Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: c/l7fFUG9bbjjqA4Mf9mWwueZ0Vsbs3pj8EEZVqiscY=
Subject key identifier: C7:CC:18:35:B9:9D:80:61:B9:3C:63:E2:01:A7:9D:6C:70:8A:58:2E
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019FA1F28AE4DAD0E588238B95922C568A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 05:00:54 +0000
Manifest this update: Mon 27 Jul 2026 05:00:54 +0000
Manifest next update: Tue 28 Jul 2026 05:00:54 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: XoT+Li0CfO82AXmiJvPBOgM0lE1ZvWPWT904rJ0LQ/Y=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:8a:e4:da:d0:e5:88:23:8b:95:92:2c:56:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jul 27 05:00:54 2026 GMT
Not After : Jul 28 05:00:54 2026 GMT
Subject: CN=c7cc1835b99d8061b93c63e201a79d6c708a582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:3d:dd:e8:ef:52:10:18:04:05:eb:9a:53:
b5:7e:20:ce:9e:d7:fd:27:3e:c0:26:81:2c:3e:80:
14:b2:53:9f:b2:b4:41:00:ee:bb:a3:32:bd:bd:3d:
e9:3f:b7:d3:2e:a9:5b:1c:8a:f5:ae:c5:31:1b:1d:
5a:c9:78:52:52:eb:3c:be:b4:52:41:f2:69:6f:cd:
b9:41:16:9b:2f:5e:df:41:2a:a1:da:8b:f2:ea:a8:
71:30:c8:cf:17:59:bf:85:6e:ab:61:1c:f8:da:91:
6f:53:9d:28:c9:9d:75:57:dd:b5:81:43:40:46:15:
e9:d6:48:d0:d1:86:a1:6a:1b:85:62:16:7f:7c:34:
43:2e:d0:e0:74:6c:9a:17:ea:31:7d:73:ba:91:3a:
64:37:24:53:66:01:80:19:ce:33:ba:e4:7b:fd:51:
68:ec:2e:5e:e5:31:2b:1b:97:53:31:3a:45:d1:a7:
5a:a6:3f:56:83:6e:7b:e0:67:01:c1:17:a6:3d:11:
7f:fe:17:ff:03:7a:d6:a9:5d:cd:8f:4f:10:a6:fa:
c3:23:a5:54:bf:8e:71:ef:d1:0d:71:7d:d7:42:60:
14:dc:09:8c:24:5f:57:2a:6a:9c:ed:cc:1c:6d:b3:
e9:81:5d:9f:b3:7d:39:e2:97:f3:52:70:93:00:ab:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CC:18:35:B9:9D:80:61:B9:3C:63:E2:01:A7:9D:6C:70:8A:58:2E
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:73:a9:f1:50:f4:fe:e4:0e:01:d9:50:f9:cc:08:52:e6:
56:d7:ea:c2:d7:0a:35:a1:09:41:7d:51:ca:e6:8a:c3:18:a8:
27:68:0f:aa:86:d5:ef:7d:7d:9f:2c:d3:75:4d:3c:1c:56:b6:
78:c2:6a:48:82:db:54:be:2c:eb:e6:b6:16:3d:ce:2b:c6:eb:
98:40:35:ff:0f:ff:4a:ee:d6:fc:fe:2e:ba:81:f0:4d:17:a7:
80:3e:a3:6d:e3:f2:18:80:00:ee:93:45:f3:fb:fa:63:e7:e3:
b4:60:31:e3:53:42:71:4b:a0:ce:59:f9:77:3e:77:d4:65:b7:
aa:da:cd:9e:35:b0:b1:24:e4:4c:37:24:70:3d:4a:a7:81:7f:
bd:d9:4e:da:c8:cf:22:c4:b5:16:4b:7b:ab:86:e7:dd:95:26:
6f:86:99:c4:f9:ad:f3:dc:df:54:2c:65:8a:ae:c9:31:10:54:
e9:c5:7d:e0:fb:f9:4a:bd:0b:02:48:f0:c1:1d:9b:f9:50:d7:
28:11:dd:ce:b9:dc:0e:02:f1:29:c7:7c:7b:e3:c7:19:0f:62:
74:be:69:79:9a:85:8f:05:36:a8:41:30:24:2f:1f:66:fd:8a:
ab:1c:97:94:48:0b:cd:73:6b:0c:a3:e5:4a:d1:c9:1d:48:29:
e6:fc:bf:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8ork2tDliCOLlZIsVooVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjYwNzI3MDUwMDU0WhcNMjYwNzI4MDUwMDU0WjAzMTEwLwYDVQQD
EyhjN2NjMTgzNWI5OWQ4MDYxYjkzYzYzZTIwMWE3OWQ2YzcwOGE1ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfw93ejvUhAYBAXrmlO1fiDOntf9
Jz7AJoEsPoAUslOfsrRBAO67ozK9vT3pP7fTLqlbHIr1rsUxGx1ayXhSUus8vrRS
QfJpb825QRabL17fQSqh2ovy6qhxMMjPF1m/hW6rYRz42pFvU50oyZ11V921gUNA
RhXp1kjQ0YahahuFYhZ/fDRDLtDgdGyaF+oxfXO6kTpkNyRTZgGAGc4zuuR7/VFo
7C5e5TErG5dTMTpF0adapj9Wg2574GcBwRemPRF//hf/A3rWqV3Nj08QpvrDI6VU
v45x79ENcX3XQmAU3AmMJF9XKmqc7cwcbbPpgV2fs3054pfzUnCTAKv7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfMGDW5nYBhuTxj4gGnnWxwilguMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXxzqfFQ
9P7kDgHZUPnMCFLmVtfqwtcKNaEJQX1RyuaKwxioJ2gPqobV7319nyzTdU08HFa2
eMJqSILbVL4s6+a2Fj3OK8brmEA1/w//Su7W/P4uuoHwTRengD6jbePyGIAA7pNF
8/v6Y+fjtGAx41NCcUugzln5dz531GW3qtrNnjWwsSTkTDckcD1Kp4F/vdlO2sjP
IsS1Fkt7q4bn3ZUmb4aZxPmt89zfVCxliq7JMRBU6cV94Pv5Sr0LAkjwwR2b+VDX
KBHdzrncDgLxKcd8e+PHGQ9idL5peZqFjwU2qEEwJC8fZv2KqxyXlEgLzXNrDKPl
StHJHUgp5vy/zg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:11:48 2026 by rpki-client