Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 3KYbyxtdXoC2vLwEeII/M+nK7ybTaDm0iOYtrnpWMFA=
Subject key identifier: C9:68:A3:F7:71:20:2F:D9:B1:FB:82:C3:B8:03:13:30:1E:27:AC:3D
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 01A0DA966511DD513F5C5A3AF6CB6FD2820A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 078A
Signing time: Fri 25 Sep 2026 22:01:24 +0000
Manifest this update: Fri 25 Sep 2026 22:01:24 +0000
Manifest next update: Sat 26 Sep 2026 22:01:24 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: TyoR0aRiv3FT1gD0xhDZOTBZu1+1hadgAv0W0k6qzJc=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:65:11:dd:51:3f:5c:5a:3a:f6:cb:6f:d2:82:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Sep 25 22:01:24 2026 GMT
Not After : Sep 26 22:01:24 2026 GMT
Subject: CN=c968a3f771202fd9b1fb82c3b80313301e27ac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:39:0f:56:24:85:cc:7b:92:3e:d6:41:bd:
52:29:63:46:d3:af:ad:17:20:fc:5c:38:41:88:b7:
ad:2a:6b:13:40:9b:d6:ca:f1:11:a8:a3:09:56:c7:
05:d8:99:48:d4:60:a2:02:28:d2:b1:52:75:4f:74:
61:ed:67:db:b6:8d:72:7c:3b:c1:d9:be:6f:86:b8:
00:7d:8b:e9:54:a3:d3:5c:a3:d0:2e:9d:41:a6:be:
7f:58:9f:1f:55:5a:ab:51:9d:0a:12:85:27:e0:21:
3b:54:5c:4f:d0:e8:5b:2c:92:b7:42:fd:8f:7c:30:
4a:ca:f4:03:5e:e9:3d:e2:d5:44:ef:03:90:5e:73:
40:40:61:c3:3f:84:07:9f:9c:62:fe:45:72:87:7a:
8b:f7:d9:e6:f5:da:e3:2a:60:02:5c:f3:dc:a7:e5:
b5:e8:e8:8c:d6:ae:2c:11:f9:fa:94:d1:66:56:26:
08:b5:92:e4:56:b5:90:8a:d9:ff:52:59:db:48:7b:
a2:0c:3c:27:65:34:4e:a5:57:6f:3f:f7:a7:01:6d:
62:8e:90:f9:78:ee:50:3a:69:db:e5:99:7e:0b:bc:
88:e8:58:82:f2:15:a6:67:26:4d:c7:51:5b:38:df:
e2:d3:6e:d1:d1:07:4a:32:67:57:30:2f:2b:e9:7f:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:68:A3:F7:71:20:2F:D9:B1:FB:82:C3:B8:03:13:30:1E:27:AC:3D
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:43:e0:2b:a1:a0:e2:0a:21:8c:83:ad:86:65:00:cb:1c:
31:c4:67:5d:48:c5:fa:c9:1c:9c:77:7c:f9:0b:98:4e:13:3c:
66:c1:99:16:82:05:1f:24:e9:b9:76:23:99:03:ef:a5:40:bd:
22:ec:8c:20:8b:88:ef:b7:e9:68:90:85:42:75:42:2e:1b:f7:
53:29:0a:2d:eb:72:f4:5a:82:ee:59:bd:73:09:90:7c:92:8e:
9d:b4:67:9e:7e:db:14:1e:c6:b9:53:bc:65:9b:a4:33:17:e6:
76:b5:d4:36:3b:45:0b:db:bb:cd:40:83:21:26:2a:8a:45:c2:
b6:fb:3a:5b:91:0d:9e:18:5e:ed:20:c5:19:9e:00:9b:9d:52:
85:7c:1c:7a:d1:c7:bb:da:d4:22:f9:a1:36:e6:5c:e8:b5:8a:
a7:a1:72:a5:93:bc:c7:d0:ff:63:9a:1e:d0:9c:88:bc:f9:38:
75:0a:89:f7:91:7c:2f:6d:dc:6b:1b:c1:6f:db:be:ba:51:cd:
44:d0:c6:f1:cf:a4:a9:2d:7e:a0:49:40:cf:ec:54:c5:5f:8d:
ef:1d:67:33:82:90:93:ef:3d:4d:4a:d8:c3:54:0e:fd:81:3f:
68:22:84:2b:b1:e5:0c:0e:ff:dc:0e:ca:1f:34:1f:28:da:e9:
b3:3a:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:59 2026 by rpki-client