Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
File: FXPG9nseOPvBEuPu_dWM6PGBmhg.mft (raw, json)
Hash identifier: vzC4yIDGuFG5UmZ+Vreu4B47Y7qgRpJl3YWU+5V1AWU=
Subject key identifier: 29:A2:2D:32:B5:58:7E:13:4C:05:0F:5B:48:D4:9B:5F:F3:DF:24:19
Authority key identifier: 15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
Certificate issuer: /CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Certificate serial: 01A1268C0F5D8F1A64D2FBC4D9806C4446DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
Manifest number: 5A
Signing time: Sat 10 Oct 2026 16:01:15 +0000
Manifest this update: Sat 10 Oct 2026 16:01:15 +0000
Manifest next update: Sun 11 Oct 2026 16:01:15 +0000
Files and hashes: 1: 2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa (hash: cwU5pAf2dP5NYzTVspwr70DBPw/O8TM1hJgcxejxVzw=)
2: FXPG9nseOPvBEuPu_dWM6PGBmhg.crl (hash: /dyXXkv43W/AYR/WVLYbPJH36xhmT1E8dPxRO3sHUvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8c:0f:5d:8f:1a:64:d2:fb:c4:d9:80:6c:44:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Validity
Not Before: Oct 10 16:01:15 2026 GMT
Not After : Oct 11 16:01:15 2026 GMT
Subject: CN=29a22d32b5587e134c050f5b48d49b5ff3df2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:13:ac:cd:c7:a0:0b:e6:17:f1:41:ff:50:
44:bc:ab:a2:23:82:99:82:cf:ca:5c:96:35:d8:b2:
21:07:4c:d7:01:b8:1f:59:2d:46:2c:fb:c3:6c:a4:
24:40:1a:b7:77:3a:ec:69:e3:8b:63:a4:eb:7c:0b:
e3:3b:6f:ba:f3:f4:8a:f9:f7:62:5c:bc:05:6a:ce:
fe:91:5c:5d:8f:4c:b3:19:83:d1:14:1f:95:bc:d4:
7b:f0:1d:f9:3b:27:e3:35:ca:0d:60:00:f1:90:9e:
70:4f:55:f8:6c:f5:cd:c6:44:20:d5:4e:f9:6d:e1:
c8:dd:9d:b3:4a:50:20:ce:ac:9f:a0:4a:7f:52:2c:
8b:e3:df:ad:c8:4a:38:88:fe:cc:3e:9f:36:94:29:
91:fb:4e:3c:48:dc:81:28:60:39:6d:3f:2a:8c:a6:
3c:07:f8:d7:ba:c1:eb:84:bb:ff:00:9f:db:e7:3f:
53:51:34:62:6b:c6:b6:e5:5f:13:08:e2:95:a5:0a:
e4:00:1c:f2:49:04:e0:93:cb:a2:b6:87:18:5c:b4:
08:1f:3d:a7:bb:5e:6e:fb:61:61:74:b0:93:b7:a0:
05:00:96:08:66:c2:ba:c7:94:ff:d0:e5:1c:3e:c8:
2c:ae:29:ec:f7:68:75:89:4e:3b:e4:61:51:b0:0f:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:2D:32:B5:58:7E:13:4C:05:0F:5B:48:D4:9B:5F:F3:DF:24:19
X509v3 Authority Key Identifier:
keyid:15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:47:b7:f0:05:e7:74:5e:b7:ab:e9:61:e7:0b:75:0c:29:a5:
46:ca:53:20:18:2e:cb:21:55:3a:1d:7c:47:84:9f:e8:9d:bf:
71:70:45:d7:9f:81:9d:a4:19:4c:83:e3:39:df:e1:eb:7e:0d:
08:cf:56:76:af:a3:b0:93:e2:64:cd:c9:83:2a:8e:d1:60:0e:
ed:2a:a0:53:77:94:ae:83:cc:34:c8:35:19:d3:97:99:0f:8c:
7a:ad:6a:4e:38:77:d9:6a:ba:d4:31:44:68:4f:59:56:d2:d7:
d9:f6:84:ae:3a:86:ab:21:c4:99:c0:88:c9:4a:69:2e:1d:b3:
40:32:a4:dc:5b:da:a8:5f:3c:e8:c4:1b:a3:1c:79:6a:1e:6c:
5d:93:9c:e2:12:48:87:8c:60:a2:dc:96:c4:8b:03:60:24:1e:
2b:48:7c:55:25:0e:a6:24:79:01:5a:64:4a:79:96:1c:d0:08:
5f:6e:84:6c:7e:42:21:a0:46:ee:4c:b6:06:57:a9:9f:30:ba:
e1:8c:3e:22:08:26:a8:07:42:76:db:01:a5:55:c8:d7:6a:ea:
34:8e:5d:dd:fe:20:af:dd:b4:b9:ff:1e:c2:4c:01:67:8c:65:
2b:b7:75:9c:af:b6:aa:4e:e2:7a:11:47:39:78:72:5d:d0:5b:
1b:d6:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:41 2026 by rpki-client