Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: CF2cz9PtMisay3SctVO28uz0WbuX/OCknfrcXyQZm68=
Subject key identifier: 83:E1:1D:00:14:F0:69:B7:9B:81:0C:9A:48:7F:90:5C:CE:14:96:74
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 01A0D4CAEF32EFF54C092A970EC7D1BDE4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0DAF
Signing time: Thu 24 Sep 2026 19:01:04 +0000
Manifest this update: Thu 24 Sep 2026 19:01:04 +0000
Manifest next update: Fri 25 Sep 2026 19:01:04 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: tV0Jcji6Kt5ntmse029LJF8gfdugMXrF9n36hqfS8vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:ef:32:ef:f5:4c:09:2a:97:0e:c7:d1:bd:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Sep 24 19:01:04 2026 GMT
Not After : Sep 25 19:01:04 2026 GMT
Subject: CN=83e11d0014f069b79b810c9a487f905cce149674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:ee:19:39:0d:c4:ab:34:f8:c6:c1:e0:55:
8f:20:bd:06:ec:a7:0b:bf:06:d8:ef:c9:4f:f7:1f:
5a:76:eb:c5:be:9e:15:e3:c6:ca:32:b0:0e:16:0f:
50:13:b5:b7:4f:fc:b1:06:28:96:b7:39:a2:30:0f:
92:51:08:76:61:ff:93:ba:d0:86:91:00:84:14:8d:
f0:ab:13:24:00:69:d4:a9:55:fc:aa:09:49:17:f1:
a5:3e:f2:ab:72:8c:2a:d6:88:42:6b:12:17:a7:75:
20:48:7d:67:62:0b:0c:9a:59:4f:d4:09:15:48:7a:
26:a1:9b:5c:70:0f:79:a2:dc:e8:e9:85:88:1a:6d:
01:1f:ce:a1:2a:d0:87:cc:81:92:16:80:37:ec:3f:
b5:de:98:6a:f3:08:07:57:b5:86:1a:e9:63:f7:f3:
da:59:38:21:2a:cc:bd:0a:82:9a:ee:1e:7a:56:85:
4c:36:47:47:9e:16:b1:ac:10:f3:12:9e:9d:ff:ad:
48:5d:f6:ac:e8:80:62:fc:4d:f0:0f:2e:ac:ca:9a:
52:1b:27:46:0d:c4:db:24:83:7a:01:1f:0d:41:0c:
68:8d:76:73:54:34:56:c6:47:58:20:d9:d9:ff:ca:
ff:e6:9e:7a:69:cf:3a:12:0a:39:e4:a3:96:00:09:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:1D:00:14:F0:69:B7:9B:81:0C:9A:48:7F:90:5C:CE:14:96:74
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:10:b7:d6:46:ea:c2:76:4d:e5:71:6e:7c:1d:5e:5c:df:9f:
e8:fe:87:34:14:fd:08:2f:66:9c:e3:c6:ba:c5:db:13:7c:6f:
16:37:9d:a2:0d:31:2b:62:49:9f:be:c7:7c:66:02:f1:35:be:
7f:95:a0:f8:8a:73:51:26:2a:59:c7:05:c7:32:ed:98:51:d3:
0a:03:3e:66:41:ec:12:1b:3a:a5:c4:f5:fc:ff:9d:dd:34:80:
b7:0c:6b:a4:f8:7b:08:fa:6b:1c:01:1f:01:7b:6c:cb:7f:07:
04:d9:8e:f3:fc:86:d1:9e:1c:76:45:20:6b:c7:35:05:e4:14:
6e:e1:bf:a6:2c:ec:3e:f0:6b:6e:1c:06:36:3d:d8:2d:e5:f1:
6d:0c:6d:3e:48:21:3d:0a:fd:99:4f:ba:c8:5a:2e:0f:e8:ed:
0b:f3:5d:cd:5e:ab:a3:68:2e:e1:6d:d6:a3:34:ed:15:db:cf:
15:00:3f:89:bd:1e:83:aa:a6:7d:27:12:e1:46:94:fb:ba:d8:
ff:5f:7e:3c:d2:35:7b:0f:90:90:be:b9:66:6d:24:08:c7:8d:
f8:41:f3:93:fc:82:97:96:c5:9a:83:e8:f4:2d:b6:6e:91:e2:
bc:8d:5d:cc:f0:db:3a:07:79:a6:66:f6:c5:ca:cd:2e:3b:f5:
1b:7d:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:21 2026 by rpki-client