Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: SI87rH/qqWK0i6c4NkgP64H5zhM8klmM3pvDz97dPW4=
Subject key identifier: 31:92:B9:C6:6A:31:84:88:8F:40:23:98:E3:64:1B:DF:3B:7F:80:F9
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 01A0EA09F5FDC189C39D01693B76A528A27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 0360
Signing time: Mon 28 Sep 2026 22:01:56 +0000
Manifest this update: Mon 28 Sep 2026 22:01:56 +0000
Manifest next update: Tue 29 Sep 2026 22:01:56 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: HqNCfrZA4yoga3r6WkzBXdi/TmYEfrH+M0a8LlTTLEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:f5:fd:c1:89:c3:9d:01:69:3b:76:a5:28:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Sep 28 22:01:56 2026 GMT
Not After : Sep 29 22:01:56 2026 GMT
Subject: CN=3192b9c66a3184888f402398e3641bdf3b7f80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:c8:81:0e:a4:2e:82:22:cf:9a:77:90:6f:
38:80:31:9f:7f:ea:f2:e4:f9:0d:d8:4d:50:f0:8b:
38:78:81:35:50:78:15:57:ba:88:86:e7:ab:45:ae:
9d:d7:49:f5:e5:03:9e:7d:49:a2:de:65:28:b3:6b:
6f:01:73:b8:6c:8b:af:b9:39:f7:11:f2:7e:ea:2c:
15:97:fe:74:ab:f8:93:c2:7f:c2:0c:2c:a3:77:f4:
db:a4:7b:3b:40:f8:7e:4f:53:94:0a:36:b4:18:e2:
d2:92:7f:ec:15:00:bd:58:1d:33:d1:fb:52:9b:73:
f8:25:69:a0:ad:1d:87:ec:61:1c:82:d8:f3:f9:ac:
e1:4f:c6:40:81:97:e9:47:61:c4:61:03:5a:2f:12:
73:7c:4c:34:5e:51:a4:8a:a6:c7:69:26:79:01:11:
78:81:52:d4:c2:f3:14:bb:69:de:b9:1a:3b:c6:45:
67:57:d6:2a:ab:18:0a:23:a1:60:88:49:75:b2:d6:
c2:1d:32:b1:a8:1a:50:6b:ce:b4:c0:af:d9:bb:43:
41:dd:b0:3f:6d:10:98:7f:6b:49:b9:dd:53:68:b0:
68:bb:c5:c1:92:af:2b:dd:ca:ae:5d:80:f7:08:36:
62:0d:76:5b:2f:6c:11:a8:3f:2f:14:be:30:fd:ed:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:B9:C6:6A:31:84:88:8F:40:23:98:E3:64:1B:DF:3B:7F:80:F9
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:0d:0f:88:03:51:03:20:97:34:6e:67:d2:74:71:5e:70:d9:
a3:05:5c:92:6e:c7:68:8e:df:8d:61:c1:96:fb:e8:3f:da:65:
2f:d9:8b:ab:4f:1a:d4:40:bc:3c:3c:21:f6:d0:b4:f0:7a:57:
c6:ba:6f:56:82:f1:ed:6b:57:04:61:50:cc:65:74:24:71:c1:
43:e0:3b:b8:e2:08:7d:09:f3:78:35:07:7b:5e:6c:14:a0:02:
50:c2:eb:42:9f:cc:4c:6c:e6:64:3a:88:e0:22:c4:48:b5:72:
aa:a9:71:3c:35:a8:3e:ae:da:e9:ba:a3:71:5f:9a:d5:1f:81:
57:ee:4b:fa:39:29:15:b8:c6:a8:28:a4:1b:0d:a4:de:5f:57:
b1:c7:dc:91:3d:de:51:a7:b1:cd:11:8d:6d:9d:40:48:b5:16:
2a:23:ff:57:26:93:3b:c5:f9:81:c6:e7:30:3b:3b:ac:86:3b:
e1:00:8f:7d:ca:a7:b9:ff:c2:f9:71:0f:69:80:85:9a:95:95:
74:0e:61:2e:a5:de:42:07:5a:7d:6a:c1:31:19:7a:99:0e:b2:
ea:8b:e6:ec:9f:44:e7:26:b3:93:20:21:4a:b4:09:4a:81:7e:
b5:e8:49:40:c9:3d:bb:a6:6f:46:23:e3:86:1c:56:2e:9a:96:
fb:00:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:55:07 2026 by rpki-client