Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: pKz5J74YkMM0IVkvdr1hL2mwfqJb7ow+WhUFySAWfMI=
Subject key identifier: 34:8C:80:9B:68:E5:FC:AE:B8:D8:EE:76:3A:D6:23:16:E8:B8:5D:F6
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019D26280AE8DE96171E52710B57C730C11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 13CB
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 4TOpLdtL8A7OGoVP3L20L5zImc4vfX/CdwtNYugiaM4=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0a:e8:de:96:17:1e:52:71:0b:57:c7:30:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=348c809b68e5fcaeb8d8ee763ad62316e8b85df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:6f:6f:9d:67:9f:60:0d:fc:f2:25:bb:4c:
9b:6f:85:f0:f4:0c:e6:4a:73:de:64:08:a2:c4:52:
fd:6b:ad:2a:95:ff:51:c1:d3:6d:3f:6f:9b:a8:93:
e7:c5:07:5e:8f:f0:da:82:9e:60:cd:58:2b:92:66:
f8:f8:86:5a:09:76:5f:b3:95:2c:0b:5b:c4:70:a1:
43:85:09:c5:7c:03:70:cd:77:a1:13:6f:e7:16:66:
c0:7c:4c:9e:4a:5f:e3:59:d1:ba:f6:89:65:0d:2e:
d9:11:41:3a:55:e7:a8:01:e5:13:2f:9d:92:ef:07:
c9:b7:01:34:13:0e:f6:cb:68:9e:ad:c9:13:de:31:
82:fe:f8:10:e3:09:9b:1c:08:19:3c:d0:14:fc:5a:
6b:b7:41:23:79:0a:1f:e7:4c:fe:75:19:7d:95:99:
8f:25:24:cd:ee:f6:50:8a:28:96:e4:e4:b2:14:ce:
5b:bb:88:c4:dc:c6:79:d8:a1:e6:ca:db:9c:1f:ef:
ec:34:c8:56:83:b1:fc:fd:45:33:90:e1:f9:3b:5f:
d9:5e:be:ae:97:05:c6:78:ff:ac:95:a8:a8:cf:ec:
3e:c3:84:e1:7b:3a:0d:eb:e5:b0:27:89:73:ee:92:
cf:47:19:23:c8:ee:60:87:e8:dd:59:5e:a4:40:78:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:80:9B:68:E5:FC:AE:B8:D8:EE:76:3A:D6:23:16:E8:B8:5D:F6
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:cb:83:ad:79:e2:aa:cb:3d:f6:4f:06:2b:7b:3a:c4:18:8d:
16:e9:b3:95:b5:00:19:b1:74:65:10:30:65:6e:7f:f2:a7:de:
e8:dd:75:f4:e8:95:a2:02:d7:ab:ab:16:d6:90:a2:25:32:09:
22:7b:a3:5d:3f:cf:a8:69:73:a2:32:2e:7a:b5:79:71:2f:a3:
10:28:42:3a:c0:16:02:b4:57:57:bb:e2:56:e7:42:9e:ad:a8:
c9:54:28:72:24:fc:97:1a:fc:d4:b8:0f:ae:bc:c0:71:73:81:
18:c7:9a:33:02:03:e1:8c:8f:42:82:ad:db:b5:f0:68:3e:8f:
e1:5d:fe:c9:f9:5e:88:38:9a:71:88:6e:37:b9:be:f2:51:bc:
e7:ec:15:53:d3:58:4c:af:5e:d9:e8:60:b3:94:ed:49:eb:1e:
a5:0d:16:02:08:4d:92:17:eb:45:83:c4:e0:60:6b:67:46:f2:
83:86:74:64:34:29:49:46:6c:1c:a9:6d:f1:48:d7:27:97:21:
77:7c:f9:67:e1:3f:5b:88:b2:e3:fd:eb:36:8e:90:13:05:cd:
71:1b:ce:8f:71:a7:57:9a:c3:fa:97:4b:66:31:cb:1c:06:67:
0d:2e:af:8d:a3:b9:89:7d:bd:a6:31:67:1f:ca:03:f5:28:e8:
66:f8:f1:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKAro3pYXHlJxC1fHMMEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjYwMzI1MTgwMDUxWhcNMjYwMzI2MTgwMDUxWjAzMTEwLwYDVQQD
EygzNDhjODA5YjY4ZTVmY2FlYjhkOGVlNzYzYWQ2MjMxNmU4Yjg1ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xFvb51nn2AN/PIlu0ybb4Xw9Azm
SnPeZAiixFL9a60qlf9RwdNtP2+bqJPnxQdej/Dagp5gzVgrkmb4+IZaCXZfs5Us
C1vEcKFDhQnFfANwzXehE2/nFmbAfEyeSl/jWdG69ollDS7ZEUE6VeeoAeUTL52S
7wfJtwE0Ew72y2ierckT3jGC/vgQ4wmbHAgZPNAU/Fprt0EjeQof50z+dRl9lZmP
JSTN7vZQiiiW5OSyFM5bu4jE3MZ52KHmytucH+/sNMhWg7H8/UUzkOH5O1/ZXr6u
lwXGeP+slaioz+w+w4ThezoN6+WwJ4lz7pLPRxkjyO5gh+jdWV6kQHh9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSMgJto5fyuuNjudjrWIxbouF32MB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsuDrXni
qss99k8GK3s6xBiNFumzlbUAGbF0ZRAwZW5/8qfe6N119OiVogLXq6sW1pCiJTIJ
InujXT/PqGlzojIuerV5cS+jEChCOsAWArRXV7viVudCnq2oyVQociT8lxr81LgP
rrzAcXOBGMeaMwID4YyPQoKt27XwaD6P4V3+yfleiDiacYhuN7m+8lG85+wVU9NY
TK9e2ehgs5TtSesepQ0WAghNkhfrRYPE4GBrZ0byg4Z0ZDQpSUZsHKlt8UjXJ5ch
d3z5Z+E/W4iy4/3rNo6QEwXNcRvOj3GnV5rD+pdLZjHLHAZnDS6vjaO5iX29pjFn
H8oD9SjoZvjxzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:12 2026 by rpki-client