Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: Th/mP9jOlJc3dNC0B6Wk5F9n6wtqMIhtQ9UtjphwKNo=
Subject key identifier: B2:EF:FA:B1:26:F5:0F:3D:97:5D:0A:8A:F7:55:E7:EC:CF:64:47:54
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01A0CAB53B94774BEE47236C860C481EAEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 20:01:09 +0000
Manifest this update: Tue 22 Sep 2026 20:01:09 +0000
Manifest next update: Wed 23 Sep 2026 20:01:09 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: 2gbm++SZi7tSSGurNnBzIC4d4mL444gtIOcHhWSkQCU=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:3b:94:77:4b:ee:47:23:6c:86:0c:48:1e:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Sep 22 20:01:09 2026 GMT
Not After : Sep 23 20:01:09 2026 GMT
Subject: CN=b2effab126f50f3d975d0a8af755e7eccf644754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:b6:4b:38:d5:91:58:81:ab:96:33:c9:4e:
ea:51:94:99:59:5f:91:72:b8:dc:56:b9:fb:30:10:
9b:91:f1:d2:ea:5b:cc:57:34:c1:0f:00:15:6d:70:
d4:81:7d:5c:46:2a:81:21:43:af:d3:9c:66:de:df:
d1:24:9d:4f:6a:40:68:36:32:67:eb:19:94:d6:11:
bc:65:d3:ff:d4:a1:e0:f6:ff:7c:4c:89:a1:74:a3:
cc:e3:81:1c:3d:3f:ac:0e:e9:3e:00:b1:a5:d9:22:
73:7a:47:e8:24:cc:49:12:0a:d2:9f:03:ae:ba:f7:
eb:f8:f8:fe:0d:2d:33:38:74:f8:0c:03:85:a6:4a:
72:d4:3f:64:17:94:d6:f3:be:d6:60:4f:13:b8:bd:
b3:fd:d0:63:00:62:7b:aa:31:34:8b:10:62:72:df:
34:b2:b5:0b:6b:4f:78:db:79:ad:dc:d4:93:f2:60:
9c:13:6c:d8:31:95:b4:b1:1e:21:4d:85:a4:7f:0a:
05:76:89:f2:04:13:e5:43:ac:7f:60:2f:6a:35:71:
ef:38:3e:57:44:64:c1:fd:a0:13:78:b7:cf:69:64:
7c:ed:b9:d8:3d:f0:07:0a:8c:aa:3d:30:94:46:11:
21:ed:8a:72:90:0a:4e:f2:22:a8:ea:a2:47:72:d7:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:FA:B1:26:F5:0F:3D:97:5D:0A:8A:F7:55:E7:EC:CF:64:47:54
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:3f:ce:8c:5b:cb:de:ea:22:77:6e:79:42:47:65:f1:61:
7c:a6:ea:c9:4d:13:b9:67:1e:05:84:5d:41:aa:4e:c8:b0:c4:
3b:bc:37:33:ea:d1:7b:06:ee:42:30:0a:5a:08:0b:a1:5b:da:
57:1b:40:dd:0e:68:57:eb:30:e1:72:18:1a:80:e6:7c:24:b1:
2c:d7:d1:e9:ee:98:75:34:5e:cb:d1:2f:9f:f5:b9:7b:ff:55:
63:ef:d4:c6:eb:ad:c2:01:34:51:c6:ca:54:1c:fc:29:95:cf:
f2:34:43:85:08:c2:9c:4a:62:e3:98:ec:12:16:d6:85:a3:39:
56:e7:95:e3:46:b9:4c:8b:c3:41:5b:ea:fd:e0:a4:4b:6a:20:
e3:58:26:74:0a:7e:0a:15:87:18:2d:80:d6:7c:bd:2c:f7:4d:
22:a8:7b:55:56:af:90:7c:a7:3b:f1:eb:27:9f:88:e5:82:7e:
2c:1a:15:4a:eb:2c:cf:5b:cf:12:3a:a7:e0:04:d3:a1:a6:0f:
a0:33:61:f6:5b:f9:4e:1c:dd:35:ed:89:5d:b2:52:c8:21:2a:
01:b7:52:0b:b9:a0:0b:e1:da:cd:18:b9:3f:4c:eb:ba:f8:23:
b5:48:ab:c5:7e:c6:b3:51:d8:a3:b3:c2:b3:87:9c:70:5f:91:
ae:2d:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:49 2026 by rpki-client