Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File: fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier: zlvcoQMdxguJjZPjH5UBo9ysgKciQoIAE+PUNnXUWOw=
Subject key identifier: 9D:FC:4E:C2:D8:8B:46:8B:BB:30:09:6B:C3:D3:BB:5D:9C:EB:34:E8
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer: /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial: 01A1DCB91EF9E9E93AC67B74CD7D41771EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number: 0234
Signing time: Sun 15 Nov 2026 01:01:21 +0000
Manifest this update: Sun 15 Nov 2026 01:01:21 +0000
Manifest next update: Mon 16 Nov 2026 01:01:21 +0000
Files and hashes: 1: bB7b0qKFspzM00LEZ1JnjwXUGJo.roa (hash: OC6geuiyVlRdxVZOx9KwhNP3eevoBdiT9wkY47QWqLI=)
2: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: Qy+/gtMSbzRru9HsEPl31oPMvjSwDsEAtRPM+jWpHCw=)
3: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:1e:f9:e9:e9:3a:c6:7b:74:cd:7d:41:77:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Validity
Not Before: Nov 15 01:01:21 2026 GMT
Not After : Nov 16 01:01:21 2026 GMT
Subject: CN=9dfc4ec2d88b468bbb30096bc3d3bb5d9ceb34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:97:f7:b9:ee:60:41:62:9b:7a:82:21:51:
dc:5d:40:89:fe:32:87:90:0f:a5:b2:0c:d9:07:b7:
3e:76:16:4a:ad:72:d9:62:f0:66:19:8e:93:2c:a3:
2c:1b:83:45:da:90:d4:ab:2b:b5:18:a1:47:eb:37:
42:07:d6:4d:f2:33:37:02:d4:82:92:6c:cf:73:1b:
ba:4a:5b:6b:db:a6:c2:9f:75:39:86:43:97:70:30:
ae:68:80:60:18:09:07:62:37:7d:98:20:33:58:80:
db:52:3b:07:21:40:2b:1f:e8:d7:8a:25:81:13:93:
7f:c6:86:fa:8c:f1:ba:70:17:cb:b8:3c:4c:00:4c:
38:7c:48:09:a7:e6:8e:b5:5a:12:d0:3d:33:10:cc:
80:26:e7:4d:28:5f:b2:73:f1:fc:c3:ef:b7:ee:42:
72:83:50:a6:3b:5d:0e:c9:33:52:7c:4c:8b:b1:b7:
ab:15:99:5a:ca:4d:05:b3:98:d5:6b:51:95:58:47:
38:64:24:1e:4d:28:e9:50:f3:6d:d7:cb:30:7b:49:
16:b5:06:68:b6:82:70:90:d2:83:e9:f1:85:09:a9:
dd:44:bd:86:ab:85:c3:36:df:ba:54:fc:f1:0f:27:
da:e2:86:c0:6b:33:4e:9b:8a:48:67:f6:e9:95:a1:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:4E:C2:D8:8B:46:8B:BB:30:09:6B:C3:D3:BB:5D:9C:EB:34:E8
X509v3 Authority Key Identifier:
keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:0d:4f:e0:59:97:ba:3c:6e:5d:dc:d8:f4:d0:3b:98:69:
c8:53:9a:8c:17:ed:b0:63:61:54:be:c4:c1:0f:21:83:3f:fb:
34:8f:d2:35:c5:49:9b:0d:ea:cf:33:99:3f:09:34:6c:6f:f2:
73:f0:87:81:f3:08:36:80:de:3d:ab:98:f7:e6:e9:c6:18:22:
ff:d4:c1:1f:8a:9d:bc:40:ef:1e:2e:2d:af:95:5e:b2:f9:f6:
cf:db:fc:7b:7d:3f:58:80:41:85:0a:6e:e7:5d:a5:eb:8e:07:
c2:5c:d7:06:76:25:84:38:fb:fb:a9:de:21:fd:53:af:98:3c:
8f:7c:c6:76:e7:3e:c9:4f:4c:d4:f5:0d:ae:b8:80:67:11:83:
da:db:61:09:c5:5a:04:49:64:24:94:c6:62:6d:d2:64:de:fe:
df:1f:5f:f6:50:2b:12:f0:ec:50:27:b7:99:2a:0f:2a:b4:06:
f5:4f:81:ef:18:7e:07:bb:a3:30:55:2d:e2:3e:e9:0a:4a:1e:
fa:c0:24:d5:0f:7d:89:d0:38:5b:7d:ea:1c:2b:ba:53:e7:54:
3c:61:a7:8d:a2:85:63:02:09:20:e4:d6:5b:fa:cd:3c:34:22:
bc:50:43:7d:e3:42:b8:96:7c:d8:b7:62:d5:44:6b:74:d2:63:
0b:45:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:55 2026 by rpki-client