Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: ss7l6JcoDRoqFMB5IE1+GSbfPooXq4wFM19oDF/eUNo=
Subject key identifier: E8:95:13:DA:AA:B6:D8:FA:FB:54:72:1D:08:EE:FE:EC:2A:01:C9:4C
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01A0C8C6ADEDEAE8C7D4976592386CB60581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 08F7
Signing time: Tue 22 Sep 2026 11:00:58 +0000
Manifest this update: Tue 22 Sep 2026 11:00:58 +0000
Manifest next update: Wed 23 Sep 2026 11:00:58 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: hBg3Q5HV/9U5sA7D4igmVO6N+Unos9/7QnM7KDMsRGA=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:ad:ed:ea:e8:c7:d4:97:65:92:38:6c:b6:05:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Sep 22 11:00:58 2026 GMT
Not After : Sep 23 11:00:58 2026 GMT
Subject: CN=e89513daaab6d8fafb54721d08eefeec2a01c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:e9:56:94:01:61:79:24:c3:26:fd:08:0f:
cd:b0:75:1c:b5:ee:80:d7:90:07:31:84:b6:ce:cd:
20:5f:dc:c9:14:7c:75:76:90:7a:fb:99:0e:8e:89:
68:38:00:ce:3f:72:4b:b5:92:65:8b:40:14:0c:35:
08:e2:c8:e2:93:7f:11:6c:55:e7:c4:d8:eb:f1:9b:
c0:04:42:36:ff:5b:61:72:16:e4:1a:18:cd:96:6b:
5e:a9:ba:46:81:98:58:98:62:00:bc:92:c1:42:9c:
45:b7:6c:67:2b:34:61:10:5a:22:52:ad:a8:c9:96:
ba:95:ff:25:6e:16:bd:5a:c9:f0:87:24:34:05:46:
fa:65:96:82:02:d4:4d:da:02:14:2c:e9:2d:59:04:
a4:6a:d3:3f:7e:1d:e8:59:80:49:1c:55:dd:db:3c:
ae:7e:7d:3c:dc:c1:c5:73:e6:f5:92:84:d1:d3:d7:
47:2a:cd:12:87:65:a3:b0:92:9e:58:e0:43:50:3d:
72:15:f4:c4:aa:6c:7c:2f:3d:20:41:e6:2e:79:ca:
96:b2:2e:e4:f8:71:9f:5e:e9:cf:29:eb:19:ad:7e:
aa:50:da:55:d4:6a:3b:2f:60:06:b2:bb:2c:31:4f:
33:06:e6:b5:a3:de:d2:d3:e1:41:2f:f4:9f:02:bf:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:13:DA:AA:B6:D8:FA:FB:54:72:1D:08:EE:FE:EC:2A:01:C9:4C
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:e8:a4:92:0f:28:94:b4:91:08:8b:24:ea:b2:e2:62:de:
ce:39:ac:e3:ee:73:53:3f:a0:b8:58:bc:47:57:10:bc:70:bd:
ee:56:e5:8e:05:b7:8c:00:bb:ad:e4:c9:3e:06:a8:61:94:e7:
05:58:9e:09:9d:77:9b:56:15:48:fd:a7:91:be:58:e2:32:02:
31:78:3e:66:b3:8c:ff:61:dd:ed:99:1b:73:c7:3d:07:63:0d:
42:b4:a3:4a:8a:26:70:a1:f4:a0:07:26:57:ba:c5:5b:6e:34:
5e:b8:d1:0e:73:1e:68:01:b5:b0:13:f5:9d:5b:b6:4f:7f:5d:
da:71:2e:7b:a2:50:ec:42:4c:a2:a8:f5:ba:2d:47:cf:8d:14:
b4:5c:1f:46:e9:7f:3e:b9:34:39:ef:15:cc:15:44:ef:09:f4:
42:ab:3f:c5:94:f6:90:2c:c4:cc:db:78:99:10:83:08:0a:f1:
aa:a3:20:5f:0d:8b:72:87:7f:20:e8:49:52:71:00:38:71:20:
39:a3:5a:c3:c8:53:2e:18:12:b6:2d:d5:17:09:e2:85:47:a4:
f2:7b:09:2a:c5:5e:5d:4b:f8:49:68:8a:2a:80:c2:0a:dd:08:
51:d0:6e:5e:6f:63:3a:1d:af:c5:e9:da:1c:08:16:3a:dc:71:
b9:7a:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:27 2026 by rpki-client