Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: Nd+RYCQZp2y7qU74fv+uOMKaH0corLvOVLOSsWTZKlY=
Subject key identifier: 68:A5:D5:63:7B:8D:D5:8A:C7:33:FF:86:04:C1:56:54:75:5F:21:53
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 019E1EA2CCE51A193C9BD5BEBC15829495B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: 4AnxdzwhFwqAF7Q+eBq7cpNKeQNp2Wbm4bTw8qitXXo=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:cc:e5:1a:19:3c:9b:d5:be:bc:15:82:94:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=68a5d5637b8dd58ac733ff8604c15654755f2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:64:97:b6:5a:fc:08:1c:7d:50:ac:2e:c4:
36:45:e9:2c:43:e1:27:9d:79:00:56:cb:8a:9a:17:
3a:8c:61:d7:b5:4d:3d:d0:8c:b8:e0:0a:d7:3f:4a:
bb:cd:a3:b3:f5:74:fb:58:60:15:88:e9:74:38:96:
b3:0d:8e:ed:eb:1b:9e:82:4f:5c:3c:4d:73:ba:e3:
7e:45:57:17:ae:6f:3b:48:67:d4:e6:da:01:c1:8c:
47:4f:9a:2c:74:42:5e:0a:95:ba:95:45:19:f1:a3:
67:88:cc:90:6f:3b:a1:cd:54:87:37:75:65:43:c4:
cf:fd:c4:31:f5:2e:e9:78:a4:fb:7a:a9:a2:01:22:
3e:83:84:86:e0:47:dc:95:75:be:01:4d:d5:41:4a:
44:9e:10:b0:0e:86:56:71:50:1d:e6:37:a3:2a:d9:
69:67:06:b8:5b:6f:a8:23:6e:36:68:2a:eb:d9:c8:
57:c6:d1:1d:62:40:7e:0e:ce:51:41:0b:2e:50:c2:
4c:89:09:8e:79:91:4b:3c:08:bb:93:32:59:a6:67:
b1:31:3c:f3:70:bb:f1:94:b5:0b:39:ce:da:c9:38:
8b:96:be:61:e9:1e:40:ac:1c:74:e0:90:a3:fe:11:
20:72:12:51:63:ff:f1:2c:7b:49:89:60:24:6f:ae:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:D5:63:7B:8D:D5:8A:C7:33:FF:86:04:C1:56:54:75:5F:21:53
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:61:a7:02:6f:0b:8f:82:f5:27:42:8e:23:99:1b:8b:e9:24:
84:fb:cb:3c:45:e4:17:86:f1:0c:d4:6b:2e:a0:62:8a:45:2b:
c7:f5:3f:fb:b4:12:4d:6e:3e:ab:79:d0:75:ee:9d:17:55:59:
18:2a:16:2e:de:e1:98:ff:af:24:78:01:22:79:ba:97:0b:f8:
43:7c:2a:34:d0:fc:6f:f9:87:7f:15:cb:1a:ae:d8:a3:85:a9:
67:95:fd:b6:45:a5:71:fe:db:60:5e:07:ff:96:b9:31:ab:fd:
5b:8e:09:3a:8b:36:ec:68:7d:1a:5b:59:48:0d:06:2e:89:1b:
3b:78:4f:ee:06:ce:85:ea:5e:44:40:08:30:b8:05:31:01:3d:
d3:55:2e:9b:4f:91:48:62:c4:05:29:b6:52:c1:80:4f:73:80:
95:a2:33:84:57:0e:98:d4:66:9e:dc:13:db:c6:d7:44:01:2e:
7f:ee:33:43:f2:88:20:98:53:55:7c:b2:10:a0:77:0b:31:7b:
f2:68:48:92:a5:b7:cb:0a:32:6f:c8:4f:ad:4b:db:6a:ae:2c:
88:b6:2a:dd:15:54:38:e3:7a:75:9d:d5:f5:08:7c:68:b8:eb:
36:31:a6:47:9d:84:32:88:f7:95:32:c2:4e:14:4a:63:71:51:
cd:ed:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:43 2026 by rpki-client