Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: yG77hlEJYr2C/BSubRUXqzUok6db7rOrW+Id3UDFrv0=
Subject key identifier: 40:57:C9:18:FF:A5:A7:A5:D2:34:62:34:D1:FF:2B:C3:6F:0C:1A:A3
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 01A0DE05315436D1134665A4FCEC21F5F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0AFF
Signing time: Sat 26 Sep 2026 14:01:17 +0000
Manifest this update: Sat 26 Sep 2026 14:01:17 +0000
Manifest next update: Sun 27 Sep 2026 14:01:17 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: 9JLGl/c93BXdWXmWqHNTyHUIM/1vVA9SQaOWZdNS/UY=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:31:54:36:d1:13:46:65:a4:fc:ec:21:f5:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Sep 26 14:01:17 2026 GMT
Not After : Sep 27 14:01:17 2026 GMT
Subject: CN=4057c918ffa5a7a5d2346234d1ff2bc36f0c1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bd:19:d8:4b:0d:c9:a8:6f:e8:1c:75:2a:3a:
ef:c9:d6:c5:77:49:33:a7:01:23:b9:92:bb:2b:e4:
f8:1f:2a:9f:59:83:3b:cb:04:e2:48:c0:fa:01:1c:
a8:95:eb:88:f1:0d:b2:85:0f:5d:74:d8:14:df:52:
44:3e:82:da:0b:4e:47:79:f5:7d:28:df:ad:e9:13:
8a:50:b7:81:d2:b9:a6:42:22:40:e7:09:9b:a2:78:
81:47:c4:b1:2e:d2:4e:92:4d:87:8f:b4:9c:67:53:
82:29:5b:8f:4d:d9:f0:db:e3:4a:a1:12:5c:03:6e:
ab:c7:34:9a:a3:28:2c:ec:3c:4a:af:b0:6f:e8:7a:
79:d9:74:a9:cb:c6:91:4c:7a:fe:79:f8:c9:8d:be:
41:eb:99:0f:b7:36:d1:54:69:c5:14:17:91:6b:34:
aa:1a:af:de:ee:04:22:3e:75:ed:d7:81:43:bd:d7:
36:0b:1a:cd:75:f4:6c:76:c9:1d:25:3d:aa:f4:95:
11:77:34:46:ea:7f:d1:83:a1:ec:23:8b:c6:22:49:
8c:e4:39:b9:0d:37:52:77:72:60:0d:42:eb:6c:cb:
72:5a:0b:2f:56:56:8c:83:52:36:d1:5f:69:04:de:
d4:aa:6b:23:0b:65:e8:bb:bf:83:a8:12:e4:bc:04:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:C9:18:FF:A5:A7:A5:D2:34:62:34:D1:FF:2B:C3:6F:0C:1A:A3
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:22:0f:38:2f:6e:45:0e:fe:f1:c4:8d:b5:66:4d:2d:b2:40:
9c:ed:e2:51:ab:aa:ca:ef:af:82:e5:b1:9e:b3:d3:6d:9f:d7:
05:4c:69:3d:7b:96:23:24:ad:50:06:18:b2:a1:79:3f:97:88:
9e:60:c1:64:a6:39:d5:12:55:a4:6f:14:75:7e:ec:98:db:83:
ce:3d:ee:59:01:05:c6:ad:4b:9f:0a:33:fe:91:42:ab:f9:40:
94:37:d5:9c:ad:b4:3b:df:1a:3e:84:7c:1b:c4:b4:67:a9:8d:
8a:10:dc:8d:1d:fd:30:dc:e8:93:9a:b2:c7:68:00:2a:60:e1:
59:51:fd:e8:22:bf:ca:6f:06:7c:77:21:ce:7a:cc:de:0e:ec:
9b:10:b4:51:10:f5:9f:4d:99:28:4c:8f:9c:86:e4:ee:f8:76:
2e:59:2c:ad:9b:21:06:ca:b8:eb:55:e5:62:0a:d4:97:70:29:
de:57:28:cb:3d:63:12:0f:bd:c4:6d:c4:5f:d9:7f:eb:0d:5a:
4a:21:2a:c0:98:41:e4:9c:42:dd:b7:47:93:31:52:89:e9:b4:
af:e3:46:76:ff:61:8a:ba:85:8c:3d:73:87:e2:8d:e2:25:85:
43:6c:92:19:d4:a2:32:20:47:f1:9b:23:1f:b5:e4:45:8e:5b:
b8:a7:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:15 2026 by rpki-client