Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: kP0qKV/63WQADJQaEoVX5mA9d0R+jpTb4LgRZQRmG2w=
Subject key identifier: 5C:8C:07:C9:62:51:2F:A3:1D:C5:69:4A:92:40:38:3A:7E:78:C0:1A
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01A0D3157D59A5F5B43CDB090F050C8A2CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 11:03:15 +0000
Manifest this update: Thu 24 Sep 2026 11:03:15 +0000
Manifest next update: Fri 25 Sep 2026 11:03:15 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: JRKL9bYnkwp4hMVHSJgZ3qVI+q3utqUPmYcy2adu4wY=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:7d:59:a5:f5:b4:3c:db:09:0f:05:0c:8a:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Sep 24 11:03:15 2026 GMT
Not After : Sep 25 11:03:15 2026 GMT
Subject: CN=5c8c07c962512fa31dc5694a9240383a7e78c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:22:aa:45:93:f8:f3:92:ef:a3:ae:38:a3:
6e:e3:4f:09:b0:20:0c:fc:e8:a2:29:22:66:88:a6:
db:dd:6c:cb:d3:cd:3d:da:72:7d:76:0d:c5:32:6f:
ef:20:a9:3b:56:db:d5:e8:dc:f8:67:dd:41:3c:15:
cc:46:e8:9c:27:02:3c:3c:4c:7b:68:70:0e:70:3b:
eb:5d:f4:87:c3:1d:2c:57:ee:0d:98:3a:f1:5e:59:
e1:75:44:54:ae:a8:de:c7:a7:47:fb:9c:36:fa:46:
dc:78:a9:58:51:fe:50:4f:63:d5:ad:f5:ff:7a:9c:
55:44:2d:2f:a5:c5:ce:9a:c1:0a:a0:a4:7a:0c:9b:
06:52:3a:e2:5e:f9:d0:09:ac:11:98:9a:69:4a:b2:
b9:78:22:63:b9:18:2e:25:2e:32:3f:12:63:65:fd:
96:fd:0a:40:c1:9f:2a:76:cc:e6:5c:6c:56:80:0d:
59:b3:79:c8:c2:fb:b7:fb:51:da:d6:ce:3e:14:3a:
66:0a:5a:e9:2f:70:e0:2b:aa:93:bf:f2:d3:31:31:
7c:6c:88:4e:6f:80:f7:f2:25:95:6c:8e:ab:80:88:
39:f4:ec:5f:db:34:12:02:6b:69:8f:7f:37:f6:12:
10:49:30:30:4b:a3:fc:0a:e1:5c:94:be:7f:7c:07:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:07:C9:62:51:2F:A3:1D:C5:69:4A:92:40:38:3A:7E:78:C0:1A
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:2e:31:9c:6b:7e:5b:40:ee:50:dd:cf:3a:54:99:d9:c3:
fb:43:e7:15:35:34:10:81:dc:08:12:ca:70:e4:2f:bf:10:f7:
de:5b:35:b9:40:67:a9:e3:3b:29:83:ae:b7:65:31:ad:bc:48:
59:1e:7f:ef:4a:72:b8:e7:2c:fe:3b:ea:c7:08:ab:eb:20:5c:
97:d5:fe:65:c1:b4:16:ad:44:93:35:a0:d0:d5:3f:aa:5e:b6:
d1:eb:a7:f9:7e:a7:65:34:ed:9e:88:f4:84:99:03:36:bd:88:
6c:11:b9:d7:0d:10:5b:0e:16:08:3c:19:27:c8:c0:95:63:02:
6d:31:16:6d:68:31:16:8d:bc:f1:6f:6a:d9:c1:15:c7:c0:5d:
09:21:df:3d:0d:90:67:27:7c:04:8f:22:93:a8:e0:4c:13:b5:
06:97:52:9a:7d:17:38:01:e1:21:d4:c1:94:e3:24:c4:71:a5:
47:0c:dc:2f:5e:77:6c:2e:25:89:47:f1:41:40:01:90:15:ae:
c2:2b:63:02:f3:c6:de:64:dc:ef:eb:fd:ba:35:e1:2f:df:40:
8b:c6:25:b1:7a:d4:f4:75:67:8c:f2:98:b2:71:3e:e3:16:30:
43:e7:71:3e:f2:17:f8:1a:f9:e0:33:89:d2:4e:05:4c:ae:5d:
b6:c4:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:00:49 2026 by rpki-client