Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: mLxqzk91xJwNFbn9S2NG0JKHZtCUzuqtZG7nNKSidOU=
Subject key identifier: 77:5E:44:AD:E8:06:1F:09:99:FA:E7:36:DE:18:FF:27:1E:77:8F:BE
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 01A0DBA8E7FF5809F9042658F51D12451BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 06A2
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: YvcN6K_UssWa3nJxS1veSyl_xQY.roa (hash: t+mIJo/SlLUrms8Z2lET1unxQJd9AMYvk21JZsGJ2+0=)
2: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
3: fySblURiBoP5SziKdVGmimST7RI.crl (hash: fI6zBn64DB7gFZup37ayrIHkJ05BwIXKUwhqsmDRgEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e7:ff:58:09:f9:04:26:58:f5:1d:12:45:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=775e44ade8061f0999fae736de18ff271e778fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:1e:b4:e0:b9:8d:46:c7:33:64:ee:57:fe:
e6:c4:b7:94:3b:47:4f:3b:d6:a5:60:30:35:93:c4:
b0:6c:4f:fc:39:d6:a0:3b:0b:29:be:76:e2:a0:a5:
ff:46:c2:fb:67:d7:f4:54:c3:a2:dd:4d:a7:3a:fe:
8e:00:55:e0:37:9b:4d:57:6e:bf:33:c6:15:3b:28:
2a:5c:f7:9a:9e:58:35:c3:dc:14:3c:bb:b0:06:48:
ef:1b:7f:ca:02:03:7f:4e:c0:f2:71:49:2b:d3:fb:
21:12:2d:79:65:d5:b2:75:d6:fa:03:0a:07:27:0c:
83:e8:53:fd:f3:80:fd:78:53:8e:a2:6e:ea:0e:bf:
03:39:5f:a7:b6:ba:70:46:31:21:39:2d:82:0c:9b:
01:63:64:de:6d:63:d4:3b:22:55:fd:4b:66:49:a5:
2d:2a:bd:71:58:57:b0:fe:b0:96:26:e6:d2:b2:66:
91:fc:5d:44:44:2a:e0:b5:5f:3d:4a:f0:3d:64:86:
18:32:61:c4:a8:80:c8:03:0b:2b:b2:69:ed:04:7e:
d0:52:d1:2b:8b:10:3b:c3:ee:a9:66:63:98:6e:86:
e4:19:a7:ff:a5:75:f1:7a:e0:87:7c:0e:c0:eb:85:
c1:a9:44:d8:ce:42:e7:e1:d4:9d:8b:f3:39:cf:12:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:44:AD:E8:06:1F:09:99:FA:E7:36:DE:18:FF:27:1E:77:8F:BE
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6e:7d:2e:e7:df:f0:f2:c2:f5:89:cb:1d:93:8f:6c:9a:c7:
09:8f:66:8b:5a:fa:7d:0a:b0:1e:14:62:ff:50:07:71:85:10:
c0:60:48:4e:db:e9:c0:20:c1:11:5a:1f:e6:06:8b:c3:0b:9d:
c5:c0:bb:1c:d6:1e:53:c7:10:dc:15:d0:d0:60:20:64:7a:bb:
7d:bb:47:df:e1:23:f9:2f:17:c0:2f:18:c3:9b:17:61:6f:27:
e4:4d:d8:09:7f:30:14:09:ec:16:5b:b5:48:3d:c1:ae:ca:f7:
e8:69:15:b3:68:c4:e1:aa:cc:18:f4:82:4b:d8:7b:72:40:3b:
54:4b:53:9c:9a:c5:2c:0c:d1:e8:0f:26:92:9a:37:47:44:a6:
fc:42:bc:f8:39:7b:51:69:aa:a9:4e:1e:2b:13:9c:28:f8:ed:
38:9a:65:c5:c5:cc:5e:36:27:42:e8:fc:a7:c2:c5:7c:c2:ed:
3b:95:f7:f1:90:e6:60:8b:04:97:e1:5f:c1:7f:61:6c:dd:9f:
fd:22:42:1c:be:05:50:c3:96:78:e2:1a:1c:29:bb:9f:39:1c:
b3:d2:0a:2e:04:cf:dd:8a:96:2b:23:c1:c4:6f:21:f0:68:88:
29:ed:4d:44:84:3c:ea:42:9b:62:c6:4c:06:bb:44:1b:ec:7b:
d3:bb:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:35 2026 by rpki-client