Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: dZo6OYzPFgS7kFD3Ioi95w9JFkpohGzl77qw8W9Uk4k=
Subject key identifier: 05:DB:3D:CF:71:E6:05:F7:EE:AC:A0:A4:2D:A4:FA:C3:88:E6:92:25
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01A0F23180A66F559CED67847C23664EC0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0A29
Signing time: Wed 30 Sep 2026 12:02:05 +0000
Manifest this update: Wed 30 Sep 2026 12:02:05 +0000
Manifest next update: Thu 01 Oct 2026 12:02:05 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: AGsztZ3Bd54l2T/zDq0rsmXKW0Erw/S9o7zSXsNErvI=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:80:a6:6f:55:9c:ed:67:84:7c:23:66:4e:c0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Sep 30 12:02:05 2026 GMT
Not After : Oct 1 12:02:05 2026 GMT
Subject: CN=05db3dcf71e605f7eeaca0a42da4fac388e69225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:18:10:b8:43:ea:05:6d:86:ea:df:6d:1a:
58:fd:ac:20:4e:73:1c:ee:f9:ec:8a:2c:e3:c9:db:
9b:ce:08:4c:98:a9:ad:f1:0d:8f:e4:c0:8d:64:52:
d0:c4:5b:a2:e6:6e:58:a1:11:06:48:e0:20:d9:58:
f5:ad:41:0f:93:ff:05:ac:0d:57:0b:64:4c:d3:b8:
2c:fc:ee:69:be:76:5a:bb:e2:8a:18:78:cc:e2:a3:
5f:23:dc:aa:b6:2e:75:76:1e:10:04:02:fe:75:00:
61:b2:4d:2b:7f:91:89:19:d1:02:c7:4b:a2:6a:f9:
87:7b:0a:b1:47:64:70:02:8a:db:28:a5:a9:a5:8d:
86:85:44:0b:03:3c:65:30:1a:f9:8a:0d:61:5b:8a:
21:bf:80:47:d8:c4:78:cb:7c:3c:1b:62:f1:a9:49:
74:85:11:85:75:21:53:48:bb:dc:b2:e3:3f:29:24:
76:6f:3b:7f:9c:8b:5d:50:26:6a:85:3c:e8:ce:d9:
5e:a0:ce:ed:2f:b5:9b:2f:0c:da:68:78:bd:d5:7b:
62:6a:9b:10:63:e9:0d:c6:7a:ba:b6:93:ca:9c:33:
0b:de:8e:29:cb:d2:98:7d:51:bf:29:ca:cb:01:93:
20:11:8c:7b:3f:83:69:14:16:e6:6b:87:94:82:f4:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:3D:CF:71:E6:05:F7:EE:AC:A0:A4:2D:A4:FA:C3:88:E6:92:25
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:65:04:e6:98:80:37:0f:0a:3d:e0:41:c0:e0:3d:a3:9e:e8:
cf:a5:c2:6a:7b:b5:10:c2:60:4c:a9:8b:be:0d:62:63:da:f1:
88:d6:eb:97:43:a7:27:19:38:35:71:b1:cb:f1:2e:65:38:bb:
c6:f9:22:7a:46:9b:b9:9d:f1:7a:61:96:25:11:a7:80:aa:e2:
a9:16:14:29:b7:38:72:1f:4a:af:1e:0e:f7:89:fe:ca:2b:bb:
b7:d2:a5:bc:0e:4d:ba:8d:74:71:14:a0:07:af:a1:c3:54:48:
7e:8e:d1:49:38:26:ab:98:cf:a2:a4:f7:29:7e:66:ea:b7:c6:
79:9d:cd:7f:49:68:69:32:9b:26:c8:40:82:a9:11:ca:ed:24:
b1:e3:d4:bc:32:9b:4b:9e:db:b4:44:13:f8:0f:ca:8d:77:19:
f4:06:ae:08:da:53:04:a6:fb:ac:41:52:f6:ec:46:2e:30:d4:
9f:6f:bb:f4:60:fb:0a:e5:7d:46:df:1a:c6:bd:b8:a5:88:72:
e0:43:fb:9f:e6:44:12:35:60:c8:e6:2f:17:61:b1:63:41:3a:
80:47:a5:d8:28:7f:f2:5b:c0:55:c6:5a:12:89:0e:1f:e4:70:
8b:8b:af:68:2c:3d:fb:55:e4:32:40:d9:1a:fe:d9:78:61:0d:
92:c6:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:04:12 2026 by rpki-client