Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: 3pRhh5L0yb7mxQGxNa7R313fc2CX5CNrMSKGBfUpyNg=
Subject key identifier: DC:FE:35:8E:77:2E:69:D7:05:76:C3:37:98:80:AD:6B:E8:24:EF:C5
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 01A1035B4824C2933D320E55D3BB77E99F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 20:01:15 +0000
Manifest this update: Sat 03 Oct 2026 20:01:15 +0000
Manifest next update: Sun 04 Oct 2026 20:01:15 +0000
Files and hashes: 1: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: ETDEa6Wm6OrvnaU1bwaDNB6Phq6EEez/iisjGolZQok=)
2: p8BGzkeZTXu6qLWOB4ZXBUN3ORs.roa (hash: OVtfVKdOOl/LSMO1Y47imdhBsBHfrXhcCR6Y3Lh7Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:48:24:c2:93:3d:32:0e:55:d3:bb:77:e9:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Oct 3 20:01:15 2026 GMT
Not After : Oct 4 20:01:15 2026 GMT
Subject: CN=dcfe358e772e69d70576c3379880ad6be824efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:76:1e:c8:ab:ba:cb:59:ba:51:87:7e:e3:
e1:e8:72:8e:eb:a5:80:f5:e8:ef:fc:30:8e:c3:bd:
d8:ed:15:dc:00:3c:29:3c:e8:c0:ed:a3:07:68:e0:
f5:90:8c:83:0f:f4:93:be:fe:95:d5:d5:f0:98:78:
0d:54:0f:f1:33:46:ba:0e:3f:64:75:a2:28:80:bc:
14:11:87:06:9e:e6:9c:b9:e3:5c:ed:85:bc:ab:fd:
db:c6:c1:b4:b3:0c:ea:25:34:78:bb:b2:64:92:43:
b6:e2:94:b3:42:f0:4e:cc:3c:7a:30:21:33:83:02:
87:18:2f:fe:6b:22:35:ab:3a:86:6d:4b:61:da:a8:
9b:74:9b:10:6d:10:a5:8d:6b:b6:25:f6:ab:40:e0:
f6:49:6b:c1:a6:58:60:d4:a6:38:74:68:36:f7:fb:
9f:38:c4:63:a0:6d:51:00:ac:de:6e:c6:14:ff:3d:
51:8a:96:74:37:78:70:25:f6:80:1f:0a:94:8e:f7:
3f:93:f9:80:7e:dc:40:b6:52:78:ea:86:cb:a2:82:
98:a0:52:7a:f3:a2:40:60:ab:68:b6:42:ad:97:40:
5b:26:2a:d0:69:dd:55:00:8f:bd:82:c3:b2:ac:96:
8a:37:fc:43:b4:6a:5c:bd:07:5a:23:25:14:ff:d1:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:35:8E:77:2E:69:D7:05:76:C3:37:98:80:AD:6B:E8:24:EF:C5
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:77:fc:0d:db:fe:d2:5f:72:28:fa:60:dc:39:2c:da:d5:d8:
02:a9:04:27:d2:e1:23:4f:10:83:26:40:b2:09:e5:2d:a6:ff:
4b:7c:de:e6:6f:4c:b3:a6:cf:0d:2e:15:02:c9:50:e5:e4:e8:
43:38:33:51:ae:5e:53:50:3e:02:83:f0:9a:4d:b4:8b:49:1f:
2a:fb:9a:51:c4:c5:0f:16:47:16:aa:9a:4e:6f:69:89:40:ba:
83:d2:d6:f5:f5:c9:1e:ba:ab:ca:56:df:53:57:99:d3:48:51:
2a:bf:94:f6:8c:4b:e2:1c:c1:ec:6c:7e:97:24:92:52:f8:bc:
7b:59:5c:01:7e:b8:cc:0c:19:f9:6d:e9:90:a5:0a:5d:fb:ae:
cd:a4:89:00:3f:6e:6d:4e:f1:b4:8f:cb:4e:23:f4:70:62:57:
d7:62:a1:79:b0:a5:c5:f1:c6:80:62:b8:90:15:38:01:a5:4e:
f1:72:48:f1:39:83:6a:e7:af:86:7d:03:67:27:dc:90:9f:46:
ea:7b:4a:40:86:39:84:98:95:6b:2f:d8:d9:ca:ee:7b:0a:7a:
4c:40:23:b7:d6:ee:98:f2:9e:0b:2d:b8:e4:5e:0f:a5:78:1d:
1b:72:06:28:27:52:d8:c8:72:3f:57:e5:90:8b:4d:db:0f:ba:
24:ff:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:19:54 2026 by rpki-client