Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: 2RTCfXGxiOFUbpJW+RMwL0UP1fNfsWaXWCrqjdxYk6k=
Subject key identifier: 09:98:01:89:F9:71:95:A6:66:07:15:E4:55:D8:98:EE:85:45:48:F8
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 01A0E92EBCE7ECD67A5F8DD6F50F4299FCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:02:29 +0000
Manifest this update: Mon 28 Sep 2026 18:02:29 +0000
Manifest next update: Tue 29 Sep 2026 18:02:29 +0000
Files and hashes: 1: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (hash: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: DhhNmfHRRmPDooNmwmwE2v2z07VOaiITU8M39lwoQuM=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:bc:e7:ec:d6:7a:5f:8d:d6:f5:0f:42:99:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Sep 28 18:02:29 2026 GMT
Not After : Sep 29 18:02:29 2026 GMT
Subject: CN=09980189f97195a6660715e455d898ee854548f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1d:03:17:66:2d:a5:91:b3:5c:39:62:0e:d1:
70:1a:ed:c5:14:9b:02:71:23:5c:8f:53:71:91:cb:
74:ff:b6:8f:46:39:8d:8c:b8:0f:e9:54:ea:e4:ae:
94:6b:42:d2:11:ae:94:19:40:4b:ff:29:3f:f8:26:
1d:4d:bc:1f:e1:2b:f5:66:49:ee:2e:80:58:2e:b5:
b1:63:fd:bf:70:32:98:0f:58:4e:fc:6b:ae:6b:37:
d0:e8:96:7a:aa:5a:c3:7f:25:5d:2d:76:06:cf:93:
e8:3b:42:80:33:9b:47:ab:d5:9b:6a:fd:47:2a:da:
8e:ee:96:cb:69:3d:0a:e2:fb:0c:bb:12:02:73:0b:
9b:4a:04:ce:ae:c2:be:0e:12:50:c1:df:30:c3:5e:
89:c3:2f:12:29:bc:b0:93:a8:83:87:33:39:a6:3d:
24:8c:ae:36:69:01:44:e5:4f:c1:2d:c3:fe:61:af:
76:1e:47:a1:9e:59:fd:5b:01:0e:c5:33:6b:6f:f7:
78:5d:ef:a7:4b:07:7e:8d:85:32:49:f3:17:4f:3c:
51:ff:f8:76:d0:a3:17:ab:e1:d6:8e:1a:3a:85:05:
fb:92:75:1e:1e:78:bb:3e:f7:bb:1b:73:a3:f9:4f:
f2:53:20:ca:3c:3e:c2:fb:44:83:ad:a6:bd:af:f2:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:01:89:F9:71:95:A6:66:07:15:E4:55:D8:98:EE:85:45:48:F8
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0b:8e:6c:c4:57:1c:ca:e8:97:1c:c3:5e:4a:c9:64:99:d4:
0f:e5:d6:6c:6b:c3:b9:aa:9c:1b:92:0a:2e:ec:42:df:fd:1b:
4f:bb:fa:2d:cc:c8:bc:28:95:9e:ba:67:8d:21:39:db:f1:8a:
26:1a:65:d2:34:19:3a:4a:cf:85:08:e1:76:50:22:84:b1:3b:
d3:81:30:86:4f:e4:8f:a9:08:e7:49:42:d0:86:d5:0f:5b:bf:
94:c7:8d:2e:93:e4:18:50:58:ca:27:e5:42:a1:6d:87:e6:45:
23:b6:15:61:8d:95:09:4a:ac:5e:46:8f:7d:b0:ef:c5:37:70:
40:37:e8:99:4e:33:b3:93:3e:22:c0:11:f4:bb:6e:06:47:3a:
4b:5c:e8:bb:a2:0c:49:84:fd:3a:c3:a5:98:4a:53:ba:ba:56:
f7:4c:c4:c7:2f:fc:3d:e0:17:cc:80:46:81:dd:cf:a3:b5:8d:
99:7e:9c:d3:47:a5:e0:d7:4b:e1:59:8d:df:03:94:20:76:f8:
9f:28:0e:e4:4a:f4:60:31:b7:5b:48:cf:05:fc:22:7d:5b:6c:
ed:e5:b4:78:4a:21:2a:2c:bf:8e:be:9a:c7:0c:03:74:d6:64:
e9:8c:cf:f2:af:47:f7:fd:14:bf:93:5c:ab:d9:ab:4c:c5:c2:
1e:26:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:36:54 2026 by rpki-client