Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: QRHBZjlXS1lXrOTbGwoiSoSzJAznIwXFrh4KNV3VHXw=
Subject key identifier: 38:02:BC:F7:41:CD:2F:38:6E:CD:1D:8B:1C:FE:B4:02:C7:F5:78:15
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 01A0F644C397874DF3DC09BAA0730D79B510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 12C7
Signing time: Thu 01 Oct 2026 07:01:36 +0000
Manifest this update: Thu 01 Oct 2026 07:01:36 +0000
Manifest next update: Fri 02 Oct 2026 07:01:36 +0000
Files and hashes: 1: _chBVEiIFGC5r20fIYTsPORg6rk.roa (hash: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: Imn2frBf7gKCvgN6EkYUDhrLEgvcCCaDBy2czwrpnz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:c3:97:87:4d:f3:dc:09:ba:a0:73:0d:79:b5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Oct 1 07:01:36 2026 GMT
Not After : Oct 2 07:01:36 2026 GMT
Subject: CN=3802bcf741cd2f386ecd1d8b1cfeb402c7f57815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:b6:ec:eb:42:42:75:f1:f6:b5:dc:98:f3:
b1:7b:a6:83:e4:e5:55:56:b9:14:f4:41:72:4a:9b:
20:b4:1c:be:f7:ab:9a:9a:8a:81:ce:71:2a:a9:dc:
12:fe:ea:85:8e:b1:22:5a:f8:d6:d5:dc:05:0e:b5:
6d:6f:dc:20:34:6c:7f:8b:06:c8:a5:39:56:d9:e9:
13:c2:00:91:33:8c:3a:5c:5a:f3:ea:57:91:41:e0:
e5:87:22:c3:a2:02:81:46:d8:6c:01:82:ca:89:42:
4b:de:a6:42:92:bd:e1:32:0a:78:43:cb:fe:7f:84:
50:53:05:bd:5b:c4:37:c6:22:fa:2d:a5:a0:90:85:
b0:72:9c:66:7b:8f:44:53:90:66:76:3d:0a:18:8f:
50:f7:de:00:e3:6a:ae:4e:11:3e:f9:88:6e:3b:4d:
c8:e9:c6:61:d7:4c:fc:6b:24:9f:1d:5a:15:15:e1:
7b:af:4b:b7:b8:71:dd:4e:7f:f9:97:3c:4e:95:ea:
92:85:43:ad:10:ed:ff:65:82:55:64:08:77:01:cc:
c7:45:e7:12:d6:14:1a:54:73:f7:1f:92:6b:ad:79:
d3:27:1e:3a:3e:93:f6:fa:91:9f:d2:be:3f:f7:f6:
e2:8a:08:4a:a2:30:e2:c5:37:25:c5:08:bf:c9:43:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:02:BC:F7:41:CD:2F:38:6E:CD:1D:8B:1C:FE:B4:02:C7:F5:78:15
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:a0:02:12:a2:22:26:d8:65:96:fd:19:eb:6d:f4:6a:00:
57:2b:57:5a:7a:8c:a3:3d:6b:ca:07:a8:8d:2c:74:5f:c6:a2:
0b:38:cf:04:c2:d0:83:f1:3c:8f:3f:74:f1:27:e9:ed:2b:7d:
d8:8a:c9:2c:7a:e3:59:a4:13:c7:12:7a:b7:a2:9d:3e:8a:84:
4b:50:32:2e:11:59:a2:8d:97:85:09:07:e8:37:2d:17:a1:53:
47:a0:d6:8d:14:2d:48:cb:13:db:fb:e3:7b:fc:94:a1:86:3c:
b3:f6:e0:dc:7a:d4:09:3e:8e:8a:f2:2b:93:7e:c0:ce:36:3f:
da:39:24:80:e0:3f:2e:bc:07:50:e3:d7:4b:e0:a1:4a:f6:23:
23:5d:ca:fc:a6:06:77:c5:05:22:1d:fa:9c:66:2f:bf:2f:89:
4a:e4:c9:44:77:b7:5f:e5:78:93:96:cb:20:6c:aa:4d:78:a6:
b3:06:54:55:2f:cf:6b:7d:10:e0:1d:d8:b4:3a:96:ab:94:91:
51:7e:0a:e8:2f:92:04:68:65:61:e6:95:21:b2:9e:50:e9:8b:
4c:b1:ad:f2:50:b2:bf:55:19:63:3b:ff:36:7f:cc:83:0e:3e:
1e:35:fa:c3:d6:b0:31:36:d3:50:17:49:68:27:76:c5:c9:23:
a3:a4:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:01:09 2026 by rpki-client