Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: WXRJPoxECD+B8rPaihLshGzrXSjAeaugnAyINqeayNU=
Subject key identifier: 8C:F0:F2:FA:A5:C3:3F:38:A5:54:9B:AC:A5:DC:09:AC:20:57:15:31
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 01A0F1FA3D2C9201A936FFA20B897991757B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1A7B
Signing time: Wed 30 Sep 2026 11:01:43 +0000
Manifest this update: Wed 30 Sep 2026 11:01:43 +0000
Manifest next update: Thu 01 Oct 2026 11:01:43 +0000
Files and hashes: 1: 6EIMxUGXsynPo9rEQzJnVPG98WI.roa (hash: VbFvYrwcCtKMyImGiFiN8H8Az5Dp2KBcZOXOTXrbmhw=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: bx/BrXQC5pMNFre6iRUcqqUpD9rEikjxWQO43emEptI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:3d:2c:92:01:a9:36:ff:a2:0b:89:79:91:75:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Sep 30 11:01:43 2026 GMT
Not After : Oct 1 11:01:43 2026 GMT
Subject: CN=8cf0f2faa5c33f38a5549baca5dc09ac20571531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:06:97:0b:65:fe:61:2d:13:72:93:13:8f:
ff:86:d3:4b:56:8b:e3:e3:5b:d7:40:bf:1f:41:c9:
88:48:42:2f:d7:de:2c:92:58:d6:5d:06:79:1a:55:
d0:05:8e:26:c2:92:56:42:2d:b5:ba:d8:c8:c8:3c:
30:a7:9b:53:49:e8:28:df:c6:ce:49:16:9d:2e:d9:
7e:09:f9:6c:a1:d5:c9:2e:4c:83:62:99:97:b6:90:
e8:41:74:ec:9b:7d:a5:66:79:63:76:06:b4:09:df:
98:ae:cd:76:76:9b:d0:29:eb:e8:05:f0:4a:82:0c:
0f:ab:12:22:de:29:fa:8e:a6:d2:eb:6a:bd:71:e5:
d7:4d:e9:7b:08:bf:3d:68:54:90:6c:6d:f1:94:b9:
b1:f2:d8:e7:58:de:a7:40:12:51:de:ab:12:8b:55:
07:02:40:17:d8:24:8a:16:0f:f5:d3:e9:b7:fb:d7:
7a:67:78:5c:8d:85:7a:6b:f2:94:a4:7e:22:19:d1:
ad:a1:7e:29:da:51:ab:85:bc:69:e6:f5:73:d8:0d:
d2:8c:ad:34:c2:5a:ff:29:50:65:23:83:d1:ff:b1:
a5:e7:cd:64:9b:6a:d8:74:2b:fd:a2:69:bf:a4:ab:
89:b4:12:ac:d6:bd:fc:c7:c9:28:18:20:3b:1b:88:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:F2:FA:A5:C3:3F:38:A5:54:9B:AC:A5:DC:09:AC:20:57:15:31
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:05:b7:16:a5:d5:5d:86:02:1d:4f:97:6d:5f:a5:76:ed:
16:1a:20:78:1c:00:ce:f8:79:2a:47:53:c6:15:6c:ba:de:5f:
65:d7:91:37:64:4c:25:6f:34:4d:74:33:90:a4:50:2f:c1:2b:
db:f5:b1:11:b4:33:dc:8b:9e:d2:9d:6b:70:33:75:b4:09:86:
20:1c:28:63:19:0d:b4:a7:5c:c3:54:15:01:53:f9:e5:9d:14:
06:95:43:b8:c0:70:3d:55:14:89:1d:68:97:f2:fd:10:47:b4:
2b:af:a3:a5:39:76:1f:ac:1f:f3:ab:1a:54:62:ea:ad:c9:c5:
dc:52:a9:c5:ce:78:14:94:c0:c3:a4:c6:c8:a5:f3:df:2a:c6:
98:57:de:e5:47:4c:f5:a5:b8:af:ff:3d:09:ff:6a:b4:4a:30:
1b:3d:12:55:1d:7b:50:c2:cf:4d:bf:8e:8e:e7:11:96:83:2d:
f1:5c:b9:67:8c:b0:f5:f8:e1:c5:f3:fa:a8:5f:4a:1e:d7:85:
5d:03:18:38:6d:e1:cc:06:f5:54:4b:4d:88:02:6c:07:9b:b2:
96:24:0d:ff:ef:e7:41:57:31:4f:87:1e:20:86:16:95:f9:b3:
f8:92:4d:bd:53:d4:5e:33:d3:2e:43:c9:48:02:e2:a5:15:29:
a8:95:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:59:13 2026 by rpki-client