
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier: 3bq2h/OIGgoBCbmCgopubOFT5ux/CqCBrqQs9hRwpLY=
Subject key identifier: F0:B2:5F:F2:6E:A6:03:4C:93:82:DD:ED:77:85:5C:D0:B7:85:70:A6
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 01A0C2FBBE889EA341EA55ADFBFB3CCF36BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number: 0FBD
Signing time: Mon 21 Sep 2026 08:01:13 +0000
Manifest this update: Mon 21 Sep 2026 08:01:13 +0000
Manifest next update: Tue 22 Sep 2026 08:01:13 +0000
Files and hashes: 1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: 4DlyZfniXqSYlqBe6Kx3x+6s4nuCmp3DCzW0Ea3OXdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:be:88:9e:a3:41:ea:55:ad:fb:fb:3c:cf:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Sep 21 08:01:13 2026 GMT
Not After : Sep 22 08:01:13 2026 GMT
Subject: CN=f0b25ff26ea6034c9382dded77855cd0b78570a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:a3:81:64:47:67:a1:82:ea:e2:26:ca:4e:
f8:c2:69:c5:6f:08:24:c4:21:88:54:97:8d:a3:4c:
52:14:39:76:58:5c:7a:c6:66:80:68:4c:92:f1:82:
61:7d:7d:51:95:3a:13:45:53:64:d3:dd:85:1d:9e:
35:b3:cc:0b:e8:35:80:9d:2a:80:e0:2d:f0:db:00:
9f:a4:08:7f:76:82:85:96:f0:7b:13:6f:a8:02:65:
f7:64:61:e9:aa:bf:da:43:b6:89:42:e6:00:a5:cd:
ec:64:67:97:38:7f:31:14:77:ed:db:1e:92:bb:f2:
52:c4:91:ee:82:b7:2d:bb:8b:64:fe:a0:2f:b6:fa:
ee:60:bb:75:38:4b:51:20:af:d6:a4:a9:97:9c:47:
6b:40:a1:26:90:47:29:fd:19:1e:5d:a0:09:30:61:
90:43:2e:b3:f3:38:41:e0:8a:ba:1c:d6:af:a6:57:
8e:e5:e8:7f:6c:55:1f:be:70:44:c9:15:24:08:b4:
de:85:f3:88:64:a5:59:cc:cd:a0:73:b1:81:83:01:
e1:9c:d0:c3:b9:72:11:1c:64:d4:08:53:4b:14:0d:
e7:6c:b8:b6:c7:8f:63:97:f7:75:5b:c3:35:f6:4a:
d0:62:51:3e:50:b4:37:27:4e:18:f9:32:22:bd:fc:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:5F:F2:6E:A6:03:4C:93:82:DD:ED:77:85:5C:D0:B7:85:70:A6
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:37:6e:60:6d:89:dd:cf:99:fc:90:37:2f:89:94:87:57:
62:5a:5c:11:64:86:15:10:cd:93:01:5b:c4:c5:d2:93:2d:1b:
70:3f:a3:e7:56:7d:80:24:c0:56:b9:28:bd:e1:d8:47:b8:da:
9a:32:46:05:31:16:ad:4f:38:11:34:3f:20:17:94:04:be:12:
bf:81:d2:84:56:e1:4f:a5:90:54:51:c2:21:01:53:17:18:1d:
75:6c:74:96:a7:ce:58:84:92:8e:3f:cd:49:30:ba:e2:e3:38:
a5:27:54:ac:8e:a4:52:d9:87:ad:de:6b:f2:42:88:15:5a:fe:
79:19:2c:30:bf:f9:a4:27:9a:2f:87:14:23:23:87:8d:11:70:
39:e4:42:00:da:59:47:44:ff:c3:bd:4d:37:5a:40:1c:07:b5:
a6:03:b8:bd:45:46:ac:5e:a2:1a:99:13:bd:5c:c5:ce:b3:5a:
ff:f7:1a:73:10:a9:46:6c:48:fc:84:a1:af:20:9a:d2:6a:39:
d6:08:cc:1c:88:72:b9:76:30:f7:1a:18:70:e0:b0:65:fd:98:
da:75:b1:0b:00:ab:7d:51:27:6f:dc:f6:5d:80:f0:b7:53:5c:
1d:b0:82:eb:d7:8b:e4:6d:4e:45:a0:c5:e7:cc:0d:c4:78:07:
5a:3f:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:35 2026 by rpki-client