Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: A+uQwOa/KyRFRNT9OkLZkx/FVDIfBsLcnqhefeRk9jM=
Subject key identifier: 96:0E:54:25:85:64:EA:90:4A:C0:98:05:7D:12:23:08:AE:7E:1F:41
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01A18E66AC0A69D21A1B6D558FE3DBCC4C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 20:00:55 +0000
Manifest this update: Fri 30 Oct 2026 20:00:55 +0000
Manifest next update: Sat 31 Oct 2026 20:00:55 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: vSOyrqbticwM/cfw5oCzIPlCak3dyA5qrbJ2PWTD/OM=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:ac:0a:69:d2:1a:1b:6d:55:8f:e3:db:cc:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Oct 30 20:00:55 2026 GMT
Not After : Oct 31 20:00:55 2026 GMT
Subject: CN=960e54258564ea904ac098057d122308ae7e1f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:90:90:87:a9:73:eb:13:50:27:41:6b:01:
e7:54:30:90:d7:eb:6c:3e:3e:53:17:56:d8:ff:47:
2b:60:af:ec:03:f9:1e:aa:19:c4:15:48:f6:1c:20:
be:47:a4:a1:4e:ed:5d:76:71:22:40:71:5e:44:79:
b9:4e:1e:b5:32:42:df:4c:a5:d7:7c:4b:a0:1f:76:
dd:f9:2f:4f:98:25:b6:90:73:e8:9d:23:e9:c8:06:
a2:b4:ca:0d:bb:bd:f6:7a:7c:82:d2:ae:c0:f8:f3:
e5:0e:c7:b1:b6:f4:e0:3b:a4:e4:0a:54:f8:42:c3:
73:40:bb:99:2d:03:15:56:72:df:34:a4:7c:0e:10:
ed:bb:58:2d:ce:75:97:68:58:98:83:73:e0:c8:4a:
97:83:0f:d1:e1:f1:ce:70:58:0b:11:1b:01:fe:8e:
14:6a:86:6b:15:a8:46:19:e5:d2:4c:b3:2b:78:f5:
49:6f:09:d1:93:fe:29:d5:04:54:f9:15:e2:ce:9d:
f7:5b:80:5f:f1:62:9b:6a:81:dc:1c:d7:cf:8a:72:
03:07:69:47:2e:97:4b:90:64:e0:73:69:ba:d2:cc:
4c:94:78:85:91:ea:97:c2:39:32:93:a1:56:b7:23:
8a:3e:7e:98:56:df:dd:d3:fc:31:18:88:77:0c:52:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:54:25:85:64:EA:90:4A:C0:98:05:7D:12:23:08:AE:7E:1F:41
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cd:84:72:4c:f4:f2:2d:e1:e5:34:6f:d1:1e:7d:13:1e:d6:
1a:7c:73:28:b1:2a:4a:58:34:24:16:68:ec:2a:ea:e8:f9:79:
ab:39:b9:a6:da:4f:b5:80:42:53:28:d2:0e:48:69:cd:f7:b7:
2d:5c:43:48:07:ba:0f:83:a7:9e:e7:d8:fc:58:88:b2:6a:cd:
b4:75:a2:b1:48:be:57:b5:5e:3a:7d:b6:f5:12:36:50:5c:94:
d1:43:f4:d1:03:4e:a9:b0:2b:56:21:88:38:78:70:6a:ce:7a:
00:86:bd:96:e3:de:fc:32:53:a2:8c:cb:20:df:99:8e:be:ce:
75:56:c8:a6:cd:07:09:50:dd:c2:f6:25:61:1d:a4:e8:55:ad:
ef:17:ff:27:a9:cb:f5:2d:0a:05:f9:b9:81:db:54:d5:d9:ef:
01:a5:13:b3:97:eb:96:a5:d9:75:ab:97:58:1c:5f:b5:c4:cd:
48:fa:4f:ff:6e:8e:fa:54:f3:83:5e:05:c9:26:3c:43:ca:16:
aa:30:fd:b3:6a:56:58:80:75:d8:b2:bb:f9:93:53:78:3a:4d:
5e:10:ce:08:22:91:c3:3b:83:63:7f:1f:d1:41:fe:6b:26:eb:
9d:cf:07:ff:de:d6:f2:e9:43:5d:9b:a9:d9:32:84:25:c9:13:
dd:03:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:09:10 2026 by rpki-client