Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: Df9Woi3T0CM8FthcStKy8nEDuSedLiqUilfkL1rUo3o=
Subject key identifier: 11:4C:7D:16:C0:47:8C:68:D9:B4:4F:BA:C3:E3:A2:DA:83:A5:31:4E
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 01A0C77D244B873B3F249DB8C1815B37725D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 05:01:02 +0000
Manifest this update: Tue 22 Sep 2026 05:01:02 +0000
Manifest next update: Wed 23 Sep 2026 05:01:02 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: /opTPPM0zCC/bXnaHNgD1DWtJTcUgS14n+n6Jjidglw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:24:4b:87:3b:3f:24:9d:b8:c1:81:5b:37:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Sep 22 05:01:02 2026 GMT
Not After : Sep 23 05:01:02 2026 GMT
Subject: CN=114c7d16c0478c68d9b44fbac3e3a2da83a5314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:3c:36:0d:53:3a:9f:c8:e7:85:f1:22:4e:
7a:d9:5b:9c:31:8f:9e:55:4d:28:0b:24:d1:7e:44:
ab:0f:2e:17:25:83:a7:67:58:ac:76:72:da:bc:be:
d1:5f:08:dc:ac:d4:20:cf:6e:29:26:f3:c5:3b:e1:
34:f3:7f:ab:b8:13:60:40:d2:3d:0d:99:72:a9:4f:
75:a4:c0:09:f2:04:d2:fb:75:c3:ba:5a:11:a1:cf:
97:82:07:f2:2c:13:31:8e:ee:af:41:76:ad:08:03:
2a:ba:79:1c:65:a2:93:7f:c0:76:be:8f:7e:57:b5:
b2:ee:11:85:0b:89:94:c3:2a:27:3a:a5:3c:cc:20:
a2:83:6a:06:31:0d:16:0c:8e:91:e3:8b:08:b7:f9:
04:45:08:60:b5:ad:89:e6:95:91:b2:65:f3:d0:d7:
5f:c2:f1:a7:e2:90:fa:d9:e9:48:06:21:4a:9a:d8:
6e:84:53:48:3b:16:01:e5:f5:e4:e6:76:e8:15:1d:
ea:d4:e0:49:e6:7b:f7:c0:e1:05:47:d4:62:02:43:
e8:d4:e8:b8:3c:f2:2e:e7:1d:ba:6f:2c:9c:b1:93:
88:4c:4f:d1:2c:a7:43:26:56:7c:dd:fe:4a:74:c4:
2e:6f:1f:3f:4a:74:8f:39:dd:a1:f0:c3:38:08:df:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:7D:16:C0:47:8C:68:D9:B4:4F:BA:C3:E3:A2:DA:83:A5:31:4E
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:be:ef:2f:ea:c3:5d:67:88:1a:08:1d:74:e2:fb:14:71:
b2:e5:f4:d3:e5:67:c0:67:20:2d:c1:ef:0a:52:1c:52:41:9a:
f1:23:3f:ee:2f:e6:04:c0:94:1b:17:12:85:47:01:97:28:41:
b8:d7:44:13:5c:c2:d2:c5:f4:e1:2f:a6:99:72:bf:5e:1c:8e:
45:05:4e:17:5d:d0:db:80:07:14:13:f7:8b:28:fe:c1:aa:a1:
14:0d:07:11:3e:4a:e1:3c:ec:13:d2:13:4c:9e:a4:db:67:c5:
58:19:d5:84:7b:4c:23:b9:ff:2b:e7:cc:b7:5b:3b:3e:80:93:
79:9f:8e:c9:9a:c3:6c:00:7d:bb:16:81:25:d7:78:ce:de:f2:
d5:8f:9e:18:c0:bb:a8:3c:f3:04:c3:c5:a9:c8:56:13:dc:06:
5f:0f:b7:9e:3f:f9:d0:cf:48:8d:8e:87:32:aa:46:4f:0e:8c:
e4:9d:e7:1d:8f:ee:ec:e5:2f:a2:d5:13:44:98:d6:0b:da:8f:
a1:d4:32:21:15:aa:d2:21:c1:92:97:c0:68:78:41:7c:72:1a:
35:59:58:5e:53:a9:13:e7:c4:24:87:67:a5:3e:14:45:ba:61:
7b:e6:f7:e6:f4:e2:98:06:f4:2b:a1:6e:fd:25:63:13:54:03:
52:f0:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:02:32 2026 by rpki-client