Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: E0KpWxfKy3LJlQNBMvHhds6vGg7WzBiwWDUtmiYTW7M=
Subject key identifier: 91:44:9E:02:F7:09:32:63:2E:03:3B:73:D2:02:D6:BA:DB:42:02:05
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01A0D26E96734CE4B6808B9A20A17DBD1A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 08FC
Signing time: Thu 24 Sep 2026 08:00:57 +0000
Manifest this update: Thu 24 Sep 2026 08:00:57 +0000
Manifest next update: Fri 25 Sep 2026 08:00:57 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: F6DSu/6Y2K2a3F76K2c+kNVxA3lEgEJOx/hJzrTzC1M=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:96:73:4c:e4:b6:80:8b:9a:20:a1:7d:bd:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Sep 24 08:00:57 2026 GMT
Not After : Sep 25 08:00:57 2026 GMT
Subject: CN=91449e02f70932632e033b73d202d6badb420205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:01:f9:cb:ab:4e:0b:b7:e2:a7:12:05:5c:
19:39:27:31:53:52:01:e8:d6:72:20:9b:1e:f0:fd:
ee:1c:54:35:fd:3e:3d:59:f0:e3:46:1b:49:14:d8:
00:ca:37:c1:ea:75:5c:d4:25:44:69:50:f4:7b:00:
ad:ec:da:0c:81:b1:30:5e:ad:96:f5:75:65:09:15:
b8:79:34:d2:cc:36:28:53:8d:ad:68:c9:31:d2:be:
0c:c1:9b:00:8b:7a:0b:47:16:a4:05:e4:4d:09:2b:
59:61:40:c7:3d:13:7a:86:6d:50:50:5e:25:91:74:
bc:7c:4e:e9:82:39:70:5e:84:8b:95:9a:52:d0:01:
ed:48:68:8a:f6:0c:2b:90:d5:d3:27:9f:c3:cc:e2:
43:d8:fe:47:f8:58:f0:17:f1:b1:09:d0:a3:73:5c:
2a:97:e8:4a:a8:a7:11:bd:00:5d:3c:b3:54:7c:02:
11:0b:53:3b:c9:28:29:bb:d2:ee:5b:30:63:48:d0:
96:ce:82:03:83:b3:6e:cb:7e:e3:08:9c:61:6f:b7:
f6:d4:f1:c6:53:72:bb:f0:c4:9b:f0:3c:0a:d5:3c:
e3:07:41:3c:6b:45:3f:35:30:2c:50:7a:e8:54:d5:
fa:18:9c:2d:b6:a3:3a:ae:ed:15:4d:52:63:62:5c:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:9E:02:F7:09:32:63:2E:03:3B:73:D2:02:D6:BA:DB:42:02:05
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:42:dc:35:9a:a5:1e:f1:c9:05:e4:63:b4:be:e0:51:96:0a:
30:5f:3d:1f:e2:f8:aa:52:88:b3:b6:78:6a:cc:bb:2a:e4:ed:
1f:24:a1:29:64:42:f6:86:08:05:db:77:3d:a1:f5:2a:57:44:
40:9e:c8:6a:a2:df:4a:dd:0f:92:74:8a:9d:fe:16:06:3d:d0:
79:53:c7:ef:c8:7b:27:1b:c0:0f:06:b7:01:e3:d1:fe:df:67:
8b:d6:d9:c3:f6:be:b9:cc:85:7d:f3:90:ce:41:ce:b3:c4:65:
b5:f4:62:42:dd:10:d3:15:01:66:c4:1d:51:d1:85:ec:70:21:
42:4d:b2:8d:a6:67:d1:c3:36:15:64:d7:88:f6:ae:09:1d:58:
20:2e:88:20:0a:ac:8d:3a:e2:fd:36:04:7a:11:57:f0:91:e8:
a9:18:b0:1c:d3:f9:8d:f3:86:72:6e:04:70:5a:d7:d3:db:a3:
82:26:8d:df:bf:de:54:29:d4:a1:01:7a:75:d0:8a:77:8c:03:
17:01:92:93:3e:4f:2f:fa:67:ce:e7:bb:2f:b9:6b:0f:0a:f8:
dc:76:d9:1b:f9:f7:a1:72:99:30:06:04:9f:cd:60:d1:b9:a3:
65:f6:7a:e5:7d:06:51:cf:c7:dc:2b:ee:34:31:f5:3f:34:be:
67:64:ef:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:39 2026 by rpki-client