Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: nozD7F6NPUoB7v65WV0+S1C0WCh7ZzIGqj9kfDXTuHc=
Subject key identifier: 01:C8:53:23:F9:AA:A5:AB:1C:61:F1:DB:23:98:7F:82:11:AD:53:23
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01A0DC850139A46513166DEFE56E06B7EC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 07:01:39 +0000
Manifest this update: Sat 26 Sep 2026 07:01:39 +0000
Manifest next update: Sun 27 Sep 2026 07:01:39 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: AkhNDgnJTY6s6VKAQyIETePVthfG8rK/2Uo2XnAgOwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:01:39:a4:65:13:16:6d:ef:e5:6e:06:b7:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Sep 26 07:01:39 2026 GMT
Not After : Sep 27 07:01:39 2026 GMT
Subject: CN=01c85323f9aaa5ab1c61f1db23987f8211ad5323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:fd:5d:d0:81:50:ee:a3:90:59:6c:c5:cc:
e3:01:e4:17:ae:4f:e1:5b:2c:41:87:10:41:af:27:
5e:fc:27:bd:f6:50:a6:d1:73:3d:4d:39:18:df:db:
14:a6:c9:05:00:16:e9:a7:2e:d3:be:67:3e:e9:1f:
c6:70:95:be:a6:9f:9b:5f:e6:7b:96:89:84:a6:38:
c1:f4:cd:c6:6a:a5:aa:0a:ab:92:84:fd:79:96:c3:
56:de:23:dd:53:5c:35:e6:75:40:82:e1:5f:5c:4a:
4a:d1:d5:72:86:c0:ad:e7:2c:f4:ce:95:9f:11:48:
a4:62:bf:6b:8e:25:40:78:36:a7:8e:94:e8:c7:ae:
cb:15:e8:22:51:c9:25:bc:31:cf:a1:61:b4:67:81:
ef:34:b9:16:68:c9:7e:91:13:60:b5:72:9c:8e:09:
eb:48:42:3d:5a:b0:9b:97:17:6d:0f:18:dd:84:55:
f5:13:90:00:43:d6:f7:68:2e:9e:54:79:d0:cf:d5:
7a:40:18:44:3a:28:0a:53:4e:6e:fa:2b:37:1c:fa:
2b:93:4e:d3:26:d4:ba:6b:8f:27:ad:9d:3c:f6:08:
94:80:d8:0b:28:b6:2b:e6:73:5b:b5:17:a2:1d:fc:
01:b2:5c:ca:32:15:e9:ad:2b:1b:d5:1d:0a:75:64:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:53:23:F9:AA:A5:AB:1C:61:F1:DB:23:98:7F:82:11:AD:53:23
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:6f:25:11:77:82:b6:76:da:ff:82:28:8a:f1:ce:da:07:
9e:8b:e8:71:7d:a2:6d:45:b6:52:00:fa:53:43:27:73:75:4a:
bc:39:70:33:ee:33:2d:cc:93:86:9a:61:c8:ba:d6:af:ce:98:
0d:16:0d:fb:2c:2d:03:86:f6:e1:ca:8d:5b:7e:ef:c8:5a:6f:
ef:cc:e8:ce:ea:9b:ee:ac:a1:65:a3:b5:5e:2d:1d:4b:9a:c7:
f3:ac:80:66:56:0c:cb:49:a3:6b:cc:ac:41:88:9c:23:6d:c4:
1e:08:a9:5e:5a:86:ba:3d:ae:73:10:da:5f:aa:6d:5d:94:ea:
00:c3:a3:b8:7d:58:e9:6d:c9:14:1f:ac:50:d5:0b:e7:d9:6a:
92:2a:ae:ad:3b:90:e2:96:17:f7:eb:e5:75:f1:2a:1c:86:09:
71:2b:c6:85:92:45:e4:2c:09:1d:d2:a0:ec:8e:7e:9e:a7:f2:
02:cc:87:81:8f:a3:72:13:39:83:f5:a2:fa:a4:fd:de:3a:7b:
72:46:9e:e2:cc:08:63:a4:c9:88:bf:17:52:dc:dd:f9:a8:35:
cf:13:03:32:a0:54:00:49:f1:dc:18:43:f8:9e:7e:76:a2:80:
21:17:96:e5:c0:ea:a6:90:60:6d:e2:43:19:b8:92:a7:a4:21:
c8:2b:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:56:01 2026 by rpki-client