Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: E9ZxG/CsFFgwrGXslKe3aIWstsdYkWs+bgwGNQV92cY=
Subject key identifier: 91:49:CC:59:DB:94:F7:7A:60:F2:15:CD:6A:E1:E0:FE:F8:36:C1:0D
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 01A0CB593C35418DDE64DF19953AFDFB414C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 23:00:17 +0000
Manifest this update: Tue 22 Sep 2026 23:00:17 +0000
Manifest next update: Wed 23 Sep 2026 23:00:17 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: 5cDLv+Pq43CvXYvFRjBbbNb3HCj4nZ2yX77IUoyW1i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:3c:35:41:8d:de:64:df:19:95:3a:fd:fb:41:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Sep 22 23:00:17 2026 GMT
Not After : Sep 23 23:00:17 2026 GMT
Subject: CN=9149cc59db94f77a60f215cd6ae1e0fef836c10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:dd:6f:ba:8c:a1:df:e2:02:fb:bb:c3:76:
1a:e4:39:4d:1f:c9:d3:66:7b:96:bf:5e:02:00:83:
68:a5:f5:5b:4c:94:24:3a:fc:3b:c1:e0:e7:86:e8:
05:63:f6:d8:0b:02:1a:0c:9a:35:d4:26:10:b2:3e:
6c:a9:b2:b1:12:fb:fb:76:bf:28:7d:ec:1e:0a:61:
e9:f5:88:6a:17:9b:7e:03:de:dc:49:84:15:ab:4a:
31:30:df:ae:2d:8d:84:8a:1e:8f:5c:24:fc:06:17:
9a:df:bd:63:e0:a6:c5:90:c0:33:9e:cb:d9:b3:2e:
75:b0:b9:62:3d:e2:49:f3:54:1b:71:1d:9c:49:c5:
70:4a:df:01:2c:da:88:c7:0f:92:c8:2b:34:1f:77:
a2:3b:8c:a1:5c:b6:e6:2b:62:1f:df:59:ea:bd:80:
88:71:31:0b:fb:22:f1:5e:3d:0c:7f:20:27:9c:04:
9b:95:5d:1c:a4:b5:2e:80:a9:0d:90:a8:79:80:48:
5e:80:8f:05:3d:e6:bc:c0:77:e1:6f:f9:99:b4:91:
9b:e8:fa:ee:83:91:a9:39:87:61:8e:a3:9f:ee:d0:
7b:95:ea:ad:55:0a:db:10:2d:d9:d2:97:fc:26:73:
46:5f:40:54:d9:a0:ab:23:27:d4:f0:b3:71:e2:b5:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:CC:59:DB:94:F7:7A:60:F2:15:CD:6A:E1:E0:FE:F8:36:C1:0D
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:96:c7:a1:be:1e:8e:46:90:0d:ae:2e:0d:06:03:e8:ce:cf:
31:0d:8f:8f:9d:29:18:c5:22:8d:67:09:6b:ec:65:67:8d:a8:
b4:76:35:fb:ee:af:68:e4:58:59:20:73:73:4f:a4:87:4a:e0:
8e:aa:37:25:33:6f:1c:fc:80:51:b8:9a:eb:ab:55:70:8b:35:
7f:b2:e0:ae:5d:9a:08:c8:99:2c:8c:e2:b8:9e:99:00:7e:65:
89:e3:dc:6e:84:99:a6:a9:3b:db:79:e8:0b:b5:e4:1f:33:b6:
cc:2c:1f:9a:c1:52:51:a4:8c:b2:f1:82:e0:09:ee:74:a2:93:
82:c9:64:f0:77:e4:65:ad:26:26:05:c5:bc:b0:34:5c:13:9b:
12:30:03:32:31:a2:80:09:95:39:40:ca:87:1f:2d:f4:5a:6b:
53:d7:b6:35:b3:f5:01:5e:bf:15:02:e9:95:cf:5c:38:46:87:
06:53:ad:80:53:e1:9c:c0:56:79:2b:6a:c9:91:27:45:69:3a:
b1:2d:b8:5d:08:89:60:78:32:5f:f9:97:2d:24:e8:3f:cd:6f:
c8:10:2a:a9:43:67:2e:d9:0a:07:6e:56:30:5b:2a:9e:25:d5:
48:05:ef:0e:95:3c:d3:ae:27:32:a0:f2:6c:33:05:d6:c6:f2:
75:6b:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:58 2026 by rpki-client