Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier: AiAz2l+7ST1zZk1o6NePbYDUrKFr1jL86hU7gyZG8Gc=
Subject key identifier: 7D:99:BF:A1:BA:FC:E5:25:0C:B5:71:9B:51:25:E5:E7:07:3D:00:D9
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01A0E061C02D8B91AB4DCCF1509F64F4DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number: 1561
Signing time: Sun 27 Sep 2026 01:01:37 +0000
Manifest this update: Sun 27 Sep 2026 01:01:37 +0000
Manifest next update: Mon 28 Sep 2026 01:01:37 +0000
Files and hashes: 1: 3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa (hash: dC1Jmhk6Q3zkT4ET8SP9YRaPacsXX6m/6++3eHhj2g0=)
2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: YqMkry+MKRYQyiFTdG/n7apriPCfnn7uNaod+emPltk=)
3: cKcoRWHQwfauJJ79HMNTxO8TArE.roa (hash: qSclfiqQpyIPt0VyXaw1cPESon9MZyiR7MxfOycVKxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:c0:2d:8b:91:ab:4d:cc:f1:50:9f:64:f4:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Sep 27 01:01:37 2026 GMT
Not After : Sep 28 01:01:37 2026 GMT
Subject: CN=7d99bfa1bafce5250cb5719b5125e5e7073d00d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:73:c0:28:d6:8f:27:4e:84:23:59:09:f0:
62:cc:41:1c:94:72:18:1f:c0:24:32:9c:db:0b:54:
72:45:59:d3:1e:6f:7a:fe:59:d4:ef:1f:b2:07:d7:
36:be:01:69:de:fe:70:e4:de:54:42:72:64:be:eb:
e4:8d:cd:d0:cb:bc:c5:d7:73:e5:2f:a6:06:84:9c:
71:54:4e:0f:a9:be:17:0e:51:fa:d5:6f:39:31:5f:
97:cf:41:8a:05:29:0c:f8:a8:b7:53:7e:58:c7:53:
92:a0:50:bb:61:d1:0e:f4:ab:f9:f5:d9:af:6a:72:
1d:e6:2f:c8:26:d7:76:52:9d:99:12:27:08:40:31:
80:08:65:af:57:99:9a:4a:ec:b9:ce:a9:57:2c:ec:
58:c4:3b:13:d0:c5:4c:2e:fa:9e:66:8e:84:81:09:
3f:ef:df:c2:bb:47:a1:8f:db:63:ad:2d:e6:c0:22:
8b:a0:b3:18:2d:93:53:25:1b:50:84:36:8b:b3:19:
f8:96:5f:4b:1d:77:29:22:ec:5d:44:95:c3:8e:45:
96:35:56:12:a8:7d:2e:f4:a7:47:9a:89:96:4f:d1:
59:43:e8:ff:9c:b6:e2:46:b2:05:ea:a1:9f:62:ef:
d2:65:cd:63:6e:e5:7d:8e:b1:31:d3:b6:8b:7a:70:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:99:BF:A1:BA:FC:E5:25:0C:B5:71:9B:51:25:E5:E7:07:3D:00:D9
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f8:f4:b9:26:0f:3d:7e:f6:04:c9:ea:02:4b:99:d5:53:f0:
ee:f4:10:1a:53:5b:10:99:cd:ae:cb:36:03:71:99:04:90:bc:
e9:7b:59:2d:73:9d:fa:8a:a8:51:4c:6a:9b:50:62:38:ff:e3:
2c:01:30:e5:23:58:70:db:08:1f:d9:a2:b9:78:66:7b:1d:7e:
34:b6:f4:62:40:ca:7a:32:e6:d1:08:40:d0:0e:1b:c0:f1:7c:
07:33:fe:32:9a:dd:af:50:d7:3b:1f:c2:cb:a8:f7:e1:cc:2e:
86:54:52:6d:74:53:49:31:83:5c:3d:d2:d9:cd:11:22:41:c2:
70:e8:36:10:7a:f0:44:8e:5f:36:64:e2:27:b2:7d:08:2a:52:
9e:d7:54:d9:54:a5:62:3d:60:23:59:1d:a0:b9:64:31:ba:5c:
de:e1:03:02:3c:48:c8:8e:7d:2e:26:4d:a7:dc:5a:51:a4:d9:
ee:21:eb:ea:d0:8f:d9:fe:14:8d:23:f0:a4:77:db:81:20:24:
b9:a4:d0:c3:d3:03:4d:e5:2b:51:6c:aa:1c:ce:b5:f5:06:4f:
54:65:80:b9:60:82:48:02:2f:17:96:0a:b2:47:b2:83:39:8e:
57:6c:03:e0:2c:8f:8f:c6:20:e1:6e:3f:1a:ed:78:1d:ec:02:
9e:49:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:09 2026 by rpki-client