Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: MIHE1NnJFZyDMgd5JWZACg8BSixQBEeN9BLPFSbNqxo=
Subject key identifier: 28:55:BB:8F:AD:6D:C0:70:FD:FD:E9:6A:FD:CD:79:A1:EB:2F:5F:A8
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019EB84577E4A284FA84D3C05765F24175B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 20:00:20 +0000
Manifest this update: Thu 11 Jun 2026 20:00:20 +0000
Manifest next update: Fri 12 Jun 2026 20:00:20 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: yOJnw15JvO8R6nJLVdQL/yS/6I25AZifB4SvBrylSsY=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:77:e4:a2:84:fa:84:d3:c0:57:65:f2:41:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jun 11 20:00:20 2026 GMT
Not After : Jun 12 20:00:20 2026 GMT
Subject: CN=2855bb8fad6dc070fdfde96afdcd79a1eb2f5fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:b1:fa:d7:46:58:12:26:c7:62:52:b1:d7:
e7:c6:46:77:2b:51:2b:11:4a:73:48:43:27:a4:3c:
cd:19:be:b1:54:4d:3a:24:da:66:38:02:65:19:6f:
5f:4f:eb:ff:aa:db:12:28:9c:b5:99:b3:dd:32:b5:
10:40:90:d1:e7:2e:9f:6a:14:5e:ce:2e:38:6a:41:
1a:10:fb:34:8e:72:65:1a:04:01:be:98:84:a1:42:
59:4c:01:b4:df:87:28:29:50:14:b7:b6:42:e4:3d:
2b:76:98:1d:3c:ea:4e:41:f2:db:9f:ce:da:7f:f9:
f4:24:f4:91:39:dd:f6:55:7a:94:dd:c7:4c:de:65:
3e:1e:44:3d:36:b8:2b:32:7b:fe:fa:7c:44:4f:9a:
6e:62:83:1f:0a:c9:42:a4:32:82:10:66:51:c1:a7:
80:d4:46:7e:b8:db:d5:58:21:9b:ca:30:5e:3e:00:
f4:22:9c:7d:31:2d:87:4e:a1:47:0f:5f:60:a8:c8:
22:4f:63:93:07:34:ec:1f:c0:d4:11:ce:5e:89:d0:
03:f7:b4:fa:f0:ea:63:e1:75:31:f9:71:b1:91:82:
10:60:60:0d:26:a1:a1:9b:57:80:8b:14:ae:11:c7:
77:42:2f:2a:cd:ba:84:88:0e:0f:7c:a8:cd:af:de:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:BB:8F:AD:6D:C0:70:FD:FD:E9:6A:FD:CD:79:A1:EB:2F:5F:A8
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:4a:02:0b:47:15:7c:cf:76:a4:40:8c:5b:20:2e:be:c3:
e4:b1:95:9d:32:27:1f:60:d4:d8:60:68:0a:ae:71:27:da:12:
94:cc:5e:35:3d:27:b4:13:a8:85:e6:79:f4:b4:2a:0d:77:e3:
b0:18:af:dd:0b:da:23:73:0b:2d:f2:fa:71:4d:17:1b:7e:2b:
ad:2f:83:64:48:da:d2:9d:e2:72:c5:47:e9:63:58:75:ea:59:
c0:df:96:95:91:69:6b:bf:96:7e:92:db:52:7f:9f:56:ff:d8:
93:49:31:c2:2a:40:f0:7b:72:42:e3:6a:f7:9b:18:22:e4:bf:
ce:57:e8:7d:9c:aa:07:b6:02:c9:a2:1d:b1:bc:a9:d6:cf:74:
7a:55:be:b8:dd:54:1e:f0:34:9c:a4:3f:91:50:9c:b2:50:4c:
b2:89:23:01:90:7c:47:1c:c3:41:7b:47:2b:93:12:3b:b0:84:
4e:c5:d6:77:06:5f:06:73:ec:df:07:ed:70:b1:ce:34:74:e8:
67:d5:93:eb:d9:1c:41:6b:60:ad:19:bd:24:b9:76:9b:f5:98:
ee:09:4a:fd:be:d2:24:f5:69:7d:d0:09:eb:13:4c:8b:e5:8d:
1e:bc:29:99:11:ad:24:b6:96:f3:de:18:69:78:de:36:82:ca:
f2:da:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:37 2026 by rpki-client