Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: 1mNRdYRtBuzBNy2CpLMS/HBEW7JEAXwGLGEe/XGKatQ=
Subject key identifier: 7F:B3:B4:F1:7D:75:5D:20:6B:33:ED:6A:D9:16:9A:D0:C1:8F:4E:5E
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 01A0BD2FD367C57AA41E2B9B5FAAA61F655E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0AEE
Signing time: Sun 20 Sep 2026 05:00:23 +0000
Manifest this update: Sun 20 Sep 2026 05:00:23 +0000
Manifest next update: Mon 21 Sep 2026 05:00:23 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: RIR2R7SSBR6yz/KlfCnd8P91AgSKzTFcOTQFrwIjV8g=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:d3:67:c5:7a:a4:1e:2b:9b:5f:aa:a6:1f:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Sep 20 05:00:23 2026 GMT
Not After : Sep 21 05:00:23 2026 GMT
Subject: CN=7fb3b4f17d755d206b33ed6ad9169ad0c18f4e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:90:3d:b5:36:bf:80:9f:bd:5c:c9:0e:f9:
b5:c3:70:cb:ff:1d:5c:e0:e0:3c:aa:0d:5a:af:8a:
87:6d:32:62:40:5f:0b:6b:02:7b:36:43:7d:ca:0b:
5d:9b:0f:c7:44:e3:c4:9c:0d:b9:23:6b:86:ab:f5:
0e:f4:a9:13:5b:53:6a:8f:6b:c4:50:25:bc:96:13:
17:14:2e:1f:59:df:d8:9e:86:27:17:c2:d3:a4:2b:
42:4d:af:5f:a4:ad:81:58:56:d7:2b:17:1f:ea:fa:
49:c0:32:7f:98:64:7f:81:e1:bc:b5:e7:1a:92:ee:
2d:5d:93:33:a2:54:99:20:d1:a5:61:b0:ee:0d:27:
8a:3f:98:3f:a7:63:b2:13:c0:b4:2d:c7:bb:89:01:
e4:c5:da:ca:b4:cc:bf:8f:88:2d:db:ab:70:46:dc:
28:32:90:76:32:49:09:72:b3:94:4b:76:a1:03:b3:
5d:a1:2e:5a:69:92:8a:13:81:eb:fc:7d:61:5e:05:
fa:d5:48:34:d0:8d:ee:73:9b:85:88:1f:2a:2a:3c:
88:21:99:8a:1b:47:1d:b6:e0:7d:33:5b:35:0b:c5:
4a:b7:41:c7:d1:6d:78:a4:07:bf:77:3c:1a:c3:0c:
a6:3b:13:2d:33:96:3a:3f:ef:d4:66:5a:b8:37:06:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:B4:F1:7D:75:5D:20:6B:33:ED:6A:D9:16:9A:D0:C1:8F:4E:5E
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:d7:61:d5:da:a6:fe:ae:18:31:7c:70:1f:d9:67:c8:6d:
de:13:17:4c:b0:c3:fa:43:2d:c3:81:4e:5f:89:65:cd:34:24:
8d:2d:84:a6:fe:ba:a8:3e:73:6d:17:05:5d:64:8c:22:9a:48:
bb:e9:4f:83:1e:11:28:1b:19:9f:8c:c1:20:b0:a2:2c:74:1d:
29:28:27:6b:a1:b1:18:4c:ae:a9:4b:7f:91:6b:49:3d:33:80:
47:a0:13:3b:c4:33:2e:17:7f:ca:6e:70:09:90:9a:4b:06:e9:
41:f9:a8:95:f5:55:8d:66:8a:f0:cd:b7:2a:68:6f:ac:87:a2:
08:50:fc:1e:40:c4:87:c1:aa:93:1b:d8:89:dd:b1:74:74:6b:
82:71:c7:03:b1:ea:50:30:bf:fa:61:94:e8:a6:04:68:ca:ae:
bb:53:34:77:e9:9b:76:4a:27:99:3e:6c:72:3a:c3:a0:df:01:
21:67:bf:d6:45:db:e5:8f:96:ef:e7:62:9f:62:0e:67:c0:cf:
18:73:ee:1f:84:a2:a0:c6:15:28:0e:fa:96:0d:09:8c:17:09:
61:a8:ef:a6:ac:46:a1:c1:be:f8:d0:ea:63:84:ec:8e:e8:3a:
9d:c2:e4:6b:df:52:44:2a:94:d9:2e:a3:9e:9c:de:c5:17:d1:
58:5b:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:53:07 2026 by rpki-client