Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
File: F7at8lfaaiQB-03PWQyGEzXhG6k.mft (raw, json)
Hash identifier: HD7FYqOV+YvuL995OWWSpwfN+Z/sRGFBqwgcnMjQugs=
Subject key identifier: 63:0E:E3:B0:76:8C:3A:00:D8:02:AE:B8:E9:70:FA:5C:B0:E4:D6:29
Authority key identifier: 17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
Certificate issuer: /CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Certificate serial: 01A0D9F20C8EF4BF2DB787B9B5EDEFE9A0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
Manifest number: 8E
Signing time: Fri 25 Sep 2026 19:01:53 +0000
Manifest this update: Fri 25 Sep 2026 19:01:53 +0000
Manifest next update: Sat 26 Sep 2026 19:01:53 +0000
Files and hashes: 1: F7at8lfaaiQB-03PWQyGEzXhG6k.crl (hash: CHN9ohLhwY7KVHuPXB+Q+CxNMzF5u6a/PnP0hmLqAp0=)
2: oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa (hash: oHv5deIjQma6Gl5w1Se22IPZwIZIKsTeB9zGvO4i+J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:0c:8e:f4:bf:2d:b7:87:b9:b5:ed:ef:e9:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Validity
Not Before: Sep 25 19:01:53 2026 GMT
Not After : Sep 26 19:01:53 2026 GMT
Subject: CN=630ee3b0768c3a00d802aeb8e970fa5cb0e4d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:51:e7:10:cf:d8:6b:57:e2:d1:5d:29:13:
7c:17:a0:e6:b3:f0:4b:d1:f7:0b:94:6b:30:9a:f4:
12:36:a6:dc:86:36:5c:b4:c6:2b:26:73:be:c6:55:
6f:b5:0b:3b:a2:c9:d9:ba:f3:08:d5:7a:2f:73:b7:
fd:ff:ac:06:6a:1c:54:03:23:ed:a8:74:7d:e6:71:
6f:26:f9:05:fd:d2:b7:bf:86:e6:e7:47:fc:de:da:
af:bd:4b:0e:cb:c4:28:12:a2:d2:67:3d:0c:5b:1c:
64:a3:5e:44:26:5a:ac:c2:a8:c3:22:fc:83:d0:da:
7c:b5:02:5c:b6:6a:31:a5:d3:93:72:25:4b:63:95:
ff:80:6b:32:ba:c0:c8:be:98:26:58:48:c0:bf:2b:
e7:ed:28:ff:ff:93:db:28:be:00:7b:82:bf:15:74:
af:a9:46:8c:9c:32:d6:9b:4d:dc:21:d1:89:92:80:
1f:05:7a:33:67:11:a5:0f:37:9e:cb:98:bb:27:06:
9c:f0:07:d7:80:e7:93:4c:96:8a:94:f7:e4:6e:90:
8a:b6:7f:12:51:c7:1b:b5:ff:09:e2:a6:08:04:a2:
0e:77:4d:0d:f5:b7:aa:96:a9:56:9f:47:c2:df:ac:
d8:7a:88:cf:de:38:9c:64:5b:6d:e8:5a:ca:ac:a0:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:E3:B0:76:8C:3A:00:D8:02:AE:B8:E9:70:FA:5C:B0:E4:D6:29
X509v3 Authority Key Identifier:
keyid:17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:74:b0:df:24:87:cc:d6:79:4c:a5:1c:06:6b:fa:e0:b9:2d:
7c:aa:e2:2b:9c:b7:14:55:de:d6:60:5f:a2:24:81:a8:8f:a3:
92:4b:2d:6d:16:ff:41:7b:40:d6:96:39:56:5c:a2:d4:d1:75:
84:9c:f0:8b:8c:73:7f:c9:10:d3:00:c9:7b:f8:8e:43:a0:c5:
03:16:ea:4e:58:aa:2a:d8:6c:c9:21:7d:c1:3c:5b:ed:25:b8:
a8:d5:05:db:0d:43:eb:0e:13:ac:d2:7b:6b:cf:8d:48:7a:0b:
41:60:4e:bb:f1:e1:e5:e4:cb:9d:db:ba:61:b9:e3:62:ed:81:
53:f5:0b:b9:ba:f1:33:6f:a6:75:4c:55:8c:22:6e:ab:c4:e1:
d2:7a:b1:78:b3:b5:9c:02:25:76:1c:70:ed:e8:92:2a:39:64:
ae:c7:67:dd:62:f9:db:0e:4b:a3:fc:18:d3:46:ac:d8:0c:6b:
50:c3:67:f6:94:c9:cb:df:fb:93:7f:15:51:8b:8e:4d:48:6b:
f0:11:ba:cd:47:49:ff:57:6b:d6:7a:d2:66:1c:ea:69:81:a1:
54:a1:98:8e:d0:2f:5a:03:53:c9:22:1a:e1:66:3b:70:9f:10:
0e:35:78:18:64:ee:69:1b:a9:da:a3:e9:f6:b2:1b:d6:db:c4:
9f:b7:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:06 2026 by rpki-client