Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: xVaz5lfxE7lxhbK7uRQo+Rkzd1QN29UBE+hsNqd1HQg=
Subject key identifier: 74:E4:02:DE:FD:1D:C9:7F:BF:EF:73:29:FA:E5:4A:EA:B4:A9:DB:C6
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01A08F7C59CBFB466A6014C49BB623B34861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1A4E
Signing time: Fri 11 Sep 2026 08:01:26 +0000
Manifest this update: Fri 11 Sep 2026 08:01:26 +0000
Manifest next update: Sat 12 Sep 2026 08:01:26 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: Fqi9+E7UzHvFfDmKuTffNLMZ8B/mS/Cj8ZKS3WyAqDI=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7c:59:cb:fb:46:6a:60:14:c4:9b:b6:23:b3:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Sep 11 08:01:26 2026 GMT
Not After : Sep 12 08:01:26 2026 GMT
Subject: CN=74e402defd1dc97fbfef7329fae54aeab4a9dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:1e:aa:94:d7:2f:78:b2:2e:27:14:74:f8:
88:59:56:db:fe:25:e4:45:43:fa:3c:66:f2:f5:60:
8c:c5:eb:8c:91:f3:60:0c:8d:40:bc:54:45:89:f8:
da:b0:45:65:b1:3f:4b:27:9c:e6:bc:35:bf:68:fb:
dc:6a:21:7e:21:45:92:99:5f:08:85:28:e2:66:62:
7c:81:c7:80:34:d7:5b:87:2a:0c:bb:2d:5e:85:09:
27:e7:97:0c:b9:2b:96:ea:2f:bd:75:2b:cd:91:ce:
e3:2a:5c:c7:17:f7:8b:06:74:6e:d7:4c:96:c3:41:
29:e7:78:89:56:e3:15:f5:82:76:cc:ec:7b:6f:31:
1b:25:ef:76:ee:29:84:ae:d5:eb:1a:d0:b3:da:9b:
f3:97:77:fd:05:de:af:34:c0:f8:bb:11:e7:84:72:
03:4e:6b:98:bd:ee:a9:cf:b2:8d:2a:12:9f:2e:0c:
3a:97:c8:74:73:0b:18:f5:78:18:3b:42:56:79:d9:
fd:01:53:64:c4:ca:d7:0f:13:c3:bb:3a:3e:74:b1:
2c:31:9b:8f:cc:7f:62:b3:4e:c2:ac:e7:39:2c:a0:
2c:c5:ef:59:48:7b:c3:4e:24:e7:7d:d2:bf:1e:17:
96:03:bc:c3:5a:fd:b7:ce:4c:8e:74:b8:5d:34:3c:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:02:DE:FD:1D:C9:7F:BF:EF:73:29:FA:E5:4A:EA:B4:A9:DB:C6
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fd:56:c4:61:a8:a8:dd:03:04:af:bc:5f:82:66:e9:e4:0c:
b1:35:9c:8d:dd:4c:10:86:42:a7:34:fa:8a:4b:e7:df:db:cd:
57:ca:b4:75:0a:94:5a:a4:b9:0f:dc:2d:aa:3e:8d:e8:12:2b:
6a:12:03:bc:b6:74:31:99:cc:ea:7d:fd:c3:50:01:5d:6f:10:
c7:f6:a3:20:29:94:39:7f:8a:54:ac:7b:4f:8e:06:bd:75:72:
c1:13:eb:9b:5d:b3:46:67:fc:96:a1:4f:9a:fb:9e:5f:3e:34:
31:48:3b:05:48:b1:79:f7:f6:01:ee:33:e1:45:1b:1f:28:1a:
0c:06:d5:e3:ed:4d:b1:2e:e8:a0:0b:36:80:b6:09:43:4d:63:
23:07:52:e2:04:8a:06:48:bf:2e:0f:f4:f7:b2:e6:c7:9b:98:
0e:d2:8a:3f:3c:14:18:59:9b:eb:2e:c3:81:d2:18:75:db:e5:
c0:6a:60:b9:a3:ed:c4:14:5b:e2:a3:70:0d:7b:e7:ac:54:9b:
74:54:c3:58:a8:fd:4d:f6:fb:0a:6b:99:ac:a7:b6:ac:61:d6:
1e:8b:fd:2f:4b:c1:3e:8c:df:fb:4d:d6:be:cf:eb:94:e0:17:
23:26:9b:65:8e:22:87:1b:e3:ad:22:90:2d:f7:c0:bc:09:9d:
f2:78:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:48:32 2026 by rpki-client