Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: 2abqSJnYqy3GQSgO7PdoScbDqMGeu1C/CO470F703ys=
Subject key identifier: 2E:0C:28:C2:19:C1:FF:94:84:98:48:36:56:FD:99:09:12:CE:16:41
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01A1DD94B07D3A665C4284B0967C3BEF8A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 05:01:11 +0000
Manifest this update: Sun 15 Nov 2026 05:01:11 +0000
Manifest next update: Mon 16 Nov 2026 05:01:11 +0000
Files and hashes: 1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: Y0iAZ/mzARpB5jxb1aPC31SIAPm3XstptPq5Huu3Dko=)
2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:b0:7d:3a:66:5c:42:84:b0:96:7c:3b:ef:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Nov 15 05:01:11 2026 GMT
Not After : Nov 16 05:01:11 2026 GMT
Subject: CN=2e0c28c219c1ff948498483656fd990912ce1641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:88:c1:40:ec:e5:ca:dc:25:6e:ae:94:c0:
f9:ed:55:95:b1:d0:3d:35:58:4b:45:f1:15:97:0a:
cc:fe:99:46:dd:76:dc:db:1a:a5:01:29:6e:f5:0c:
3c:a4:c0:e3:eb:a2:c2:d7:cb:c1:d8:08:95:d6:88:
09:77:7b:9a:72:38:03:fa:de:38:06:bb:aa:64:6d:
94:a8:d8:2a:78:d3:21:58:ad:b1:e6:69:1e:b7:9c:
b8:26:96:41:58:ad:f5:35:71:da:62:52:1d:4e:55:
90:8f:4c:0c:ed:54:b3:08:06:58:39:54:1d:f2:d5:
2a:a0:da:b3:d9:43:c9:80:ae:8f:46:13:54:8d:6f:
dc:fd:d5:27:d0:f8:a5:77:c5:63:00:e2:45:09:f7:
4d:eb:7e:a3:03:ba:be:4d:b4:24:d8:94:34:a2:78:
9b:7b:3b:e6:f1:a6:78:f7:54:22:7b:1c:63:f4:e4:
36:d8:57:be:dc:fe:f2:74:40:d4:38:a0:91:e2:dd:
f8:3f:3f:dc:db:0e:47:7e:2e:d3:ac:3c:29:66:c1:
15:53:28:0f:9a:52:8c:2f:db:a4:d4:92:9d:a2:32:
17:09:73:c4:9d:62:50:76:38:4d:d1:c6:fa:fa:29:
16:86:7a:32:76:10:93:bc:ec:a9:49:42:d9:15:9d:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:28:C2:19:C1:FF:94:84:98:48:36:56:FD:99:09:12:CE:16:41
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:21:1e:96:d3:9f:71:d3:d2:70:84:e9:88:10:65:0b:c9:
23:76:33:ab:3d:f9:26:09:5f:17:92:ad:0c:cc:18:fe:f4:97:
01:71:cc:b3:b6:8a:03:69:e0:b3:50:0b:47:01:fc:48:b6:d0:
86:a0:d4:ec:b0:79:18:f9:4e:ae:a4:ad:f7:60:a0:a6:40:2c:
c6:13:37:3b:95:d0:f3:81:0a:a0:61:ed:6d:f7:95:71:56:e8:
99:87:fc:4b:b0:5a:22:6d:06:07:01:44:ec:a4:d5:a1:de:40:
69:be:09:35:e4:7f:dc:7e:38:08:36:bc:57:c7:ba:88:8e:04:
a0:8f:d4:b3:41:0c:b7:27:8d:a8:a6:60:1d:6f:72:0f:75:c8:
01:a9:8f:05:1f:63:cd:a4:9e:45:b4:4f:7b:f5:f9:ce:12:dc:
b4:24:6a:a1:d1:96:09:6c:4d:3a:93:f0:23:60:7c:19:44:d2:
ce:71:5c:7c:46:fe:1c:94:75:ce:bb:a4:b8:be:00:ba:a4:5c:
4f:c4:48:dd:c7:eb:67:69:e8:00:08:0e:a0:2d:20:bb:70:ae:
13:61:c8:7c:26:46:70:a5:ca:4d:4c:ab:a3:31:3a:07:77:f2:
f4:b4:21:dd:ea:7c:ea:34:a5:e3:ea:52:60:94:7c:82:90:da:
43:3d:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:58:29 2026 by rpki-client