Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: oIDs6VhoiEjH7tEq8LjbvQJg8B5r/1D2o+rX4guViNM=
Subject key identifier: 8B:52:44:78:D2:59:A6:3F:3B:49:7A:5A:EC:DC:B4:55:54:7D:0D:B9
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 01A0DB3B1EB6D9708728F64FAD103D40E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 058B
Signing time: Sat 26 Sep 2026 01:01:19 +0000
Manifest this update: Sat 26 Sep 2026 01:01:19 +0000
Manifest next update: Sun 27 Sep 2026 01:01:19 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 74/KZ4A4Z+kZ+bowYcMt5AE9NR1nG55fzHYM+7abeDo=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:1e:b6:d9:70:87:28:f6:4f:ad:10:3d:40:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Sep 26 01:01:19 2026 GMT
Not After : Sep 27 01:01:19 2026 GMT
Subject: CN=8b524478d259a63f3b497a5aecdcb455547d0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:cb:2f:38:03:5b:95:8e:e6:cd:4c:48:f7:
77:cc:84:7b:4b:d5:7c:d6:c9:ef:1c:3f:5d:d7:cc:
0f:a0:2c:e4:0e:b1:a5:c0:6c:e1:c5:f4:33:dc:8f:
a0:b5:bf:9d:fc:c5:17:99:c1:fc:d1:1c:f5:c3:45:
9f:dc:0e:23:45:17:4e:e9:cf:66:47:dc:04:e3:fb:
2a:84:cc:de:17:a4:5d:ad:ac:e9:53:be:b8:ba:70:
af:b7:75:80:94:f3:de:c7:92:56:8c:e2:81:18:55:
0f:82:78:46:ae:17:f6:25:a3:cd:95:77:1b:24:8a:
44:87:e0:ff:ef:2c:ff:2e:a1:65:35:0e:2e:99:61:
b6:fb:cf:f6:e0:e9:b6:25:39:04:36:f3:ec:89:83:
d5:7d:c9:18:41:36:4e:57:1c:ec:88:3b:47:ce:c0:
49:38:d7:90:a1:23:2b:53:61:b9:4d:ef:89:1d:e0:
4b:4a:e3:28:a1:2d:ab:f8:69:b5:aa:78:f4:fa:24:
b3:8b:01:0c:8a:5e:7f:80:27:b0:f1:6d:ff:92:f3:
bf:6a:84:18:c7:6b:27:98:7a:63:01:7b:a7:0a:8b:
7f:f2:b3:9a:d2:dd:0c:04:1c:7f:20:56:be:60:67:
36:63:39:a4:44:0b:fe:66:ab:cc:82:fc:61:c4:6f:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:44:78:D2:59:A6:3F:3B:49:7A:5A:EC:DC:B4:55:54:7D:0D:B9
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0d:67:16:90:30:0b:82:74:99:d2:9e:49:98:76:89:76:3c:
e0:23:16:c5:10:e0:50:7d:73:7f:80:3e:ab:ff:d3:a0:5b:7a:
7b:12:0b:31:7e:29:1a:0c:14:74:2f:89:d5:c1:38:fe:e7:22:
f4:cb:c1:da:b9:b0:4b:0a:b9:f2:35:fa:c1:f6:3b:ec:af:5a:
65:20:ca:a2:df:9c:ee:70:75:89:d5:56:5f:23:80:57:41:82:
9b:26:e8:33:75:6d:f7:7e:11:b5:c6:dd:a2:e7:3f:c3:a2:04:
a4:dd:d4:44:66:51:27:f8:d8:ac:9b:f4:5f:5a:d3:ad:e0:84:
ac:8f:9b:b0:b6:40:4b:a8:fa:a5:bf:b6:58:04:87:14:6b:12:
ba:de:6f:25:82:6e:db:da:7a:aa:36:f1:a8:07:52:0e:48:fd:
60:e0:95:1f:61:35:c1:c1:3d:2c:6a:71:c6:73:54:70:83:53:
89:5c:c3:03:28:3a:c8:0f:b4:5d:cf:34:08:a9:66:a8:02:59:
56:1f:e5:af:3a:06:14:c7:93:e4:4e:05:53:16:fc:fa:3c:85:
9c:91:5c:ec:94:e3:48:4e:41:27:34:01:e1:82:f0:92:75:dd:
1e:a8:18:91:7f:b9:50:16:b6:24:7f:61:bc:13:1f:95:a0:49:
76:97:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:28:56 2026 by rpki-client