Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: znJIShF/JmsvIWpNjSYXmI43uxQ3LbhrhK9c/ulvJMA=
Subject key identifier: 06:8A:B0:99:B4:FD:A9:FB:50:49:69:DF:E7:A3:4F:05:9C:A9:1E:00
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01A0E2BE102F8C6B901CBBEE71E59023E4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 0A2B
Signing time: Sun 27 Sep 2026 12:01:41 +0000
Manifest this update: Sun 27 Sep 2026 12:01:41 +0000
Manifest next update: Mon 28 Sep 2026 12:01:41 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: ll58E+jpOr6aG7DZ3ZRwn0KLQ7P+oLQcSIq+ppsGMfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:10:2f:8c:6b:90:1c:bb:ee:71:e5:90:23:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Sep 27 12:01:41 2026 GMT
Not After : Sep 28 12:01:41 2026 GMT
Subject: CN=068ab099b4fda9fb504969dfe7a34f059ca91e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:1d:69:04:b4:bc:98:47:d7:fc:84:65:82:
c5:cb:64:5d:2e:fd:86:40:49:e0:e6:8a:b9:cb:c2:
78:65:7f:d5:67:a4:eb:27:a0:6c:d8:9b:5c:e3:30:
3c:14:33:6e:c0:57:31:31:56:9c:9d:b8:9c:9a:2b:
34:8d:bc:d3:54:5f:0b:c7:29:56:69:12:2a:6d:0d:
93:51:3a:7e:36:fe:cc:31:a0:3c:89:ce:c0:1b:81:
ff:48:80:4a:4f:b4:1a:7c:bb:c0:d1:4b:4d:23:16:
4b:8d:a1:f2:6e:a3:1d:8d:30:5b:03:81:2b:6a:e9:
47:e7:77:28:07:8a:2d:5e:0c:20:e5:10:af:95:0e:
47:37:d8:ad:74:99:83:20:12:fd:dd:34:2c:6c:d5:
87:2d:78:8b:eb:49:9c:21:67:31:4c:27:ee:f4:8f:
5a:18:e8:1a:f9:1d:b5:80:8c:4d:c7:5d:f3:b8:54:
05:b2:48:30:a6:bb:33:6e:8d:eb:21:cd:54:a5:80:
c9:ba:78:20:9c:fc:3d:ce:8a:c2:81:cb:8f:63:f2:
8e:95:c5:b4:a5:89:8e:90:2f:92:e5:8b:28:52:3f:
16:0d:2e:05:e3:01:a0:a1:ac:89:ac:de:af:8c:de:
14:2f:96:36:8b:2e:e5:70:ba:95:c5:a3:59:18:24:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:B0:99:B4:FD:A9:FB:50:49:69:DF:E7:A3:4F:05:9C:A9:1E:00
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6d:7b:cd:2a:74:f8:bb:ed:f8:d9:71:c9:25:a4:1d:e1:2a:
88:cd:3d:20:c3:9a:3c:f0:ff:f7:20:53:14:6a:40:de:4a:48:
be:03:32:f5:e6:a9:29:fe:d8:ac:1f:18:e6:a3:82:e0:90:2e:
6a:94:9f:37:52:46:b2:ad:6b:9c:08:ff:9f:f5:18:11:69:f3:
1a:9e:97:a7:7a:cd:a9:4c:1a:1b:39:46:ab:24:a6:2b:c6:ec:
68:09:58:e4:8d:59:a1:23:86:cf:3c:22:13:95:04:a4:90:f5:
e4:98:12:dd:89:fa:0c:5b:62:25:6b:4f:6f:f4:5d:d6:28:16:
81:8a:73:0f:81:0a:1a:08:0f:c7:84:71:2b:01:31:1b:9a:93:
71:ba:07:c4:26:40:60:8b:33:77:81:b0:28:5c:1f:aa:ad:ef:
a8:f0:b2:21:41:5e:48:d5:60:1a:e7:7d:bd:c5:48:9c:27:7d:
03:14:8c:43:9a:37:72:47:59:62:8f:ce:cc:a8:a6:e6:58:24:
f9:71:ac:a2:54:e7:97:57:bd:8e:59:41:04:d7:88:03:c6:98:
c2:5c:a5:37:aa:98:54:70:db:36:19:83:c8:2c:73:f4:e5:1f:
2c:ef:02:1a:5a:3a:71:de:ea:2c:7e:75:59:b1:6d:93:fc:61:
d3:e9:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:19 2026 by rpki-client