Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: 8UW+xwPazqYyVwzJuF6d0eOo0JRWatp9hsmPRrSPYdQ=
Subject key identifier: EA:68:71:B8:15:DF:53:0E:02:11:84:E3:5E:B0:B3:58:39:92:B1:A3
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 019E28B88637D7402F2FB641BB8675D21421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 08B6
Signing time: Thu 14 May 2026 23:00:41 +0000
Manifest this update: Thu 14 May 2026 23:00:41 +0000
Manifest next update: Fri 15 May 2026 23:00:41 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: 7IfM6Qusq1M9oMO8md5Qkeb5yKPMTW7gXjEZyLvzNvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:86:37:d7:40:2f:2f:b6:41:bb:86:75:d2:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: May 14 23:00:41 2026 GMT
Not After : May 15 23:00:41 2026 GMT
Subject: CN=ea6871b815df530e021184e35eb0b3583992b1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:33:c2:ff:6a:84:bd:b5:46:56:57:9c:e0:
3f:1d:d9:5b:83:27:ca:f8:4c:0d:b5:bd:a8:18:e6:
d9:01:b0:87:1c:63:e1:bc:ca:66:4b:9b:db:3e:33:
e7:82:f0:66:11:0f:ed:2e:be:15:05:2a:25:29:b0:
f8:97:c6:d2:3a:ec:73:51:3b:1e:81:99:6a:d3:42:
2e:01:68:52:64:5c:aa:54:27:49:0a:ec:23:1c:0b:
2f:f8:12:5a:d0:69:00:b7:68:4b:e2:ec:cc:df:08:
1f:49:c7:d7:77:67:26:62:46:90:de:70:77:24:d4:
30:15:ff:fb:b3:fd:63:d7:3a:23:6a:d4:ca:b9:88:
14:e8:0a:f1:49:cf:8c:11:ff:5f:88:f5:f6:a7:0b:
44:aa:c9:64:2f:4a:5e:50:a3:90:71:d8:01:e8:84:
df:4e:a5:e6:45:8d:4a:98:71:26:e1:f8:2e:ac:27:
b5:c5:3e:92:0d:2d:06:59:10:28:aa:cd:15:eb:1a:
9f:2a:15:da:d9:25:b4:62:53:38:6a:82:de:86:8c:
a2:c5:57:a7:7d:64:e7:6b:e2:63:0f:ac:4a:c4:90:
59:a6:b8:a4:ca:c1:b6:b2:2d:83:0c:92:3e:48:b5:
44:41:c7:8c:69:f8:6f:b3:48:c9:b9:d9:af:a3:22:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:71:B8:15:DF:53:0E:02:11:84:E3:5E:B0:B3:58:39:92:B1:A3
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:4f:ce:fe:19:6e:57:f7:c0:c2:af:04:b4:e0:d6:a4:eb:
f8:78:df:e8:0c:77:24:0c:e8:2c:78:9e:d6:b6:cd:3e:92:19:
46:57:92:79:98:27:ef:51:d2:72:d9:25:b5:75:dc:ed:8f:2f:
a0:95:c0:04:8b:b4:8a:21:d5:d5:2d:53:de:66:f7:f6:47:17:
7d:27:69:61:e6:55:69:36:6e:1e:e2:f7:c5:02:b2:50:2c:59:
ea:4f:25:88:d4:7d:e4:ae:a7:a4:18:b8:18:8c:52:96:0d:74:
55:30:17:e9:8c:da:0b:5d:57:a8:63:35:aa:5d:ae:34:15:b7:
7b:b4:40:b2:24:9f:8a:61:da:98:42:88:72:91:0d:24:2a:9c:
27:53:72:32:be:6d:80:5b:1b:ef:44:e1:e9:62:78:a4:c9:c4:
5d:6e:e7:96:00:4f:cb:77:83:2e:57:4c:9f:da:61:d9:35:62:
1d:8a:14:3c:9a:f9:b7:bb:f2:6d:6d:e7:88:ba:33:79:5e:ef:
e4:80:97:0c:96:43:47:8f:65:a7:75:3c:34:62:be:bf:39:cd:
bf:31:e6:ab:9e:ad:a5:db:95:b2:55:12:fe:f1:8c:2a:f5:1f:
4c:0e:d3:dc:69:ca:ae:7e:a7:ac:77:da:d7:f0:e5:85:9e:08:
18:7c:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:41 2026 by rpki-client