Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: 2e6WoHw1cWDjVEw1X6l3TeMt048GIC8w6n9jZPo0Pjw=
Subject key identifier: 4F:4B:F4:4C:28:79:CC:CC:35:7E:12:E7:C3:5E:B7:61:56:17:6E:19
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 019F935B6AAE4FE76D2A67AB37EFFC93FC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 09:01:09 +0000
Manifest this update: Fri 24 Jul 2026 09:01:09 +0000
Manifest next update: Sat 25 Jul 2026 09:01:09 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: Mp03hXn3McpGwJ6tjuwaK7RyadLjjJ2KYBTxZOK6oUs=)
2: YSeuOeWuZUY_t1RtpNnLgaYcHKo.roa (hash: 86n5S/89fNS49XbObPsA8M3FMkv6i+ghW86eiSBggk8=)
3: z536l42qQAP8Gdjmep11Hv-GUjU.roa (hash: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:6a:ae:4f:e7:6d:2a:67:ab:37:ef:fc:93:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Jul 24 09:01:09 2026 GMT
Not After : Jul 25 09:01:09 2026 GMT
Subject: CN=4f4bf44c2879cccc357e12e7c35eb76156176e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:5c:74:d4:a3:ad:6b:c5:9e:fa:1a:9e:2a:
98:6a:8b:45:12:d4:56:fb:8b:d1:dc:a5:16:e8:2e:
ad:1a:6c:90:eb:80:e2:b4:7f:a0:28:a6:c6:9d:22:
42:30:04:6b:6f:98:5a:c6:cd:bd:6a:32:4b:96:50:
a7:d3:ad:c8:19:ee:f5:37:18:da:28:91:e9:f8:96:
42:8e:25:e2:a1:ab:40:e2:57:eb:d1:9b:bf:fe:63:
81:9a:6c:84:0f:71:0d:ec:42:64:cd:7f:ba:96:be:
75:74:58:2b:e4:7e:19:f2:f4:e8:39:78:3b:8f:27:
88:8f:15:b3:d3:c2:10:42:35:9a:93:72:c3:bb:37:
cd:07:43:bf:d1:d6:5e:29:26:ad:25:84:b4:34:2c:
07:dc:a0:5a:67:8f:b6:b3:d4:41:03:90:16:c9:d7:
12:f7:12:38:ca:7e:9c:88:6c:f6:be:c4:30:9c:e6:
21:80:03:79:7f:f9:1c:be:49:dc:b9:33:eb:fa:bd:
8d:75:e9:54:a5:a6:66:37:21:60:da:b2:cb:06:eb:
7a:d8:0d:8c:b6:b3:de:b0:32:39:4c:69:ef:23:8a:
73:ea:e4:5c:4a:7d:9b:67:46:86:92:38:44:c4:5e:
c2:37:fa:8f:4d:77:25:74:74:ec:01:44:5c:81:91:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:F4:4C:28:79:CC:CC:35:7E:12:E7:C3:5E:B7:61:56:17:6E:19
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:43:3e:78:5c:b3:6b:85:7e:9e:f5:0a:83:6f:16:4d:aa:
63:33:b8:1e:47:4d:1b:9f:d8:1a:d0:88:dd:2a:4a:5a:a4:d5:
9b:e1:e2:b1:50:bb:81:1a:cb:83:26:94:43:b3:1d:f1:1c:ad:
aa:1d:9c:8c:67:19:4c:b2:90:b8:91:a4:41:e8:1e:e9:44:37:
c7:11:20:a4:97:4e:8e:9c:8e:a2:01:e4:74:ca:19:96:d7:89:
7e:33:64:f6:c6:66:aa:ef:c3:53:2b:f4:ed:82:87:5b:bd:02:
7d:ba:e5:1e:62:be:35:d3:6d:53:74:4d:84:7e:11:2b:b7:5f:
5e:e9:b0:ec:12:b3:a6:a8:c3:ea:bb:68:e4:64:39:43:d0:74:
63:88:f3:2c:ce:8c:58:74:05:7f:60:66:84:9f:32:27:e5:95:
20:3f:52:2b:5c:33:ef:70:4f:8b:10:5f:18:0d:17:7e:1a:8b:
e1:bc:d9:b7:d4:0c:ff:53:76:49:d9:fe:7b:b3:74:b6:32:44:
06:ee:07:3b:32:6e:d4:dd:f0:bd:06:59:34:f6:47:9a:b9:04:
07:62:65:12:97:f7:20:37:9f:1b:bf:27:43:2e:48:87:00:75:
22:01:a7:ff:72:c6:97:ee:72:d9:bb:9f:d7:53:cd:7d:d5:8f:
55:1a:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:33 2026 by rpki-client