Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: GN7OX9gzMD/T+w7/W5SUtGov7cJEvLQg/x8DvRxxC5c=
Subject key identifier: F2:97:0E:EA:77:1B:40:D4:6B:87:A5:06:D7:74:B9:01:02:97:24:F4
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01A0DB3B0BFE6400E042D984FCDDA601996F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 01:01:14 +0000
Manifest this update: Sat 26 Sep 2026 01:01:14 +0000
Manifest next update: Sun 27 Sep 2026 01:01:14 +0000
Files and hashes: 1: K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa (hash: 9TWA2Ju7KXtVBuUXDkLkA6I5QxPo+MlHoHE+QsOraTM=)
2: Q6W9LYcFYycxkbxck2CwubnHIBk.roa (hash: 0LNTOFre19JPHdEo0rCszlO5y07uomdwgsNdpg2qnmw=)
3: dY56PZ-dRsvnKDvXo4McbQsvHAI.roa (hash: SOOatDV7hO/TWrylYWvtGzZm2zHDrCdXyxdW1RoCrrQ=)
4: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: YVXM8MpdC5ujyRfG6fDmcgxBZ2fyrEEwvwX380OYNVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:0b:fe:64:00:e0:42:d9:84:fc:dd:a6:01:99:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Sep 26 01:01:14 2026 GMT
Not After : Sep 27 01:01:14 2026 GMT
Subject: CN=f2970eea771b40d46b87a506d774b901029724f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:67:e0:a2:ae:82:d7:2c:aa:87:42:79:be:
c4:53:5d:77:68:51:a7:94:3f:6f:c6:d8:2a:6a:16:
39:ed:34:10:8c:c3:22:82:23:5a:e5:d3:64:fe:7d:
6f:97:b2:fc:88:70:dc:0c:9b:f6:a8:bb:fd:1b:5d:
dd:3a:b5:fa:46:5a:a0:34:f2:e4:71:a0:db:b8:4b:
68:e0:ab:cf:6a:af:2f:88:bf:a9:cb:c7:7f:57:66:
d8:db:f1:b2:11:7e:e4:34:3d:52:c8:88:bc:72:c7:
0a:c1:27:41:8d:48:fa:6e:76:73:29:29:48:bd:ad:
94:f3:cd:d9:75:94:8c:53:01:fd:66:d3:4b:69:58:
89:b1:55:aa:ca:54:0c:33:2f:28:da:47:78:47:ee:
aa:8d:c7:4a:b6:4d:c9:4d:b1:0e:4f:f8:d6:f7:5e:
13:1f:85:a0:21:9a:8e:4e:35:9a:56:31:74:2f:49:
0d:ef:e4:1f:1c:1c:87:d6:52:79:da:1f:b8:5a:40:
de:a4:e4:6a:13:3c:c1:2b:53:1c:29:7f:15:5f:6d:
fd:67:9c:2f:bf:2c:32:8a:08:0b:a0:98:f8:df:cb:
ba:cb:70:b7:c6:c0:a6:cf:51:b2:7a:1f:1c:17:a3:
30:57:01:11:e5:34:7f:e4:2c:f1:cf:a2:e8:8a:64:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:0E:EA:77:1B:40:D4:6B:87:A5:06:D7:74:B9:01:02:97:24:F4
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1a:61:ab:87:04:25:97:fb:e4:cc:5d:f1:2f:dc:fb:7f:51:
db:33:1e:06:6c:11:ed:88:6d:ad:cb:d0:45:60:de:0e:fb:2c:
c0:1e:35:8b:8f:16:e8:e7:07:15:bd:07:94:c4:b0:e6:07:5d:
57:e1:5f:b4:55:cd:e4:3b:29:ba:01:89:98:99:d9:91:33:6a:
ca:af:47:7a:44:4a:e8:b6:1a:e2:0c:f3:22:29:e9:49:29:d0:
21:f3:40:49:6f:ed:9f:60:b8:59:36:ed:f5:48:44:73:7d:ce:
46:1e:94:b0:87:98:18:2a:d7:54:49:a8:6e:8f:43:f1:50:93:
ca:2a:80:e1:64:b7:f3:b0:9d:8d:dc:e9:07:bc:34:1d:52:7f:
6b:7d:0c:48:42:b6:d5:d4:64:3e:8d:39:ee:ad:63:7f:c8:af:
44:10:06:8a:b1:0d:10:90:37:5e:62:32:a9:e2:35:9c:91:9f:
9b:f4:e2:61:6f:25:8f:00:f8:da:e0:2c:8b:ee:eb:c3:04:6c:
09:71:aa:a7:eb:18:23:4d:54:39:c4:80:a3:d1:42:d6:65:bb:
35:5d:66:59:c2:db:e8:f4:c9:99:a9:ed:56:5c:60:52:5c:da:
8f:90:0c:c8:e9:58:02:5a:2a:c2:9f:c1:2d:bb:0c:74:4a:ff:
b6:88:ea:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:09:08 2026 by rpki-client