Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: /CGx0yKN/qIZAFLigxm0YpzjaGNXY/1OWsft3iQukH4=
Subject key identifier: 58:88:C4:21:CC:82:85:18:0C:6E:C2:63:9F:71:38:34:19:34:8A:D4
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019D27E00EDB5662B9A69DE4A6E082131FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 16DC
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: xFgfjIuxnLYZaym0db2iLeuSWchz+5JrQy3n+vg0pDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0e:db:56:62:b9:a6:9d:e4:a6:e0:82:13:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=5888c421cc8285180c6ec2639f71383419348ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:cc:84:cd:d3:51:84:f6:2b:a0:0f:5a:f2:
f8:85:f1:46:ed:55:ae:32:44:33:b8:55:ea:31:ff:
15:9c:07:98:62:35:f8:cc:a8:a9:70:62:81:84:e1:
10:92:f0:35:2c:37:74:c9:65:7c:b8:18:41:f0:96:
01:f7:7f:20:28:d1:a4:62:20:83:a7:3b:91:03:ee:
3b:65:f5:83:3b:2c:83:20:94:f9:05:b1:51:89:fb:
00:93:bc:cc:b7:8b:2f:54:7f:81:c0:57:f3:60:73:
77:fc:31:1f:c7:32:93:e5:d9:a0:4c:e9:08:9f:aa:
50:23:d9:a4:f5:92:86:b4:50:d1:71:e9:f5:7f:51:
c4:5d:b2:e7:3c:d8:96:03:4a:b8:86:f4:a8:9c:f7:
d2:a9:70:84:84:04:1e:15:ad:10:d5:84:60:03:bf:
69:47:6d:fa:2c:d3:53:38:fa:7d:07:ff:80:ad:81:
af:bb:0a:8e:02:21:52:ff:3d:2b:7c:ef:b8:b2:2e:
34:bf:49:ba:b8:35:4d:8d:51:c1:4e:de:1c:99:fa:
90:af:79:72:99:c5:e5:f0:98:28:95:56:61:8f:91:
e7:96:0e:a2:9d:07:b2:4c:bf:b3:13:52:0a:52:40:
9b:32:1b:a2:de:28:13:a1:08:73:c4:a5:4c:d2:fe:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:C4:21:CC:82:85:18:0C:6E:C2:63:9F:71:38:34:19:34:8A:D4
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:d2:a3:a8:e1:1d:cf:2e:c1:66:bd:4e:50:3b:ee:72:84:
52:ec:ba:84:87:de:d0:22:60:0d:5c:37:85:05:c3:dd:e3:6b:
9f:fb:8b:a0:cd:99:36:24:22:bc:b3:3c:81:c2:e7:0a:60:fb:
df:6f:0f:f1:cf:53:77:ff:13:4a:a1:d7:5c:81:c9:cb:ed:b0:
1e:dd:43:02:34:f3:81:be:33:ca:f0:52:41:e8:a9:2f:38:9e:
fc:9b:3f:96:f6:29:54:db:ae:ab:38:82:ec:cc:1e:2c:3b:00:
dc:36:30:89:02:8a:17:33:d6:60:26:7c:11:75:62:af:25:76:
ec:6b:03:5a:fe:20:be:0c:c5:43:24:eb:78:8b:8e:4f:0f:ab:
1c:29:4f:aa:94:3c:0f:27:19:ff:1d:95:b4:c4:ad:f1:c3:c9:
e9:48:a2:23:b4:d0:5f:23:08:59:66:1c:f4:ac:ca:ea:56:f5:
69:c0:c6:9b:88:d6:ab:1d:e0:c6:db:33:56:eb:63:b1:c8:27:
9a:6e:92:c6:ef:36:2f:a0:48:84:4c:bc:a6:c8:f2:7d:bb:49:
69:04:54:8f:5c:9e:58:a2:ca:d1:66:97:6e:4e:ff:02:67:aa:
80:11:c7:22:50:a2:94:d6:ee:4e:c1:b0:28:3b:66:44:80:ec:
18:12:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:07 2026 by rpki-client