Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: Jrjem+4PO93fLdmWNawTGcgSYvG0p7wPs0jngXiprcQ=
Subject key identifier: 68:3D:FD:DD:6D:70:9E:B1:A3:4E:72:CA:0F:46:9B:F2:84:85:61:03
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 01A12C5700715F63E7293CBE8786313C1801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 05B5
Signing time: Sun 11 Oct 2026 19:01:01 +0000
Manifest this update: Sun 11 Oct 2026 19:01:01 +0000
Manifest next update: Mon 12 Oct 2026 19:01:01 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: Xe1nNfxVfj/mR+nR2DEymkC14MxuThEkoDa9K8qCUiU=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:00:71:5f:63:e7:29:3c:be:87:86:31:3c:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 11 19:01:01 2026 GMT
Not After : Oct 12 19:01:01 2026 GMT
Subject: CN=683dfddd6d709eb1a34e72ca0f469bf284856103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:03:eb:0b:95:f7:4a:a7:75:6e:3a:52:16:
d7:f8:85:77:c8:a7:90:e6:73:bf:58:e8:36:89:2c:
8a:83:6b:ca:0c:c9:3a:86:ea:63:81:9c:7d:a1:14:
1a:13:37:fd:44:52:9c:98:5c:a0:83:53:15:67:61:
f9:fd:01:cb:67:75:54:27:25:f3:b8:55:39:1f:a4:
28:63:c8:02:75:47:b3:37:3b:d7:89:d9:70:0d:d2:
ef:01:0c:75:df:c0:ec:22:18:e9:f7:68:62:45:12:
d0:8a:ee:5f:cf:d5:b2:26:8a:95:a1:20:cb:e8:6d:
6c:3e:d4:3c:bf:92:84:f8:ba:a2:d6:b3:61:9c:ff:
77:e0:b6:68:89:9c:34:63:5e:f1:ba:30:90:c4:0d:
3c:62:ed:ac:b8:af:91:ff:fa:73:a2:77:f5:bd:95:
0f:8b:50:1e:fd:bc:72:2c:4f:3c:22:84:99:b3:76:
52:69:21:ec:61:98:a3:fd:da:12:4d:c1:de:72:a7:
6b:2e:af:82:bf:c6:46:77:f9:0d:70:61:36:52:75:
b7:4d:69:d3:62:ab:6b:02:77:21:f5:83:b5:2d:2d:
20:94:42:00:c4:a8:eb:d3:ce:25:32:31:a1:45:b8:
17:23:79:dc:c3:d5:fe:8e:83:23:17:09:91:bc:0e:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:FD:DD:6D:70:9E:B1:A3:4E:72:CA:0F:46:9B:F2:84:85:61:03
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:dc:6e:99:62:41:43:d0:56:c2:7b:27:a0:78:d6:76:73:
7d:15:25:30:82:3f:28:c0:31:8e:5c:82:e2:4c:52:03:95:d2:
2a:96:97:9e:61:1a:14:13:e2:81:18:6b:17:0a:2a:bb:98:1c:
29:46:8a:ef:4f:70:fa:5e:c2:63:80:8c:07:ad:2b:0c:90:82:
6e:c6:34:dd:46:93:b9:5a:65:e0:08:0a:85:34:6d:80:60:3b:
a5:34:30:5f:ac:bf:38:f4:d8:28:0c:e6:18:87:35:32:ee:48:
c9:63:53:ee:5f:34:57:2a:2f:b3:c1:81:20:15:10:67:67:ed:
73:ba:31:4d:fa:f2:08:25:80:29:a9:63:f4:a3:83:26:63:fc:
fb:17:c6:44:4e:97:13:19:31:0d:6b:b7:b9:4e:53:70:39:1a:
8f:3e:6f:50:53:92:a1:90:9b:62:b0:a7:25:cb:72:a4:f4:c1:
c0:4e:62:2d:60:17:46:cc:7e:7f:3f:6c:81:2c:10:85:f5:96:
d7:be:66:9d:21:de:56:74:03:a9:14:6f:e3:e1:bf:37:07:73:
b6:ed:00:42:46:0d:e0:a6:a0:83:63:8a:aa:2d:47:10:2b:f8:
cb:16:00:d4:5f:4c:55:81:82:8f:72:bf:35:df:03:2a:61:29:
c2:c1:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:03:18 2026 by rpki-client