Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: KtE3EklC6Kb0FC9J8nm9vfPF6oCFmMCtEh9p5jwLAfI=
Subject key identifier: DA:84:E9:15:FD:8D:3C:2F:2F:5D:F0:79:8D:B0:8E:0D:72:5E:4A:17
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 01A0D56FBCE01D9515562E846C467447039E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 0457
Signing time: Thu 24 Sep 2026 22:01:04 +0000
Manifest this update: Thu 24 Sep 2026 22:01:04 +0000
Manifest next update: Fri 25 Sep 2026 22:01:04 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: hq85ZDw0xdqHdeRpKb+7jlSM799corT4XmBHt7pnmlA=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:bc:e0:1d:95:15:56:2e:84:6c:46:74:47:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Sep 24 22:01:04 2026 GMT
Not After : Sep 25 22:01:04 2026 GMT
Subject: CN=da84e915fd8d3c2f2f5df0798db08e0d725e4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:ad:4e:9e:b1:f7:ba:23:c8:25:7b:d7:a2:
da:8b:2d:81:6d:7b:ea:b3:4f:51:71:77:f7:f0:a7:
ae:00:9a:a7:b8:8a:46:b6:30:43:e9:ae:3a:70:27:
89:ff:9d:cb:1b:3d:f7:bd:c8:4a:27:80:49:27:f7:
82:7e:0a:37:ff:3e:1b:52:53:98:ee:f6:61:b1:8e:
b2:95:bb:69:a2:d6:7e:e7:63:fa:bb:4d:2d:bd:cd:
90:d2:e0:d6:f3:c2:40:f3:5c:80:a9:fa:46:97:4b:
f4:75:30:3b:e7:b9:44:c4:e6:e8:5e:73:c3:ab:cc:
83:41:19:fa:81:bf:3d:02:c4:30:77:69:15:03:5e:
ff:79:e1:00:c2:39:5e:68:af:90:22:d3:0f:fc:e8:
84:5d:1b:b0:8e:7e:1f:8d:0c:b2:8c:cf:79:bf:49:
6d:01:7d:58:26:6c:fe:08:01:74:c1:0b:69:f5:29:
55:7b:2a:ce:ba:f2:ee:a2:6a:36:10:41:38:2d:8d:
a5:89:e7:1d:20:40:26:a0:28:f6:96:d4:b4:93:0a:
db:91:3f:3d:2e:e9:d7:39:82:15:9f:99:76:05:53:
c0:06:60:10:59:f5:6e:69:1b:b8:84:77:1c:c8:29:
e7:da:9c:26:1d:aa:cd:59:e7:3d:d5:87:9c:20:92:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:E9:15:FD:8D:3C:2F:2F:5D:F0:79:8D:B0:8E:0D:72:5E:4A:17
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e1:8a:16:55:09:fa:62:5b:03:3e:09:27:7e:57:07:85:01:
d1:4f:b0:bd:51:e8:39:67:5b:e1:f8:2b:cf:b0:60:a4:8d:0d:
db:3a:6f:d7:ac:a2:b7:d4:f9:96:d1:a0:d0:d6:81:21:82:77:
a4:81:9d:84:e4:9d:e7:1d:fe:4f:c9:a3:be:16:04:2d:85:3c:
f7:dd:f6:53:74:31:7c:1a:bf:7b:eb:f4:f6:af:ef:d5:1c:1a:
89:48:5b:7b:20:24:30:b8:4f:78:17:4c:ee:e0:bc:20:8d:87:
08:be:c2:33:5c:49:a9:b0:65:f0:9a:3a:20:62:b7:89:17:9b:
3f:de:3e:87:3b:03:28:dd:3f:a8:68:a2:2d:20:a1:d6:fe:57:
07:5e:88:49:29:6d:86:f3:f3:ef:3b:c6:8f:bb:6c:1c:c7:fa:
11:6d:9d:8b:1a:0c:d5:38:a0:18:f5:d2:04:08:e3:3c:8f:ae:
1e:47:42:27:09:74:fd:8a:d1:f4:b7:d9:79:97:60:f9:90:76:
05:0c:13:c5:03:44:43:d9:1d:1c:f7:b2:f7:23:87:95:10:74:
1e:09:b5:65:8c:bb:3a:29:8d:c2:05:d1:c0:94:b9:88:7e:e9:
af:a2:0f:ba:92:3f:88:5a:99:36:0e:69:0e:fa:00:e1:17:01:
5d:2b:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:23 2026 by rpki-client