Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: SYOFNuMSNHRwMOyHF/DrISd5jbxNRMUbZ4D4Ve3O4J4=
Subject key identifier: 8F:DB:FB:E7:5C:32:32:DB:78:5C:7A:A9:4D:C3:8C:59:56:5E:4B:5D
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019F940025323B8F891EA6BC0D3898762786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 150D
Signing time: Fri 24 Jul 2026 12:01:05 +0000
Manifest this update: Fri 24 Jul 2026 12:01:05 +0000
Manifest next update: Sat 25 Jul 2026 12:01:05 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: vt2fPDoOFaRUYLJNAH76c0UYvpoyKFkJG0CHfDoIK/0=)
2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:25:32:3b:8f:89:1e:a6:bc:0d:38:98:76:27:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jul 24 12:01:05 2026 GMT
Not After : Jul 25 12:01:05 2026 GMT
Subject: CN=8fdbfbe75c3232db785c7aa94dc38c59565e4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:e9:51:70:f5:f1:7a:bc:a6:2a:57:bc:04:
00:f6:52:ea:9f:3a:f2:08:b5:54:44:2b:a7:51:2a:
dc:ac:6f:a4:f2:c6:83:33:d3:64:a1:23:b0:26:bd:
88:35:a6:da:8e:8a:c0:8e:03:59:01:50:74:b1:fa:
50:a9:6c:31:d5:27:a3:cc:b4:89:4b:53:e8:ed:b2:
0b:88:a2:b6:13:bb:05:98:d5:22:1c:08:53:f7:25:
61:1e:35:46:7d:83:39:97:86:7c:c3:7a:4e:65:ee:
ff:e3:b7:bd:42:cc:a1:32:e9:94:9a:fa:da:a3:94:
28:82:32:2a:3f:4b:a8:05:b4:ef:e1:8c:55:0b:21:
c5:23:35:b5:90:41:bc:6c:86:48:29:c5:19:86:c5:
ba:56:1a:5b:c8:8c:8e:59:74:d4:be:02:5f:07:a6:
9a:d8:16:96:26:a8:80:1a:25:f0:56:76:78:5b:45:
58:b3:20:18:67:c3:06:0a:66:0a:53:6e:2c:d9:99:
d4:68:76:2a:fd:68:bd:fb:63:f5:70:ac:9a:c5:46:
e0:a9:92:6c:08:1f:f8:50:82:dd:48:d7:97:4a:e2:
a7:4f:06:55:05:5e:27:95:d7:72:01:57:1d:fb:3d:
c5:51:02:32:98:97:a0:11:c3:f2:77:f9:4b:39:85:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:FB:E7:5C:32:32:DB:78:5C:7A:A9:4D:C3:8C:59:56:5E:4B:5D
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:14:0a:9e:11:4a:31:00:8d:44:9b:44:c9:6c:c1:92:cb:25:
dd:d6:59:d4:22:73:24:b1:45:8c:ec:3e:c2:46:3d:01:50:08:
39:77:42:c4:00:01:36:7f:52:ad:c5:60:b7:ad:38:81:fc:16:
14:c0:f8:6f:7f:fa:65:21:ca:c0:2b:7d:eb:3e:ac:61:30:9b:
23:74:c6:07:75:9c:17:2f:98:52:bf:e4:e6:60:3d:62:cd:0e:
69:37:a1:26:c8:3d:ae:01:fb:56:05:5b:fd:7f:30:ce:68:cd:
ef:23:5b:e1:4d:f5:36:2c:4e:43:5d:77:96:4d:2c:24:b7:44:
76:17:c8:6e:9a:4b:d8:44:76:5b:47:7d:d1:b3:51:f9:09:42:
31:51:1c:a1:50:18:02:8a:c1:f8:30:46:b3:ba:87:01:7e:fe:
f7:1d:c5:40:e7:c7:6e:93:4e:0a:41:e1:b0:92:69:68:81:54:
66:2b:b9:25:ad:10:34:2c:cf:37:4d:ea:37:c6:04:a1:91:8e:
5c:4b:b7:20:a2:b0:c2:1d:16:3d:21:c4:81:07:a9:d6:83:39:
26:df:7a:ce:fb:fe:67:72:7b:aa:66:d9:36:6a:2e:9c:5d:ba:
9e:aa:cf:e9:41:2f:24:14:b6:3f:a8:19:0a:b0:4b:33:21:35:
fb:16:7c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACUyO4+JHqa8DTiYdieGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjYwNzI0MTIwMTA1WhcNMjYwNzI1MTIwMTA1WjAzMTEwLwYDVQQD
Eyg4ZmRiZmJlNzVjMzIzMmRiNzg1YzdhYTk0ZGMzOGM1OTU2NWU0YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvpUXD18Xq8pipXvAQA9lLqnzry
CLVURCunUSrcrG+k8saDM9NkoSOwJr2INabajorAjgNZAVB0sfpQqWwx1SejzLSJ
S1Po7bILiKK2E7sFmNUiHAhT9yVhHjVGfYM5l4Z8w3pOZe7/47e9QsyhMumUmvra
o5QogjIqP0uoBbTv4YxVCyHFIzW1kEG8bIZIKcUZhsW6VhpbyIyOWXTUvgJfB6aa
2BaWJqiAGiXwVnZ4W0VYsyAYZ8MGCmYKU24s2ZnUaHYq/Wi9+2P1cKyaxUbgqZJs
CB/4UILdSNeXSuKnTwZVBV4nlddyAVcd+z3FUQIymJegEcPyd/lLOYWwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/b++dcMjLbeFx6qU3DjFlWXktdMB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRQKnhFK
MQCNRJtEyWzBkssl3dZZ1CJzJLFFjOw+wkY9AVAIOXdCxAABNn9SrcVgt604gfwW
FMD4b3/6ZSHKwCt96z6sYTCbI3TGB3WcFy+YUr/k5mA9Ys0OaTehJsg9rgH7VgVb
/X8wzmjN7yNb4U31NixOQ113lk0sJLdEdhfIbppL2ER2W0d90bNR+QlCMVEcoVAY
AorB+DBGs7qHAX7+9x3FQOfHbpNOCkHhsJJpaIFUZiu5Ja0QNCzPN03qN8YEoZGO
XEu3IKKwwh0WPSHEgQep1oM5Jt96zvv+Z3J7qmbZNmounF26nqrP6UEvJBS2P6gZ
CrBLMyE1+xZ8Tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:58 2026 by rpki-client