Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: aXylBIdcrTA+sbyFZJfbJZrDWVeruZyo0EAM5ZFmD7o=
Subject key identifier: 75:EE:E5:B7:B6:8E:97:DC:80:64:BF:2D:FF:62:AD:22:33:15:59:25
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01A0D83B5F04362F682214550A9E5AF51E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 08FF
Signing time: Fri 25 Sep 2026 11:02:44 +0000
Manifest this update: Fri 25 Sep 2026 11:02:44 +0000
Manifest next update: Sat 26 Sep 2026 11:02:44 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: V4xBq4YA1UQAs82nukPHlHe+rdB37/EUYx3NwqKFgCo=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:5f:04:36:2f:68:22:14:55:0a:9e:5a:f5:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Sep 25 11:02:44 2026 GMT
Not After : Sep 26 11:02:44 2026 GMT
Subject: CN=75eee5b7b68e97dc8064bf2dff62ad2233155925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:d7:16:24:77:d4:7c:9a:20:20:e0:93:a1:
36:6e:15:45:38:de:f4:c4:d0:ec:6f:97:8d:d8:23:
cc:12:90:af:2f:a0:11:6f:9f:5e:c2:03:60:e6:a5:
02:3f:27:14:5a:85:6a:09:07:0b:78:08:df:37:2b:
0f:f8:45:eb:cd:0e:1e:12:25:ff:67:d0:73:20:f2:
f0:9b:60:7d:6f:55:73:5f:36:ed:35:2d:4c:70:0c:
6c:e5:5d:45:04:6b:87:8f:cb:b7:4b:5b:10:51:06:
a5:f8:7c:9d:3e:16:04:14:50:ea:89:6d:4c:55:1c:
10:0a:0f:4a:3a:2a:6b:3d:07:65:56:7a:d7:45:77:
e3:20:d1:3b:1f:42:ad:2a:5b:16:a2:f6:91:eb:66:
ca:de:65:f0:7d:1f:84:41:80:60:87:47:3b:5f:5b:
5d:48:c8:15:a3:04:9a:64:ca:62:ba:9c:0c:2c:c9:
14:b2:43:f4:82:8a:53:97:93:19:63:2e:37:20:8f:
a1:a1:8b:56:51:f7:f1:03:59:7f:f5:48:f1:e6:1c:
7c:77:97:21:03:1d:6b:53:27:4c:0b:b9:39:35:52:
68:c6:68:9b:b9:fb:44:6c:d5:b9:26:b7:89:0a:38:
bf:67:b1:3c:0a:6f:23:03:b6:dd:ff:d8:f7:4b:67:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:E5:B7:B6:8E:97:DC:80:64:BF:2D:FF:62:AD:22:33:15:59:25
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:71:34:0e:f3:ca:a0:5a:d5:20:aa:29:44:19:10:5d:b4:
b0:50:43:f9:02:2f:0f:a0:3a:eb:3e:10:6c:12:14:98:a2:20:
09:ea:ef:4c:e5:a1:16:83:fa:ef:ee:5a:ed:26:b9:64:dd:2d:
8a:ce:e9:2a:dd:95:1e:b1:94:b4:32:30:4c:1f:14:5b:bf:43:
9d:8a:73:37:62:f2:b8:55:e4:8d:da:92:3f:85:2a:ec:51:6d:
0b:fd:04:94:20:0e:fb:b0:82:d3:6f:76:fe:92:59:e4:ef:62:
f3:6e:c8:7b:43:58:d5:9f:d6:1e:dc:70:98:09:7d:c4:8f:3e:
0d:61:25:ca:af:e0:c7:b1:67:1b:33:2d:64:06:ae:8c:13:eb:
ca:5b:31:1a:26:57:9d:98:e0:5a:bd:cc:4c:b2:a2:49:b6:d2:
57:9d:4a:07:1b:a2:70:ee:90:eb:3d:eb:01:82:39:26:da:34:
88:6b:b4:02:04:a5:2e:c2:5d:3b:4d:69:ca:18:fa:75:95:0d:
e9:16:d9:93:ae:12:79:3c:c2:22:4c:d0:47:c6:58:43:d7:66:
f0:5d:a5:2f:2c:a9:3d:74:92:41:d4:cb:cd:6f:ff:03:f8:6b:
2e:65:a5:c4:9f:3e:72:b3:12:63:ee:12:dc:cb:43:04:46:0f:
d3:e7:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:38 2026 by rpki-client