Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: jZxJLh6PDn78hA5ndtZ6OU9VuEXmwihcDykot5295PY=
Subject key identifier: E0:D2:0A:03:7D:A2:38:B4:C7:BA:4D:13:D7:69:6B:B8:7A:0B:CE:6F
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01A132FE54B62676614CEB40B0A88D73789B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 09DF
Signing time: Tue 13 Oct 2026 02:01:30 +0000
Manifest this update: Tue 13 Oct 2026 02:01:30 +0000
Manifest next update: Wed 14 Oct 2026 02:01:30 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: dPNKT+vVoSGiX34tG9//4a5qPAI+vT1kUl5nBioXiP0=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:54:b6:26:76:61:4c:eb:40:b0:a8:8d:73:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Oct 13 02:01:30 2026 GMT
Not After : Oct 14 02:01:30 2026 GMT
Subject: CN=e0d20a037da238b4c7ba4d13d7696bb87a0bce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:11:1a:91:ca:f0:77:b5:26:92:59:67:75:
0d:66:e6:fe:4d:76:20:6e:19:ba:77:e2:21:37:65:
65:59:95:c5:fd:b4:e7:48:b1:37:3c:5f:13:71:f7:
0d:a4:46:08:7c:d8:ff:5b:e0:cd:9e:c0:51:5a:fc:
a5:15:4f:7b:49:ec:c7:4d:f2:61:a3:a7:5b:f7:ac:
07:b6:7e:c9:a5:13:c5:0e:55:b7:4d:ab:df:ce:8d:
aa:93:ba:f0:e1:60:b8:ea:c9:01:b0:07:60:c4:95:
cf:23:02:8b:aa:8f:6f:17:15:f1:ab:8d:92:7f:4a:
b5:8f:9f:a1:ef:70:a0:7d:11:e5:fd:54:e5:2d:b4:
4b:a0:85:32:fe:f5:0e:89:40:9b:17:2e:87:dd:06:
a1:03:d6:11:43:3f:23:e8:2b:ec:4d:fa:a2:c0:c9:
25:f0:1f:2b:40:5e:12:36:d4:6d:14:13:86:99:03:
0e:20:d1:44:73:8f:05:ac:c2:f4:43:94:75:19:47:
38:6d:09:44:48:2f:c3:2e:4b:d0:80:1e:5f:7b:d9:
d7:3a:b9:0f:f2:38:4b:b0:25:8f:ac:c8:a7:1c:89:
bf:1b:51:1c:9d:3f:41:03:e8:e3:0a:09:af:e5:42:
86:fe:24:37:ad:ba:2f:28:33:65:27:00:73:0d:40:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:0A:03:7D:A2:38:B4:C7:BA:4D:13:D7:69:6B:B8:7A:0B:CE:6F
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:07:dd:ef:8b:1a:17:eb:c4:0a:d5:d4:5c:db:2f:20:b7:24:
b1:00:4a:8c:28:f7:b2:a7:da:45:e2:8a:e5:cf:0e:94:7a:bc:
d2:38:58:a7:ca:d6:d9:a3:85:9e:68:4b:fc:1d:0d:14:47:67:
68:a9:32:8c:43:43:8a:b1:6b:5b:18:09:3f:bf:77:04:97:57:
e4:15:b9:b1:a9:e9:4b:e7:5b:c0:74:ed:78:3c:2c:89:e1:1e:
c3:43:7f:c6:0d:8e:62:dd:5d:e8:bc:1a:e7:93:05:b8:5a:a8:
e7:82:55:76:c6:7f:c7:c6:3a:cc:d4:4e:16:f5:a6:1c:f1:b2:
c3:b7:fd:58:55:50:2c:b7:ba:f0:56:5d:bf:85:94:8c:4b:26:
d9:4b:d3:8b:76:26:25:4a:d4:9a:df:be:b4:02:64:db:00:79:
85:e0:e9:80:46:99:41:85:a1:5f:69:be:8c:7c:24:75:60:72:
c9:04:74:18:8c:1f:35:5d:10:35:7f:fb:18:a0:af:91:39:4a:
02:57:fa:21:77:93:7d:22:2c:92:53:e5:a8:83:f5:80:85:8f:
c5:95:fc:b1:52:d0:e1:3d:79:2e:c2:da:e7:87:fe:eb:a4:78:
3a:55:04:82:4d:e5:9a:16:38:9c:ed:cf:69:9c:60:85:3d:4c:
bb:06:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:04:09 2026 by rpki-client