Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: kKUtZrHzhTQFnl4N745N/p8Fl7Dv8eiJ8gzhpMgXOWo=
Subject key identifier: 6A:A1:4D:9C:25:E9:9B:30:E0:0B:8B:94:D7:68:2B:E1:ED:58:09:92
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 01A0D7CCFC157665D24969490D390805BA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 09:02:10 +0000
Manifest this update: Fri 25 Sep 2026 09:02:10 +0000
Manifest next update: Sat 26 Sep 2026 09:02:10 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: 91bmrpESuE6+HagZP5765bOpE1MmBZnHaFQiqWmznes=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:fc:15:76:65:d2:49:69:49:0d:39:08:05:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Sep 25 09:02:10 2026 GMT
Not After : Sep 26 09:02:10 2026 GMT
Subject: CN=6aa14d9c25e99b30e00b8b94d7682be1ed580992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:47:17:33:26:9f:93:d5:07:5e:cd:4d:9f:
31:ca:70:9f:66:47:91:0b:36:e1:88:44:c6:71:e8:
5f:2c:77:dd:dd:7c:73:12:55:38:c2:49:79:40:1d:
a1:9c:72:65:fd:2b:4c:e5:d8:72:8c:00:1d:14:96:
83:7e:23:63:12:d9:ef:eb:9a:f4:e4:77:22:cb:ec:
08:5d:fe:35:cf:d2:a5:cf:e9:28:e7:af:f5:cb:9d:
ba:b6:cc:4c:f3:5a:d0:08:c2:87:5e:34:8b:5d:ae:
1a:b9:8e:ff:fe:1e:7b:db:ac:bf:cf:de:ef:d4:70:
b6:27:84:78:5c:f8:61:05:f5:d1:7f:8b:3c:cc:da:
7a:d5:51:21:b9:fc:df:a4:e7:23:e8:cb:0b:d1:4f:
f5:03:1f:09:eb:b8:7b:67:bb:1d:88:c2:b4:08:30:
b1:15:19:cb:e1:b6:7e:d6:ca:07:e0:2f:16:b6:75:
33:9c:32:99:bf:95:d0:ef:77:2c:d9:7f:79:6c:27:
92:8e:af:22:d4:fd:3f:74:5d:20:54:56:8c:83:38:
74:a9:2a:6c:ee:22:ce:38:66:4e:b4:a6:18:cb:2a:
d7:80:8f:cd:41:84:0e:a9:2f:7b:4f:8a:57:54:a2:
d8:09:c9:c8:65:21:61:c9:4e:e8:ab:92:f3:c0:5a:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:4D:9C:25:E9:9B:30:E0:0B:8B:94:D7:68:2B:E1:ED:58:09:92
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0d:3b:b6:8d:31:f4:c6:fc:63:cb:d5:a4:51:b4:f3:57:8e:
9c:ce:54:ec:cb:1f:4b:b9:95:ac:80:0c:a3:88:67:77:58:de:
35:ed:0e:7c:5e:bd:c1:b0:2d:af:19:e1:a0:23:ba:14:b7:cf:
2a:f1:3c:a7:ef:03:33:bd:54:fc:2c:cd:6c:c9:fb:fa:06:05:
e3:90:12:20:54:f8:ce:33:7f:db:1b:5b:05:84:9e:0e:48:74:
95:5d:68:27:8a:ef:aa:eb:99:f6:56:d5:c7:79:3c:10:47:24:
37:13:6b:61:98:f8:1d:71:06:23:61:74:de:ec:ca:bc:2c:c1:
c6:9c:88:1f:24:d8:da:f9:97:51:69:86:e4:82:7c:4d:ad:db:
e5:b4:59:33:4b:3a:8d:c2:a7:85:83:45:07:3c:25:2e:33:01:
84:34:44:1d:a9:5b:e1:8e:51:32:48:1f:32:dc:af:c8:cb:19:
d9:80:27:cb:dc:d8:6e:98:eb:ea:aa:dc:df:1c:07:05:fd:31:
0d:c6:31:2f:0b:74:f1:aa:44:2c:f3:5d:f2:fb:aa:8a:8a:69:
cc:74:33:f3:ca:07:5f:91:af:f7:55:16:a7:4e:7c:9d:f2:d1:
3f:82:17:01:a4:f0:03:58:d8:6c:60:5a:1a:31:d9:35:9e:84:
76:42:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:20:07 2026 by rpki-client