Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: 7hlBbtUQDCvYMbx/UIQQBHMtGa4OAGJQDrVGjMFZqqc=
Subject key identifier: 14:D6:6B:B4:62:02:65:62:3D:6F:20:97:A2:07:BE:4D:9D:F3:A4:DC
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 01A0E286FE34909639FC396FB8364E4DFD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 1024
Signing time: Sun 27 Sep 2026 11:01:32 +0000
Manifest this update: Sun 27 Sep 2026 11:01:32 +0000
Manifest next update: Mon 28 Sep 2026 11:01:32 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: RcH+FCPCaIdxeGUQBxtE12jw0ZDzzX67uNJlRV7r3k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:fe:34:90:96:39:fc:39:6f:b8:36:4e:4d:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Sep 27 11:01:32 2026 GMT
Not After : Sep 28 11:01:32 2026 GMT
Subject: CN=14d66bb4620265623d6f2097a207be4d9df3a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:42:11:39:e0:8f:5f:0b:6d:7c:42:4a:10:
de:c2:c6:33:d9:e4:e3:e5:72:b5:11:3a:69:c5:d0:
e5:72:c4:34:2e:45:f4:a2:5d:ed:fb:b0:d3:d6:03:
63:51:9a:28:4d:e5:96:45:0e:30:a4:47:aa:83:a2:
d8:9e:55:74:73:cc:dd:1b:ea:bd:3d:ec:5d:ce:51:
82:99:9c:4f:c4:07:db:f4:d1:d7:97:57:94:bf:d5:
fb:c7:71:86:87:b1:c0:2f:7c:14:7c:94:19:1c:18:
04:8d:89:7a:41:6a:04:28:c2:54:67:f0:4a:dc:ca:
21:b7:14:5c:11:c7:43:8f:a0:c1:59:00:d7:db:6f:
77:2d:b1:a4:7f:1e:ab:c1:e0:b8:73:d1:a3:4c:dc:
e8:6d:83:a4:62:24:29:b9:b6:a2:e2:a5:6a:03:2b:
ad:be:9a:cd:e6:74:22:91:92:25:b0:64:81:f0:5d:
10:f5:07:26:03:8d:94:ab:3a:b3:57:5d:22:97:69:
ee:1e:81:5c:79:1b:c6:07:24:cc:9d:7d:cb:09:a1:
e3:be:9e:14:53:bb:3e:20:8b:f5:81:bf:c1:54:d0:
01:da:b0:33:c8:ef:b9:64:4d:5b:2f:34:92:31:ee:
c5:78:51:ad:91:60:af:52:05:10:5b:99:03:35:7a:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:6B:B4:62:02:65:62:3D:6F:20:97:A2:07:BE:4D:9D:F3:A4:DC
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:2e:d1:68:0f:27:b2:42:4e:18:89:17:57:b4:e7:bd:4a:
e7:1f:2d:3a:2c:45:84:b3:77:dc:01:9f:bd:9d:29:e3:11:de:
41:84:91:79:d6:5c:76:c8:27:0b:43:97:f3:38:e4:81:85:5a:
6a:a1:dd:5a:bf:91:22:7b:7f:19:9c:17:cc:19:4c:20:ce:e8:
9c:1e:6a:e4:18:80:70:22:59:69:ac:8f:e4:ea:8a:42:c6:78:
82:c2:b1:0c:5d:73:b8:56:1b:16:68:71:f4:ba:41:f7:20:10:
89:ee:77:68:f1:18:99:b0:7a:5a:6e:60:ea:54:bd:85:3f:c3:
f2:07:4d:16:b3:fe:db:89:95:2d:b2:2a:88:d3:c1:5c:f6:d0:
14:0f:2e:50:f0:0c:53:34:b9:e1:60:f8:44:32:3c:51:b8:a6:
43:b2:ed:7d:f8:bf:6c:57:ad:49:f8:c4:df:38:50:b2:a1:e9:
91:4a:0f:7a:d9:15:c1:c0:c1:bb:66:fb:53:0e:bd:03:a8:08:
d0:8f:69:90:15:17:27:42:ca:7d:24:75:a5:ff:e0:c9:f8:55:
87:f1:b0:1a:90:82:1c:0a:3c:63:48:3c:1f:ad:29:8e:78:bc:
e9:ac:8e:0c:02:2e:fc:a1:5c:d0:89:10:32:62:84:0d:25:c9:
51:e4:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:14:35 2026 by rpki-client