Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: o4k9C7QLelRZV5MccAQkJD4jFu0WNffNDmr/lXmqPMc=
Subject key identifier: CA:53:E0:F7:2D:14:C5:5B:3D:E8:50:1B:38:AC:28:B6:A8:EC:3B:5E
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 01A0EC9C8C5F1B8C89E4535AD0BBF2E72F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 10:01:17 +0000
Manifest this update: Tue 29 Sep 2026 10:01:17 +0000
Manifest next update: Wed 30 Sep 2026 10:01:17 +0000
Files and hashes: 1: BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa (hash: PQRLVCa1vMzlo4kwd2qwNYT39XsjM74Jew0dEax8fpk=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: qCmShjamxEfWaIxIsu2ewh2uNgfiq8ht5SsEcBHiBYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:8c:5f:1b:8c:89:e4:53:5a:d0:bb:f2:e7:2f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Sep 29 10:01:17 2026 GMT
Not After : Sep 30 10:01:17 2026 GMT
Subject: CN=ca53e0f72d14c55b3de8501b38ac28b6a8ec3b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:d1:d7:81:a5:99:2f:89:be:cf:ba:04:11:
dd:ef:d0:e9:9e:c2:3f:f2:89:79:1d:ab:f8:27:a5:
b1:36:5d:b8:de:61:33:aa:87:38:09:1a:a2:46:ba:
5f:d2:76:8e:c2:16:3c:7c:74:ce:59:46:58:82:9a:
f3:4f:50:bc:40:b4:e7:8f:23:d7:5e:c9:b3:7c:21:
6a:2c:f4:61:41:3d:66:ae:d7:11:fa:b3:a3:7c:88:
b8:0f:cb:fc:1b:91:22:69:16:fb:79:0e:7c:32:b4:
59:ac:53:93:6e:d1:fa:a9:7e:76:d3:76:25:cd:a5:
6d:f1:ce:66:bf:ba:53:44:72:49:e7:35:07:90:7c:
b0:ec:75:39:cb:11:cc:4a:a1:36:65:c0:71:b4:17:
01:76:07:a4:3a:12:c1:e5:be:ad:6f:09:87:a7:4b:
de:10:2e:46:c2:c9:df:91:13:6e:85:51:ca:e1:b0:
a2:2e:7b:e9:66:5b:4b:12:4a:61:96:88:02:67:17:
89:b6:24:db:e7:f8:67:f3:e1:0e:cf:78:8f:7a:de:
53:35:66:71:ee:28:34:81:70:8f:65:03:28:61:a3:
50:fc:a6:46:3b:67:34:4b:4b:9f:8f:6e:11:7d:3b:
82:8e:15:17:7e:fe:d0:e5:c6:c5:59:e2:f6:85:b1:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:E0:F7:2D:14:C5:5B:3D:E8:50:1B:38:AC:28:B6:A8:EC:3B:5E
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:5e:db:4d:34:01:54:d4:62:3f:e2:76:d4:66:22:f4:90:
be:f7:a9:50:6c:78:6b:0c:44:5d:be:47:92:cb:3d:b9:b3:c2:
12:64:fa:e7:27:20:9e:f9:79:06:81:40:87:99:16:cf:da:50:
62:b4:46:df:03:c3:01:0b:4d:94:b2:22:da:73:cb:99:d8:24:
21:fd:e2:39:63:1e:5d:87:a0:93:db:6a:53:71:0c:ed:25:26:
d2:a8:fb:f9:94:0d:ac:d7:0c:76:54:20:88:76:0b:ef:5c:19:
6f:51:48:01:67:23:54:db:82:1f:b2:17:5e:53:1a:2e:2e:68:
cf:03:3f:45:9d:f4:ce:a1:3b:81:3c:bb:6e:f6:f7:83:93:d7:
63:12:92:ed:b3:17:79:8a:72:99:84:7c:2a:67:de:5f:c9:47:
1e:5e:b9:eb:1b:5b:0f:e8:56:6c:43:b5:bc:05:b8:62:c2:c7:
e8:8c:68:e8:be:64:d7:d7:8c:fb:05:00:8e:59:3d:16:0b:94:
5a:94:8e:5c:c5:a0:96:02:53:10:f5:f4:6e:9f:62:8c:5d:2b:
74:8d:46:97:49:a5:ad:cb:1a:11:f3:bc:13:61:10:d4:51:d1:
18:c5:70:ea:2a:d1:a2:fd:08:d5:b8:2d:22:f2:06:ea:ff:c3:
a7:f0:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:21:46 2026 by rpki-client