Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: m3MDxxbqgBfAE5/v8XtmZ8msn1QuNxam2MU+SoKySU0=
Subject key identifier: 8C:9E:C5:20:BF:8E:63:0D:CC:49:E9:39:54:B5:9C:60:52:8A:34:90
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01A0F56950D34E1BE466A8AFECF5BF56D84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1A8A
Signing time: Thu 01 Oct 2026 03:01:54 +0000
Manifest this update: Thu 01 Oct 2026 03:01:54 +0000
Manifest next update: Fri 02 Oct 2026 03:01:54 +0000
Files and hashes: 1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: WRL7GT3n6c2ASzT5xMoLomLYZ8KFxx29pvEtyCTquvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:69:50:d3:4e:1b:e4:66:a8:af:ec:f5:bf:56:d8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Oct 1 03:01:54 2026 GMT
Not After : Oct 2 03:01:54 2026 GMT
Subject: CN=8c9ec520bf8e630dcc49e93954b59c60528a3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:66:6f:4b:5e:fb:6e:89:22:7e:36:ea:1d:
fa:9e:56:4b:01:2e:90:27:c4:18:dd:10:0b:69:5c:
4c:10:7a:da:53:c6:e3:f0:91:f1:51:bf:97:cc:08:
a4:1c:5a:b5:0a:cb:96:07:76:b5:a6:55:14:b5:46:
05:a6:f7:82:74:1e:55:f4:44:1b:00:8d:94:96:ea:
16:76:19:9a:f7:c0:d2:dc:ab:ac:2d:5f:ab:52:fc:
6d:22:8b:2a:40:ef:1e:78:1a:00:83:88:5b:80:0d:
2f:86:ad:ef:8e:a7:57:0d:4b:b0:e6:8e:6c:24:2d:
28:99:99:4a:7a:e6:79:57:0a:f6:49:4b:2c:06:e8:
9b:6a:aa:71:d6:f8:01:fa:1c:f8:08:f3:d5:50:d4:
ca:e4:ee:0d:27:6b:5e:8b:51:f8:dd:69:a8:3c:2c:
34:c1:00:28:e9:30:cd:09:1b:6f:06:2e:9e:21:82:
c4:7f:00:10:8c:eb:50:ea:2a:5a:e0:04:25:21:1b:
8d:6d:6c:a6:5c:01:15:7e:07:d1:f4:d7:01:37:1d:
10:20:56:5b:e1:57:9b:09:a7:37:1c:eb:92:47:67:
81:f4:ed:90:e1:45:16:df:0f:1a:d4:c8:8d:ee:31:
70:eb:48:74:2e:d3:ed:c8:ca:22:80:66:37:0f:fd:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:C5:20:BF:8E:63:0D:CC:49:E9:39:54:B5:9C:60:52:8A:34:90
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8b:0e:35:26:23:91:bf:3f:52:f6:4b:a5:06:52:ff:db:4b:
30:ad:ce:fb:65:75:50:8c:b3:a8:b8:bc:1d:4a:24:62:23:be:
87:30:b1:cb:58:6d:2d:df:c3:f7:ed:ca:7d:0e:e1:e4:72:e2:
33:6b:96:1a:d8:a5:49:e3:08:f1:29:6d:62:43:59:75:11:58:
d9:53:58:20:ab:8b:04:05:9b:ba:3f:b2:bc:a3:fb:b1:5f:e3:
16:1b:23:17:16:b8:c5:44:2c:60:1d:c7:69:c4:33:4a:a8:ae:
d5:82:ab:f1:c4:45:9a:90:a0:fa:53:db:17:2d:c5:35:e8:8f:
fc:05:36:82:aa:93:c0:4c:f8:f2:c7:db:16:43:70:45:2d:42:
b9:b9:88:61:ab:a2:c5:3b:51:46:35:b8:ee:12:df:78:fe:23:
ca:18:1a:67:b8:d0:80:50:9d:09:a1:68:df:44:35:f2:8a:f4:
51:b6:bf:e5:85:37:cf:2e:dd:fd:c9:f5:67:7d:dd:ff:78:57:
4f:a3:7a:c4:0d:13:52:e2:53:7d:02:30:8a:c3:ff:36:45:04:
2c:d9:38:b2:fd:40:2a:ed:9c:02:52:40:4a:b2:c0:f6:f5:36:
70:ba:f3:09:75:75:cc:11:28:5e:16:4e:4a:04:2c:94:e7:3a:
38:5e:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:55:48 2026 by rpki-client