Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: iBFyWrUiTsf+JjD5TjbFcpfccms2mfm3Jg5AEC8a87M=
Subject key identifier: F8:D5:23:FC:BB:63:1A:34:D6:C1:99:F2:8D:4D:41:D4:8C:ED:66:60
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 01A0D5DE71B422C1C3B8EACD65038FC1ADB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0FA4
Signing time: Fri 25 Sep 2026 00:02:00 +0000
Manifest this update: Fri 25 Sep 2026 00:02:00 +0000
Manifest next update: Sat 26 Sep 2026 00:02:00 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: hnApM2inNmWhsWDvMawllMPCjF6UN4c5eO4MT0K6hsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:71:b4:22:c1:c3:b8:ea:cd:65:03:8f:c1:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Sep 25 00:02:00 2026 GMT
Not After : Sep 26 00:02:00 2026 GMT
Subject: CN=f8d523fcbb631a34d6c199f28d4d41d48ced6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:fd:8c:11:38:ca:31:e6:52:9d:79:db:34:
20:fd:b4:ff:53:82:6d:3a:cc:a1:dc:e3:62:47:ff:
e2:61:f9:2d:bc:23:72:7c:23:d4:76:ff:54:d6:d5:
27:4c:7e:88:a1:46:df:8e:aa:87:26:5b:4f:1c:98:
18:45:bf:f1:ee:ca:b5:63:15:92:ee:cd:e4:09:2f:
bb:b9:b5:b0:66:53:90:33:e6:59:df:81:53:2d:c1:
04:68:3c:30:a8:97:05:a8:fd:86:d5:b5:e3:0e:f9:
7f:2e:6a:f2:51:08:41:ca:4b:50:4c:2c:79:8d:61:
6f:f0:38:b3:f3:12:6d:2c:cf:c9:56:2f:c8:f7:da:
43:8a:91:a8:76:2d:5a:66:74:6d:fd:91:69:3e:64:
e1:d7:1f:71:26:c0:77:9f:2d:79:d7:00:2d:ab:12:
0e:57:0f:a1:73:df:01:c6:44:26:34:a1:8a:0b:57:
4a:6b:3e:74:1f:0e:2f:3c:76:e0:e4:f7:cd:1a:e4:
71:3f:5e:58:4b:4b:50:2f:25:24:59:9a:5f:bf:be:
ba:62:d0:1a:10:5c:6a:20:2c:ad:0a:e6:4a:91:7a:
57:62:ea:59:86:b2:3f:69:04:eb:19:c9:fe:1a:29:
aa:13:b3:21:34:8c:43:b2:bf:5e:eb:d1:13:a1:e2:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:23:FC:BB:63:1A:34:D6:C1:99:F2:8D:4D:41:D4:8C:ED:66:60
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:4c:08:3b:f4:dd:b8:81:15:62:f9:f4:9e:02:a2:f6:bd:
37:aa:6a:44:71:be:04:73:99:69:a5:24:92:ba:d4:6e:34:b4:
3d:f3:26:c8:66:89:b8:4b:58:06:2a:6f:ff:7e:75:d8:bc:94:
63:df:39:d4:51:5e:2d:55:3f:37:81:99:5d:7a:f9:12:b9:5d:
87:35:de:d9:d9:28:fe:44:99:12:59:2e:1d:75:1a:19:03:af:
77:c5:c3:6c:e0:03:dc:ea:00:6d:09:9d:d5:be:eb:4e:cc:e2:
df:1a:40:03:1d:87:7a:55:27:ed:4f:0d:54:40:ff:e4:d4:1f:
3f:55:63:5f:bf:2b:87:2b:78:6a:33:a8:d7:8c:da:3c:06:2a:
17:93:5e:b7:25:cc:a7:0b:89:85:16:1b:16:01:f0:fd:91:04:
45:7b:14:db:c8:d8:de:86:86:f9:46:b7:8a:ad:27:c1:de:b9:
1e:3e:74:b0:09:ec:8f:4c:77:30:13:38:7c:ed:16:1f:6e:57:
b7:01:9a:08:52:6d:57:7b:33:87:b7:5b:3b:df:fb:50:a7:4f:
6b:5b:ef:1f:76:0f:18:8b:23:97:61:ca:2b:5d:bb:eb:34:66:
55:58:db:a5:87:0d:6c:c0:d8:78:99:31:11:83:fe:41:f8:ed:
70:13:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:44:19 2026 by rpki-client