:78:c0:35:63:dd:6c:5a:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:4C:53:A2:A6:28:7C:05:B6:89:86:AD:08:AE:EA:EE:DB:A6:25
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:b4:55:a2:6f:65:e7:2f:fd:5f:f7:09:d6:59:dd:e9:f2:
68:cd:c2:d4:9e:63:96:c0:e1:72:8a:06:f5:d3:bb:69:25:f1:
fc:d9:29:5a:2e:be:a9:7a:77:ce:cd:5a:52:30:28:e1:d5:41:
3a:77:85:c4:92:7e:ce:00:c8:73:3f:85:ca:dd:df:0c:1f:e3:
44:6f:cc:9b:2a:c7:e1:cd:21:1b:dd:7a:6a:be:e4:f6:b4:4b:
03:e8:6d:ff:b4:d4:ec:3e:7b:c8:b6:7b:df:25:a9:4e:33:e1:
c6:1e:75:db:f3:56:64:b0:4e:f2:f3:3e:af:50:87:3c:8d:64:
47:3a:cc:cd:1d:5f:a6:3c:f2:a7:16:db:11:0b:c2:76:e2:d7:
17:99:8c:2a:71:9e:a3:90:fd:a7:e0:3b:4f:9d:95:58:21:78:
34:c8:f6:b0:a1:33:4f:cb:de:2d:b4:0b:2a:0e:f6:d6:6d:be:
11:f3:7d:ba:74:d9:91:2e:2f:ea:2d:97:41:cb:0c:f3:86:45:
33:f5:85:77:9a:36:12:d9:17:28:b4:4d:b2:bd:02:ec:17:2a:
66:d6:5c:fb:b7:01:ca:87:68:18:40:29:e2:b4:ae:bc:3c:29:
1c:73:02:31:60:c7:cc:96:e2:6c:9d:73:1a:e4:4b:f8:85:e2:
75:42:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:51 2026 by rpki-client