Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: c42OMqpo76A88rvNmEY2QvIlq0urGbJCLjMhis8MSPY=
Subject key identifier: B6:97:65:B3:16:39:65:E2:33:87:96:9E:E2:0C:DF:56:CD:50:02:CB
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 01A0E7407FAA00A85E3CF7E3EC1C0D0571B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:02:38 +0000
Manifest this update: Mon 28 Sep 2026 09:02:38 +0000
Manifest next update: Tue 29 Sep 2026 09:02:38 +0000
Files and hashes: 1: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (hash: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: TLqJITajBVqnggvUQWH3+rfM5GC2YmS1VIrE8/Unw94=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:40:7f:aa:00:a8:5e:3c:f7:e3:ec:1c:0d:05:71:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Sep 28 09:02:38 2026 GMT
Not After : Sep 29 09:02:38 2026 GMT
Subject: CN=b69765b3163965e23387969ee20cdf56cd5002cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:29:aa:45:ec:ba:fe:54:47:d1:05:6a:74:
4f:31:c0:aa:3b:23:f6:b5:0c:65:5d:93:b7:f0:e7:
0b:33:4c:b1:fd:77:bb:03:71:97:c2:d2:59:71:c4:
05:6c:22:06:ce:c9:6f:b1:ba:ac:4e:eb:06:f3:47:
97:25:98:0e:88:e1:5c:27:29:fb:6b:25:fd:40:72:
60:49:6c:78:c1:19:c3:8b:4a:50:df:d0:da:a6:e9:
0a:42:20:b5:24:ee:be:32:8c:dd:fa:a9:23:69:91:
4b:51:99:b0:9a:40:a5:d7:1f:1b:79:5b:5c:76:22:
f9:14:58:dc:3f:08:66:be:b1:55:af:f6:ab:c5:ce:
70:56:99:57:88:3a:3a:ae:90:fe:84:b4:dc:e7:ab:
58:1c:61:5e:13:db:8d:d4:a0:e2:81:94:2e:8d:75:
ce:d0:16:04:ed:b6:8c:48:8e:50:85:33:fd:14:7d:
42:39:b2:dc:f9:aa:60:23:73:a9:06:95:4c:a0:73:
4a:c7:33:ea:a2:e2:41:42:a7:32:90:2e:10:e1:12:
11:e6:5d:a9:4b:c8:47:2c:42:f7:12:3a:79:57:9a:
06:09:5a:91:a8:49:bc:89:27:8f:0a:0d:6b:73:d4:
3d:3f:7d:74:5c:a5:a5:54:ef:73:88:b2:1b:58:f7:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:97:65:B3:16:39:65:E2:33:87:96:9E:E2:0C:DF:56:CD:50:02:CB
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:89:fa:6d:07:b5:b6:75:f8:1f:28:c8:55:cc:07:9f:c8:
56:87:0c:08:ed:57:1c:d3:b1:8d:71:e9:a2:5c:59:25:2d:ec:
4b:d4:84:f0:ec:ab:5d:94:dc:c3:b9:65:1e:c7:04:88:a9:c8:
89:c6:92:45:f4:5a:82:f9:2a:eb:18:c3:8c:1c:13:3f:a7:d6:
28:3e:cd:b9:bd:1f:19:bc:0d:4a:46:eb:a1:ed:65:51:2b:ba:
88:e5:63:52:6f:be:e9:29:f1:6c:47:14:5f:aa:cf:cd:c3:27:
a6:3e:de:90:fb:6d:ac:fe:8a:50:11:b0:56:b8:af:ea:55:24:
b8:70:f7:50:7d:37:6b:07:4c:fc:4d:80:55:5c:d5:07:1b:01:
18:9f:83:90:fa:f3:ac:48:8c:ac:d4:b1:8d:b0:cd:52:4e:b3:
52:63:da:69:6e:72:da:29:f8:61:87:d7:5c:42:b6:72:47:ca:
69:dc:c1:14:12:6f:ed:8d:c3:fc:86:a0:37:41:71:89:af:72:
14:69:89:e7:da:cb:2b:5e:e9:13:ef:7f:7f:27:cc:8a:1b:e6:
0b:7b:48:06:e8:18:83:b4:10:1e:93:84:ed:ba:c0:4c:c8:16:
4d:c3:f5:81:59:e9:87:a9:23:05:6b:cc:ff:63:2a:42:d5:8c:
36:62:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:05:09 2026 by rpki-client