Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
File: FvLalTudPdkr-T3cMtdfCQwhaIo.mft (raw, json)
Hash identifier: QhWXew3+JYnSgxuOW7YlM8W9AUnCGq2oKvU/Hoz6RvY=
Subject key identifier: 70:6D:9D:63:2F:BD:54:F2:E2:88:E5:62:D6:12:FE:F9:DD:2A:5E:FB
Authority key identifier: 16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
Certificate issuer: /CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Certificate serial: 01A1DD26EF343D57381172F3FA9EFE2AD7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
Manifest number: 0125
Signing time: Sun 15 Nov 2026 03:01:18 +0000
Manifest this update: Sun 15 Nov 2026 03:01:18 +0000
Manifest next update: Mon 16 Nov 2026 03:01:18 +0000
Files and hashes: 1: 6rA0LXSt08NUBPhJSG_oai4J-rE.roa (hash: nmJl/0XmzX7COjsp7I0rKKF/K7SYrnKOPs6qkB2yoYU=)
2: FvLalTudPdkr-T3cMtdfCQwhaIo.crl (hash: WbPlNTEgmMH+KD9+3urExkjVmPmORwbaIDI2JndHWQo=)
3: RC3--Hcw_IOSFI6xiZXMXEMoNBQ.asa (hash: 6mRFB0hXcHAqMvJBc2+rVMKvQtECIGL/qmwG4xUT+70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:ef:34:3d:57:38:11:72:f3:fa:9e:fe:2a:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Validity
Not Before: Nov 15 03:01:18 2026 GMT
Not After : Nov 16 03:01:18 2026 GMT
Subject: CN=706d9d632fbd54f2e288e562d612fef9dd2a5efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:a8:a2:bc:0a:53:01:b8:1b:66:69:57:cf:
64:6e:81:8a:09:b6:33:4f:5a:ab:ba:ba:ab:94:23:
07:f5:c0:38:9f:13:e4:ba:61:b8:15:98:9b:8a:2e:
c9:bf:ef:68:e0:07:bf:f3:d0:c7:3d:99:5a:eb:b5:
f0:74:5d:0a:27:53:3f:cd:9b:7f:25:7e:59:42:1c:
a0:0f:a4:dc:4d:87:a5:4a:f9:79:1d:8c:2c:bf:f6:
64:e0:d8:ec:8d:3a:49:6e:d8:97:3e:28:24:84:73:
ce:de:9e:14:77:01:0f:83:13:fd:f7:89:51:e6:56:
5d:61:60:f5:55:72:ec:b3:f2:81:ef:2c:9c:c7:12:
a8:55:21:92:6b:16:e3:cb:bf:dd:f9:2e:85:9b:84:
02:4d:79:9b:e0:d2:f8:27:86:51:5c:f5:91:d6:cc:
0b:d8:02:9f:92:92:1a:55:d2:54:cd:1c:e5:21:83:
99:9c:0e:db:14:ae:d9:73:8c:ff:01:f0:ca:ae:b0:
e3:cd:0b:4a:e4:13:23:7d:26:89:1b:bf:62:b5:2c:
38:3f:3d:df:c9:59:86:12:ad:9a:4d:0d:9f:72:2b:
de:0e:58:b0:df:d7:05:5f:56:63:f6:f0:2f:3c:4e:
5e:f9:8d:62:69:a5:8f:59:4c:78:14:d2:39:9e:78:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:9D:63:2F:BD:54:F2:E2:88:E5:62:D6:12:FE:F9:DD:2A:5E:FB
X509v3 Authority Key Identifier:
keyid:16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7c:b5:9c:19:bf:b0:2a:ab:1d:e4:f5:29:0a:1c:1a:50:97:
c2:79:6d:7d:cb:69:96:18:66:5c:99:99:4a:8f:72:83:dc:19:
e9:11:d4:42:b3:16:ea:87:09:dc:cc:e9:1a:51:5d:50:dd:b3:
21:67:ed:7d:d7:8a:3d:ea:e7:62:24:75:45:df:9b:d0:a5:34:
17:4f:c2:10:a6:94:98:87:74:0c:ec:6c:60:da:65:49:89:96:
b1:b0:62:f5:0e:79:48:5f:0d:5c:61:bd:4c:1a:4e:ee:05:5c:
09:47:55:5a:9d:96:6b:7c:7c:63:5d:34:08:6f:a3:6d:00:b2:
60:9d:e2:9b:79:92:df:94:5c:63:b3:38:b4:76:8c:0e:a3:a5:
46:bd:42:be:62:70:3e:0f:a1:ad:90:ac:86:a1:ff:4e:89:fc:
86:30:ed:e7:f4:b4:1b:81:2d:10:3a:73:ca:a9:e3:53:ff:f3:
b4:40:72:81:07:f6:db:13:c1:0a:44:86:c9:20:57:50:8a:3c:
0f:f1:61:47:d3:8f:92:3e:e9:7b:a8:ab:17:6e:2a:39:5a:2e:
2d:5e:10:10:aa:90:e9:c6:1a:b8:db:eb:4e:db:b2:f4:29:c9:
c0:e4:9b:2b:aa:af:9d:8c:dc:f0:8b:dc:58:ac:af:1a:e6:d9:
49:93:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:20:13 2026 by rpki-client