Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
File: fRgFycPQl9qGBOV3NpFasesh--E.mft (raw, json)
Hash identifier: ETIR7fAGLIpC5uyhEQAyOBoESm6zO/+5GYzxx9OpycQ=
Subject key identifier: 82:11:5A:DD:32:5B:05:7D:3F:39:0E:FC:E0:E2:38:C9:EF:40:05:B7
Authority key identifier: 7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1
Certificate issuer: /CN=7d1805c9c3d097da8604e57736915ab1eb21fbe1
Certificate serial: 01A0EC2F3EE57F45533DD164FCEF068C0971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
Manifest number: 9C
Signing time: Tue 29 Sep 2026 08:01:54 +0000
Manifest this update: Tue 29 Sep 2026 08:01:54 +0000
Manifest next update: Wed 30 Sep 2026 08:01:54 +0000
Files and hashes: 1: 44UAkumtR6SiPV7J0MrvNe023fw.roa (hash: dlNYslujKCke6f4H3z2ky1MyUDwLRYBr3XNLSzbHDRk=)
2: fRgFycPQl9qGBOV3NpFasesh--E.crl (hash: tAotrgJb2QrtX8TQ5VMppk2CN29wmcXY9oWMF/GtxDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:3e:e5:7f:45:53:3d:d1:64:fc:ef:06:8c:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d1805c9c3d097da8604e57736915ab1eb21fbe1
Validity
Not Before: Sep 29 08:01:54 2026 GMT
Not After : Sep 30 08:01:54 2026 GMT
Subject: CN=82115add325b057d3f390efce0e238c9ef4005b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:fb:95:59:68:a5:6b:79:dc:98:8d:05:4c:
55:24:74:fb:5e:b4:de:76:68:22:76:19:f5:fd:8c:
af:9d:28:07:06:39:fa:14:37:06:9e:4e:25:2f:15:
0b:00:c7:81:fc:31:4c:ab:71:f4:6b:9e:6a:55:4e:
d0:2d:a9:65:17:2a:f7:b6:77:28:c0:60:5d:32:5a:
67:97:46:4c:aa:10:8a:57:3f:0c:a6:a7:43:bc:71:
3d:c7:9b:90:7d:44:1a:18:6d:8e:37:14:58:6b:1d:
25:8b:4a:c1:49:4e:dd:be:44:07:94:79:28:30:1d:
f8:3a:ef:92:44:5a:50:9d:4a:44:ca:bb:d9:0b:2e:
c5:4c:3d:a0:e9:25:83:5c:6f:0e:6b:58:ba:30:23:
76:ac:b8:9d:2c:58:41:c3:79:f0:a2:27:f5:f7:d7:
f1:9c:aa:a0:48:9b:ba:54:d7:41:17:11:c5:29:36:
76:17:2d:18:a3:8e:50:32:5f:9c:58:fa:dd:30:46:
8d:5d:2f:31:ef:7c:ef:36:f4:2c:cb:a6:f1:86:3b:
f1:41:34:58:be:27:0d:3b:87:2a:aa:1a:01:bd:92:
26:6e:bd:ce:c3:92:bc:9a:b3:3e:40:ce:4a:3a:d3:
5d:eb:64:7e:00:b6:2d:9c:cf:d7:a3:70:fa:d4:2e:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:5A:DD:32:5B:05:7D:3F:39:0E:FC:E0:E2:38:C9:EF:40:05:B7
X509v3 Authority Key Identifier:
keyid:7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:02:2c:24:65:70:97:ca:36:46:fa:ac:e4:f1:23:86:2e:0d:
aa:e0:9b:72:6c:b6:16:2a:81:a7:fd:10:fe:25:fa:17:1d:ee:
b8:2a:66:51:85:43:0b:95:de:61:0d:c6:21:e4:de:29:48:6d:
05:b6:a8:85:30:ae:e8:1e:94:54:b5:51:9a:ba:b5:61:0c:dd:
94:b4:c7:0f:5c:b4:ce:53:04:66:33:50:dc:d7:31:50:6a:c3:
5a:fe:97:ac:4b:a7:55:52:c9:77:2f:6c:b0:31:d2:71:14:e0:
78:5e:91:78:6e:29:e1:49:7e:28:95:94:1c:31:89:7f:10:a6:
df:4b:d4:99:43:2c:ca:7f:56:81:69:1f:33:38:33:8d:85:5d:
27:f8:28:f7:38:86:6d:dd:5e:7f:12:57:7a:ac:15:55:50:c0:
f0:21:91:36:eb:94:9a:fa:1c:50:02:8b:c0:81:b0:c7:b4:92:
2d:35:ba:8c:b4:64:96:e9:8a:a6:93:58:17:4f:e9:26:46:11:
b1:ef:0e:fd:d3:93:96:ec:f1:51:c1:2e:e9:db:2f:0e:f8:39:
e7:05:ff:67:1f:ee:29:8e:3e:71:df:21:85:d1:fa:d4:51:bd:
f4:b6:31:d9:a8:d7:56:50:8a:6a:69:97:28:2f:c9:38:f4:34:
75:9b:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:31 2026 by rpki-client