Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: 8ex+uCGH1EinI9wZ8kbnwaXHW3+vVuGtqXBdhDIHajo=
Subject key identifier: FE:87:BA:CE:CB:D5:28:C9:BD:BB:06:D3:63:8B:D3:D1:AE:B2:54:95
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01A12B44BD30869F659D3DCA36088A1460F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 09DB
Signing time: Sun 11 Oct 2026 14:01:27 +0000
Manifest this update: Sun 11 Oct 2026 14:01:27 +0000
Manifest next update: Mon 12 Oct 2026 14:01:27 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: +kJIF5vcw/SlVOBdMRvJ25rurs6vS8b5/biEROrQjc4=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:bd:30:86:9f:65:9d:3d:ca:36:08:8a:14:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Oct 11 14:01:27 2026 GMT
Not After : Oct 12 14:01:27 2026 GMT
Subject: CN=fe87bacecbd528c9bdbb06d3638bd3d1aeb25495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:12:6d:60:c0:8b:9f:d7:6c:53:59:05:50:
d3:9b:b1:21:fc:34:2e:69:ab:b6:95:bf:51:d8:80:
6f:1e:99:7f:4a:5e:12:05:cf:9c:5a:68:6f:3d:b6:
b7:96:28:e6:c1:e3:b2:a1:ad:39:ac:e8:fc:ae:9b:
ac:c2:92:1a:27:2c:e9:54:b4:45:31:26:1b:4c:1d:
4f:2e:2a:f1:48:94:f2:6d:76:8c:c6:5b:9d:8c:be:
71:6f:60:3c:11:b3:8a:fc:52:c8:d0:00:f5:f5:ae:
d4:4b:8d:96:ba:9b:c7:e9:55:b2:ba:02:4d:78:da:
94:5d:f1:1b:c7:dd:e0:22:44:1d:5a:9d:47:4a:1c:
1f:5a:4b:a4:15:99:66:e8:43:8d:81:8e:24:14:48:
b5:91:f4:af:a6:f0:48:a3:04:0e:65:6a:7f:58:aa:
e9:4d:dd:74:80:1c:52:aa:9e:28:78:4a:db:80:f8:
a3:ad:b4:a6:75:ac:96:a2:57:de:a9:62:7c:fd:05:
c0:53:5d:86:23:d3:ad:ae:f2:29:cb:37:66:10:e3:
d8:b2:09:7d:8d:cb:b9:30:21:5f:50:0d:f7:d1:21:
cb:bd:28:4e:7a:85:cf:67:9f:b7:ee:20:96:3e:99:
ea:1e:8f:3d:1a:d5:a1:74:6d:48:31:9b:ac:8f:20:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:BA:CE:CB:D5:28:C9:BD:BB:06:D3:63:8B:D3:D1:AE:B2:54:95
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:90:76:4d:11:5d:74:fb:f1:34:d9:38:5a:f3:02:be:f0:2e:
c6:3c:a2:da:6e:e7:99:1b:1e:50:57:cc:3a:93:7f:02:c1:a2:
d6:e2:ec:b9:1a:c8:92:1e:96:56:e3:50:dc:c3:d0:a6:e2:04:
87:f8:71:40:f2:0f:4a:b6:bf:83:9d:d2:3a:c9:09:f7:0f:0b:
71:be:48:39:ab:d8:a6:7d:5e:1b:ae:d3:2e:47:e6:8f:35:8c:
64:8b:4e:77:ae:63:8c:c5:35:ee:df:5b:58:33:3c:06:69:4a:
89:d6:eb:21:4f:ce:46:83:74:08:84:70:af:85:63:90:12:9f:
f6:90:73:3d:a5:be:4d:09:7e:a0:40:90:e2:50:2f:77:b1:76:
72:95:ee:76:0e:05:39:13:43:f2:a3:1a:47:5b:a9:02:56:d8:
ca:80:03:b3:68:ba:28:82:af:14:69:f5:38:3f:0d:66:c1:9a:
e6:32:df:75:31:d2:c4:bd:7c:a1:20:62:d9:69:60:95:dd:ed:
66:d5:3d:7d:65:da:1f:46:36:81:09:f3:00:db:a5:f1:a7:f4:
4c:1d:29:17:62:38:62:2b:c5:90:2a:3e:c5:f2:46:f3:1f:b5:
3f:27:ac:71:46:7b:2b:a7:75:9e:4c:7d:49:0c:8c:e4:34:c7:
a9:38:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:25 2026 by rpki-client