Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: UwAuHtSW7gmr5htXVuKho43IQvHeBoQ7P87ZvqOvtjU=
Subject key identifier: DD:5E:97:5F:F6:29:CD:86:77:5D:99:6D:92:78:46:C9:9C:4C:84:A7
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019D2695EDD6B271D29DE23F25C2FD1C7C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: Nw7X9kl4JPT6Ta8QSgQEaKdNUIWa3aDEgtxkCj+OJBU=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ed:d6:b2:71:d2:9d:e2:3f:25:c2:fd:1c:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=dd5e975ff629cd86775d996d927846c99c4c84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:11:ba:b2:77:12:f4:a1:fa:68:7c:ad:f6:
28:4b:c6:b3:48:43:b1:4b:ee:de:b5:9e:38:32:2c:
e3:c4:35:82:2f:0a:13:30:ca:40:e9:f6:90:0d:c0:
b9:83:0b:de:85:7a:e4:1a:3b:05:12:99:34:f3:a7:
5b:53:c9:2d:11:6f:2e:a1:58:4a:08:07:15:ea:0a:
47:1d:ef:90:89:4b:7f:0b:e5:98:18:d7:92:9f:ad:
28:b8:ef:46:27:22:52:00:6a:87:fc:0e:89:e6:ed:
ab:c6:b8:d4:5d:b5:98:79:b9:ad:b9:d2:bf:9a:ad:
99:fd:9e:cd:bc:16:9f:07:d0:92:04:91:cf:fe:d1:
c0:3a:1a:78:d7:55:65:5e:8e:2f:5c:c4:e0:da:29:
8b:ed:b7:56:57:9a:db:c0:de:77:e0:37:b3:11:ae:
86:b8:cf:33:ad:4e:7a:8c:86:dd:fb:0c:3d:36:a4:
8a:1a:3d:d5:38:b3:77:85:ce:53:11:db:5e:93:71:
e8:12:42:67:dc:92:10:fc:18:41:0e:22:91:f5:1a:
f3:50:76:e9:c3:fd:d0:c8:50:e5:29:02:1b:85:2b:
93:f9:88:04:dc:81:87:61:c7:c2:4d:68:78:d3:0c:
38:24:a8:fc:82:e7:b3:8d:ca:4b:32:e9:27:ec:49:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:97:5F:F6:29:CD:86:77:5D:99:6D:92:78:46:C9:9C:4C:84:A7
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:c1:56:49:af:37:b1:b6:f6:c8:d0:bc:e3:5f:72:4f:8a:
38:f5:0e:ab:e2:6b:70:c9:13:be:67:6a:72:95:c0:c1:c9:bd:
69:8b:18:94:b9:5a:34:ef:34:e3:80:d3:bd:3d:c5:43:2a:1c:
bb:7a:3b:ab:14:8e:68:e4:cb:40:f0:10:f1:57:d4:64:f6:9b:
07:da:5e:60:f5:4c:96:c0:11:d1:26:b9:2d:ae:20:66:65:df:
6e:f4:49:ad:9b:02:58:fa:06:b7:2a:f6:8b:26:e1:38:c5:4b:
51:37:29:a6:40:6e:8a:a0:22:01:c3:32:6a:89:b7:58:30:81:
1d:ab:ef:54:3c:9a:03:b1:fc:39:c3:e9:05:f6:a3:15:e6:0e:
4c:74:66:5a:4a:85:92:eb:e9:1c:08:2c:56:00:6e:ed:81:9e:
99:f0:17:da:74:4d:75:d4:f7:30:93:ce:da:09:64:54:80:dd:
9a:7a:7c:0d:70:c9:7e:c8:bd:9d:64:f0:10:e8:00:e5:f7:3b:
a4:01:0c:d0:d2:48:c4:49:76:53:32:c2:cf:d6:23:85:4e:a2:
d5:f9:77:8b:37:1c:b4:bf:6c:72:5e:08:cb:30:c7:55:e4:6e:
bd:d3:0d:ea:b4:10:89:88:2a:31:02:40:2d:e9:fa:12:64:94:
f2:3d:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:54 2026 by rpki-client