Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: WO92V4kXNK+IbEUAPiAlcqEqtA3A/Zy05eHkyDhlx0I=
Subject key identifier: 19:5F:1A:84:76:41:FD:11:FD:73:D6:40:A4:36:6E:65:AE:01:96:33
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 01A12FFD3C96CF543454C9BF81D16E1FF72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 1AB2
Signing time: Mon 12 Oct 2026 12:01:27 +0000
Manifest this update: Mon 12 Oct 2026 12:01:27 +0000
Manifest next update: Tue 13 Oct 2026 12:01:27 +0000
Files and hashes: 1: E7wjJIpp_incFIPPoxFXkTVNOZ4.roa (hash: dWCBkyUED92Ky9/PvSo7QQdS38SvVtpgkoIQkxWKNdI=)
2: IuJcF4mH2-0BSlT6G6AhKea-qcA.roa (hash: T022zetJkpJSmZy29rCTHnD8e/gW5HPSAFMOxFPo87E=)
3: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: 3r7pR4XC7mX7BuTgQdPLHdV43AzZqvOIrZjXS0puoj0=)
4: i5uiOxUKql3E_IHTtTBz9-Sb4xc.roa (hash: tZ8uEFMzEFAwyadWPmY+Ye5B1UCKISaztWjCzXC/FxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fd:3c:96:cf:54:34:54:c9:bf:81:d1:6e:1f:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Oct 12 12:01:27 2026 GMT
Not After : Oct 13 12:01:27 2026 GMT
Subject: CN=195f1a847641fd11fd73d640a4366e65ae019633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:1b:35:3b:dc:cd:95:5b:35:fb:7d:51:7a:
3f:37:e8:0f:da:94:5e:54:46:64:15:d4:d2:77:ef:
b7:8d:32:2d:06:e4:3d:7b:7a:79:69:ed:78:1e:3e:
3f:bd:83:1d:4d:bd:4f:a8:73:b0:ba:6d:a1:00:9e:
4e:27:1e:92:95:79:33:6a:d5:0a:67:44:c9:bd:42:
df:79:6f:66:36:8a:a1:2e:37:04:34:3c:d2:2b:72:
cf:e0:dc:29:be:80:a8:ce:fe:88:f3:3b:88:8f:4a:
9a:a1:50:f6:e0:a4:aa:de:ba:ff:31:8e:ed:59:58:
94:ed:5b:23:43:54:12:ff:2b:c2:27:78:03:36:69:
7d:8c:65:f2:6d:bc:65:99:05:ee:cc:36:35:32:a4:
ce:8b:8e:ab:db:04:be:60:84:40:aa:ad:2f:33:13:
9b:4a:5e:75:d0:17:83:10:97:9f:eb:2b:d0:25:f3:
1b:db:cc:d4:45:75:8e:88:96:f4:ce:89:ef:05:81:
a9:fc:bf:59:75:eb:26:21:86:11:6e:21:2d:d6:9d:
dc:b5:a4:b0:49:f3:82:7b:58:a4:94:7e:e4:06:c9:
e7:6e:99:e9:b0:47:1d:9e:f1:62:2a:6e:be:11:ef:
af:4f:56:d1:9d:93:46:dc:b2:41:bc:57:ee:e7:61:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5F:1A:84:76:41:FD:11:FD:73:D6:40:A4:36:6E:65:AE:01:96:33
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:67:d1:05:a0:7b:d9:bf:ce:cc:32:41:78:94:07:97:8a:44:
5e:e1:22:4b:ad:80:1c:3d:19:03:50:9c:3c:12:a0:be:4e:f1:
02:55:b6:e1:55:3b:ad:3f:a7:c4:26:39:fd:0b:ea:dc:4a:b4:
1f:dd:3e:ed:5d:72:1b:79:43:7e:c9:5b:d4:d1:6c:60:b8:7b:
de:48:29:be:26:7c:2d:82:ef:93:e0:f8:7f:a4:2e:5e:a8:42:
3d:31:ca:be:ac:45:ca:c2:12:0a:fc:ce:f1:fa:b9:4a:5e:53:
e0:f7:58:62:ec:97:e4:6f:9d:47:e8:98:1c:3a:5e:5c:01:6c:
26:0d:f3:d9:c1:73:87:e9:64:56:91:e3:3a:ee:0c:45:86:3b:
ab:5a:9a:0f:4a:c0:8a:37:75:a5:6a:eb:0a:c3:45:9f:a3:7e:
4c:02:e7:ed:13:e5:b0:8f:ff:38:ed:a8:ec:58:29:35:bd:95:
88:1b:d0:32:78:41:71:fc:f4:d1:22:86:52:84:03:c1:1a:5c:
a9:46:ed:6e:64:c4:b8:05:a8:30:3c:a4:31:1d:ee:68:5c:8b:
25:d9:ad:de:ac:3f:78:e9:cf:da:a1:c8:35:be:4c:75:ae:9f:
41:9b:fd:24:b5:5d:4f:76:e7:aa:63:9b:6e:8e:ce:63:24:f7:
12:c5:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:40:26 2026 by rpki-client