Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: lIKHsDlC59sxh6Nbm+nviVrJYvhJ5FMikevdOP40WQ4=
Subject key identifier: 10:A6:7E:8D:56:05:14:7E:A8:92:FB:D5:01:D6:70:DD:F9:A0:D3:2A
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 01A0E174C9FB592DE6BEA9A4C51BDD4590AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 0309
Signing time: Sun 27 Sep 2026 06:02:02 +0000
Manifest this update: Sun 27 Sep 2026 06:02:02 +0000
Manifest next update: Mon 28 Sep 2026 06:02:02 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: eJEjAzCVszayRDLnWoUIJpzk3glZVA0b8HnlntrUQ6I=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:c9:fb:59:2d:e6:be:a9:a4:c5:1b:dd:45:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Sep 27 06:02:02 2026 GMT
Not After : Sep 28 06:02:02 2026 GMT
Subject: CN=10a67e8d5605147ea892fbd501d670ddf9a0d32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:cf:b1:2a:20:b0:aa:84:3a:02:8f:5b:fb:
57:ec:ec:cc:82:41:5f:a2:8f:af:4d:2b:c9:2b:06:
b1:0b:5c:ed:70:0f:66:20:bf:fc:48:3b:66:2a:10:
70:62:e6:6a:b0:d5:b8:72:cd:09:69:0d:37:41:41:
89:0a:59:65:f8:d9:9d:30:85:bc:cb:77:c9:da:5b:
df:55:56:e2:9a:3e:88:ce:88:b5:52:d6:be:aa:13:
c2:8b:ad:26:3f:a6:31:b4:98:22:38:7a:6d:ea:45:
be:dc:ed:97:ca:cc:42:ca:29:45:fb:b7:12:ab:c3:
4f:ed:17:5c:9c:66:32:2f:d0:95:27:9d:5f:27:fd:
2c:0d:d0:ab:ce:7c:50:af:23:6e:37:f1:c8:69:ac:
53:ed:db:93:25:09:0c:d6:6f:54:bc:83:ef:c6:a4:
42:54:bf:55:09:f7:f4:2b:dd:f3:62:c6:58:12:6c:
89:00:ec:e7:70:98:ea:d6:e1:27:60:cf:30:25:fd:
03:2b:6b:bc:d7:df:04:e4:59:7c:9c:4e:95:28:7b:
6a:67:50:b0:7d:5a:7b:44:62:24:47:b3:53:3e:16:
41:c2:96:13:df:f1:58:e8:3a:aa:33:f2:58:4e:5c:
3a:44:6a:75:ae:49:88:f1:0a:09:1e:90:47:b2:1e:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:7E:8D:56:05:14:7E:A8:92:FB:D5:01:D6:70:DD:F9:A0:D3:2A
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:16:35:13:96:94:41:ab:8a:db:ae:4b:dd:1b:06:c8:5b:55:
70:be:89:85:30:85:17:fc:2b:7d:19:8f:9b:a7:c9:a1:5f:fa:
6e:42:65:b4:79:e9:08:d8:d5:77:ff:98:42:9e:50:03:dd:ab:
95:e1:f7:15:67:6e:be:4e:33:fb:d4:c7:d0:30:a4:f9:90:70:
8f:de:c9:36:b1:b1:20:87:a4:b8:25:55:fe:07:24:a1:20:fc:
ba:34:99:6c:c3:cd:d0:34:18:1b:e0:3c:93:2d:9a:15:73:fb:
1d:d2:2d:70:97:dc:c8:56:cc:a9:f2:30:6a:5a:11:e7:42:0e:
f9:f2:b9:90:09:b2:47:04:0e:22:07:62:4e:78:f3:c2:27:5b:
4c:d7:7c:60:01:6c:86:81:c8:b0:16:aa:dd:f2:37:a8:0b:6b:
27:20:98:ce:f5:f9:eb:6e:f5:4f:be:a2:3b:00:02:b1:dd:69:
83:94:d3:28:09:89:61:0e:93:00:19:ec:44:a9:7a:9c:29:3e:
da:9f:53:5d:b8:7c:6f:f8:2a:7a:ab:ef:31:75:f9:c2:85:97:
b4:1e:2d:1b:43:a6:eb:9a:86:08:6a:a2:3c:fa:60:5a:35:7a:
fe:b8:2e:6d:18:05:06:1e:04:c6:87:26:ce:ac:73:03:0f:d9:
76:94:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:16 2026 by rpki-client