Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: GggvuO6sZwhf65JfkVjQSnenURs6rn7ap2FGryobpNY=
Subject key identifier: 7B:D6:B3:07:2A:C4:8A:86:EB:8D:78:40:7B:11:BB:00:33:87:81:86
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01A0D31599094CD3A92893AAE89746238EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1A85
Signing time: Thu 24 Sep 2026 11:03:22 +0000
Manifest this update: Thu 24 Sep 2026 11:03:22 +0000
Manifest next update: Fri 25 Sep 2026 11:03:22 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: pM6ZvI1tSZZgSplziTDGl7mNUbdZuZ2HtpMu/znKIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:99:09:4c:d3:a9:28:93:aa:e8:97:46:23:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Sep 24 11:03:22 2026 GMT
Not After : Sep 25 11:03:22 2026 GMT
Subject: CN=7bd6b3072ac48a86eb8d78407b11bb0033878186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:ee:f9:34:a9:6a:83:38:0d:5f:0a:b2:62:
8a:9c:97:ae:68:f4:7c:0c:72:47:e6:75:85:ca:5d:
e7:36:d4:43:23:1f:bf:f2:e4:44:82:3e:ed:74:1f:
0e:c6:7f:a0:73:89:d9:24:b6:1b:1c:c6:17:8e:f0:
7d:a0:2d:86:44:82:c7:32:fe:80:6f:80:63:09:78:
00:cb:1e:41:af:73:e7:d8:02:94:95:44:f9:b9:56:
97:06:62:27:db:f9:34:c7:23:87:eb:cb:17:75:65:
c0:06:77:bb:f6:c5:42:49:c3:2e:65:0b:ad:53:f0:
41:c4:25:5a:69:af:95:59:f8:65:2d:70:b1:7f:78:
c3:cf:cb:b7:3a:25:ad:98:8e:af:0d:96:cc:3a:46:
d6:e8:dd:2b:70:c6:ef:13:1d:2d:cb:9e:9f:56:cd:
8d:15:40:83:ff:25:f1:53:00:80:a7:07:1f:e2:14:
47:e9:70:11:81:4d:34:ad:52:b4:60:1b:1a:10:a5:
25:ea:49:9d:3f:4c:f7:22:30:7c:82:fa:fe:26:e3:
25:70:f1:b4:6c:54:13:ba:d1:51:c6:ef:d6:b3:0f:
b7:94:ba:be:14:34:a7:ef:10:7e:c8:b2:16:15:f3:
7e:26:68:39:b2:8f:01:fc:57:c1:6c:33:49:72:db:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:B3:07:2A:C4:8A:86:EB:8D:78:40:7B:11:BB:00:33:87:81:86
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:a1:1f:92:62:fc:17:72:3d:b3:86:55:fd:d0:a8:9e:5e:
33:ee:24:04:50:75:43:be:c2:00:64:c6:f1:61:58:bd:13:4d:
e0:67:4c:f0:21:52:4d:5d:52:8a:2f:df:82:35:0c:6d:44:ae:
49:1f:7a:0a:6b:46:9c:c8:4a:8a:d0:e4:ce:40:01:18:98:0a:
81:3d:fa:71:f2:92:60:fa:fc:2f:50:97:05:b1:b5:30:f5:52:
24:2a:f1:f2:ee:ee:d5:06:ac:b7:e4:28:aa:07:f5:ea:87:31:
b4:5f:ae:af:f9:ac:6f:c0:94:3b:71:a7:c6:a0:72:82:d2:1c:
ca:69:93:f8:74:55:29:3e:99:08:4f:88:44:1b:fe:67:7f:44:
44:55:3f:d9:21:30:e7:78:b6:b5:e8:86:b9:ee:f8:1c:b0:49:
f0:c2:ea:fa:a1:c9:f1:eb:1d:9c:81:8c:88:0a:62:b2:ab:63:
4f:cb:74:8f:29:97:dc:8d:4f:00:2e:84:a1:28:de:fb:98:37:
9c:9b:60:51:30:73:c3:de:d6:96:2a:57:e9:9f:7b:e8:97:24:
b0:ca:36:63:dd:bf:14:b6:40:83:34:8d:46:d3:e9:28:d1:20:
41:89:9c:3b:8f:be:2b:74:8b:f8:66:c3:ba:91:10:82:6e:1d:
2e:d8:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:51:41 2026 by rpki-client