Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: 3HJV5Hfs8wVtju94q5pF1ym0BRp8OiP6BVvi391Wu8g=
Subject key identifier: 48:AF:50:E4:C6:06:CB:BD:27:26:52:21:AD:17:67:6C:C1:BE:D5:74
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01A0D502215337977DD40568A199CB8BC739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1A86
Signing time: Thu 24 Sep 2026 20:01:21 +0000
Manifest this update: Thu 24 Sep 2026 20:01:21 +0000
Manifest next update: Fri 25 Sep 2026 20:01:21 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: 2Hke3B7qkeXWO53aJNnkFUEp1QkGmr+4dJSGvyVuwtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:21:53:37:97:7d:d4:05:68:a1:99:cb:8b:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Sep 24 20:01:21 2026 GMT
Not After : Sep 25 20:01:21 2026 GMT
Subject: CN=48af50e4c606cbbd27265221ad17676cc1bed574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:28:59:07:ee:37:c3:3b:ec:5c:26:05:2c:
be:b6:fd:2f:18:2f:02:95:bf:1f:23:61:0f:2d:4a:
7e:29:8f:f5:7a:46:6b:c0:5b:1f:01:e5:56:36:ca:
e2:ec:51:c7:dc:56:70:2d:cd:c2:91:11:83:6c:89:
c0:d0:2c:88:45:4c:7b:f8:48:e5:cc:ab:a4:92:19:
3d:3b:32:ed:d4:e1:70:ca:c2:a5:00:44:ad:10:72:
37:82:58:46:e4:d6:ec:74:e1:f1:ae:31:48:be:ec:
4d:78:cc:93:ae:30:bc:6e:8d:9f:5b:5e:6e:f9:74:
d4:f3:a4:f8:95:35:a6:35:42:12:bd:c3:26:e6:a2:
a7:2c:29:da:ae:e6:4e:69:ac:4c:b1:20:88:86:23:
44:11:cf:f7:70:5e:02:5b:35:3c:fd:01:84:a4:49:
39:c5:c8:7f:2c:82:8b:79:4c:0c:8b:2b:86:c4:dc:
63:07:3d:f7:cf:bf:8f:e4:08:fd:1a:61:f1:51:61:
01:80:9f:01:c9:28:ac:6f:b5:70:84:6e:81:05:b1:
e7:02:45:39:25:91:21:b5:95:da:2f:f1:dc:cb:d0:
75:7b:26:ce:e5:f6:32:72:46:0f:2d:6a:0a:16:46:
4a:8d:35:47:1d:96:b3:d5:26:33:4a:a4:29:40:6e:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:50:E4:C6:06:CB:BD:27:26:52:21:AD:17:67:6C:C1:BE:D5:74
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:74:29:7b:6f:e9:be:78:ff:2d:fe:bb:4e:87:9a:4a:f8:a5:
b4:b0:8f:db:cb:e6:43:38:b0:b7:25:6c:5b:4b:9b:cf:5c:34:
5f:b2:7d:e6:ac:8a:17:d5:58:23:06:1d:64:9f:21:d5:30:05:
ed:e9:68:8b:17:95:30:bc:0e:f6:23:c5:37:11:0d:ad:c5:cd:
c7:27:ab:ae:70:db:df:b3:ce:7d:1f:c0:e4:eb:c6:ed:5a:d1:
c7:b0:75:36:72:36:a3:83:60:51:4f:2e:46:33:51:e9:bc:81:
72:75:f1:fd:0d:68:bf:c3:46:8b:10:94:18:47:95:26:63:ba:
d1:47:d6:5b:2b:06:7d:6d:8c:19:48:29:37:18:4e:f5:ff:7d:
fc:50:a1:41:ed:00:7c:a8:f6:71:1f:e5:11:e2:7d:8a:05:42:
8c:6d:28:1a:95:15:99:c1:45:40:97:96:39:9e:2c:97:ea:0a:
3c:ca:b2:0f:90:71:98:6f:09:94:d3:0c:ec:70:47:fb:c0:22:
c2:43:07:2d:69:f5:0a:8f:7d:0f:66:5b:18:2e:29:d6:04:b1:
61:fc:78:e6:9d:61:8d:e6:a0:92:25:6b:b5:97:bf:4c:6d:9e:
72:4a:ff:8a:fe:d8:ef:2a:2c:e8:20:4f:37:88:e6:b9:09:05:
d2:98:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:32 2026 by rpki-client