Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
File: F7at8lfaaiQB-03PWQyGEzXhG6k.mft (raw, json)
Hash identifier: gAS0xVebBMITt19XlIR/tsIVtqtDBBZS0sGcIavKp4w=
Subject key identifier: 80:13:07:20:20:86:CB:14:FD:22:07:5C:F1:E9:59:E7:B9:BE:A8:69
Authority key identifier: 17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
Certificate issuer: /CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Certificate serial: 01A0C88FC6D6122FD935D0F73D0E72B9E93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
Manifest number: 85
Signing time: Tue 22 Sep 2026 10:01:00 +0000
Manifest this update: Tue 22 Sep 2026 10:01:00 +0000
Manifest next update: Wed 23 Sep 2026 10:01:00 +0000
Files and hashes: 1: F7at8lfaaiQB-03PWQyGEzXhG6k.crl (hash: lmBPOLzrSDgCoDG7OsbLaiCi8nAo6VVpM1ZdAJbXn7U=)
2: oLjGL20gvb-jwy4Q-PVhzdDMPy0.roa (hash: oHv5deIjQma6Gl5w1Se22IPZwIZIKsTeB9zGvO4i+J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:c6:d6:12:2f:d9:35:d0:f7:3d:0e:72:b9:e9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Validity
Not Before: Sep 22 10:01:00 2026 GMT
Not After : Sep 23 10:01:00 2026 GMT
Subject: CN=801307202086cb14fd22075cf1e959e7b9bea869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:09:9c:ba:2f:91:1c:9e:c3:93:3b:46:a6:
3e:84:91:c6:5b:cd:31:1e:f6:b9:4d:28:80:c4:9c:
1c:38:61:b1:50:cb:ac:e9:19:ef:f9:aa:73:66:52:
1c:5b:db:e5:ba:a9:ef:8a:d0:3a:83:da:25:ff:9c:
23:98:7d:22:7f:6d:bb:d7:8b:3e:40:c4:d6:df:0f:
cc:b6:95:19:e0:c2:89:ed:ca:a4:c3:32:2d:83:e3:
b7:31:06:ad:ed:66:8f:7c:0c:cf:94:63:1b:78:7f:
2e:e2:3f:72:8a:3a:d2:8b:57:ca:da:48:ec:53:4b:
a9:7c:f3:09:f9:96:b4:7e:8b:52:aa:5e:95:33:76:
99:d7:24:7e:db:5a:21:f3:19:c4:99:6b:c5:49:1b:
58:ff:cb:59:5b:d4:f2:86:c2:f0:bf:cd:f2:0b:7a:
9e:6f:fa:f4:b3:e0:0f:a7:c3:af:3e:87:6c:df:3c:
a8:47:91:23:1d:a2:af:c8:9d:51:60:b1:42:30:07:
40:c7:df:0d:5f:bd:a5:1d:74:22:fa:c2:4e:4c:fe:
40:ef:3a:c0:db:5c:8d:89:e3:4c:44:e4:6c:51:84:
98:13:80:66:8c:9e:fc:a5:0d:00:c3:5c:e4:0e:7a:
78:47:a3:1f:ee:ad:90:a4:ca:d1:d1:a9:06:6a:a0:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:07:20:20:86:CB:14:FD:22:07:5C:F1:E9:59:E7:B9:BE:A8:69
X509v3 Authority Key Identifier:
keyid:17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:26:aa:7e:e9:a0:a5:ff:ed:2c:41:28:9a:22:d0:58:bb:69:
94:c1:7a:c1:12:5d:52:df:f5:2a:ba:d1:a2:f2:b7:00:52:05:
09:83:9a:83:2f:9e:9d:6e:7e:26:68:db:68:3d:0e:e0:9c:e9:
f2:fc:f0:12:52:7a:6e:83:34:9e:47:30:bb:fd:11:a5:86:db:
8f:97:9d:68:65:6a:ad:ca:52:82:03:98:cf:34:a4:f7:20:68:
7f:a3:13:34:00:b4:1b:52:74:88:d6:95:e7:82:e2:7c:8b:11:
20:b2:bd:4e:45:8c:b7:56:b1:c5:f4:ea:8a:1d:ab:2c:9a:b7:
e2:42:35:ee:08:03:f1:39:76:fe:76:9e:f2:a9:8e:b5:3d:21:
78:f9:1c:ca:17:c4:c4:c7:a0:96:2e:c1:23:82:ab:d9:8f:2c:
f5:8d:f6:01:16:ae:fb:0b:d5:79:e6:5b:16:a2:2e:58:9f:0c:
16:5a:27:11:dd:29:33:f7:a7:70:8b:36:32:32:bf:1d:b2:36:
c2:f5:6b:71:29:fa:bb:3b:7c:e2:dc:77:f6:64:25:c2:df:29:
00:14:7f:a9:4d:82:5d:d3:33:72:43:59:d4:de:06:84:78:31:
99:6e:e5:3d:04:a8:9a:e3:36:f9:d1:11:1a:32:66:10:98:c2:
1e:fa:9b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:54 2026 by rpki-client