Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: C2bSCK2HQRrPxrfk4jWqbnWXRziG+B0Ke4Q/Toz9JGk=
Subject key identifier: 43:BF:71:CD:8C:6A:9A:C4:E8:D7:E9:86:CC:EA:41:AD:AF:02:E1:C8
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019E1F10968A357FA69C8E6FB86B3A5E2E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 02:00:41 +0000
Manifest this update: Wed 13 May 2026 02:00:41 +0000
Manifest next update: Thu 14 May 2026 02:00:41 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: 4FKpVxBiR0IHxufFe7Nk8dd+xW0GVzGN4d3y1BDugLM=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:96:8a:35:7f:a6:9c:8e:6f:b8:6b:3a:5e:2e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: May 13 02:00:41 2026 GMT
Not After : May 14 02:00:41 2026 GMT
Subject: CN=43bf71cd8c6a9ac4e8d7e986ccea41adaf02e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:31:a0:27:26:58:b5:6a:be:af:bc:83:eb:
dc:47:64:4e:11:b3:ff:e6:c7:57:e0:80:c0:fb:35:
04:f1:61:b1:70:9a:b4:92:2a:2a:b4:b3:4e:ed:30:
bb:52:d5:29:c0:14:45:1c:56:aa:c8:7b:bf:97:f1:
c0:11:f0:ee:94:e5:e4:c4:5d:22:7d:79:ad:be:d6:
be:d2:76:18:ff:1a:42:8b:34:70:7d:6d:74:6a:b2:
48:17:38:7a:97:7c:82:00:84:f9:b7:ac:ad:df:ca:
38:81:c8:c5:82:bb:d7:25:06:01:3b:87:04:06:98:
dc:2f:7c:a4:45:c1:5d:d8:18:69:07:85:84:45:67:
0e:de:30:13:2c:fd:de:d2:34:19:69:cc:5b:08:60:
15:31:20:7f:47:55:af:4f:1f:bf:ee:52:a4:6d:0d:
3f:d4:22:e7:75:00:c4:2f:1a:df:df:38:f3:f8:f5:
82:19:1e:2d:c8:a1:a0:f1:4a:42:f5:28:6c:f7:c5:
ab:ab:24:2a:77:ab:5a:1c:8f:45:23:95:c1:26:da:
db:db:5b:c2:8d:ca:ec:8c:f5:9c:15:2a:c5:86:80:
29:a4:ac:ca:65:f7:b2:18:be:26:5b:da:3a:a1:ec:
be:c2:cd:7d:2e:b5:63:f1:1a:cf:13:59:cc:54:f7:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:71:CD:8C:6A:9A:C4:E8:D7:E9:86:CC:EA:41:AD:AF:02:E1:C8
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c9:03:c6:85:17:09:85:98:97:c5:38:7d:77:a2:ca:38:85:
5e:6c:88:c4:2e:b5:bd:ef:01:40:fc:7f:b8:b4:2b:b0:0b:ec:
35:fc:88:1e:a1:86:ea:39:34:34:d7:17:10:9a:af:b5:eb:43:
06:81:07:5c:8e:dd:f6:25:58:27:f6:45:40:c6:93:e4:c6:72:
d2:15:82:3e:5c:f5:f1:9c:b1:24:97:38:4e:b2:f1:d0:3c:22:
a7:aa:f8:6a:64:a9:ec:7f:1a:32:59:91:60:21:e1:39:0e:48:
68:92:5d:4f:74:1d:3f:37:d8:03:ed:a2:d7:9e:65:4f:50:58:
0a:d4:84:30:ba:6e:55:0d:a4:d2:5e:2b:ad:7e:92:ad:da:e9:
d7:84:41:81:46:79:b7:d8:3f:89:41:c7:de:c5:dd:4f:9f:ce:
e2:1f:aa:b9:2f:0f:81:ec:dd:50:e7:b3:1e:7a:c2:54:d8:07:
bd:c8:e3:e2:16:3b:64:89:80:fe:06:d3:ec:cf:69:f9:8c:a7:
1d:fb:aa:f1:11:dc:10:4f:a9:4a:34:52:f4:b7:57:c1:5a:b2:
92:8e:8c:51:e1:4f:28:ee:75:36:cd:64:47:6d:11:48:0c:f6:
17:2f:0d:36:f6:3d:86:83:fc:ab:a5:4c:5b:36:85:10:2b:ec:
24:0c:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:04 2026 by rpki-client