Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: NxONF8MLKARFF2Ni9sWR44q2ArVL33lyjxdIm0IVQp4=
Subject key identifier: 90:DF:1A:D7:AA:A6:39:07:5C:38:B7:BD:BA:87:AF:40:21:44:7A:29
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 01A13590E8EA61C6505FBA2FF03141EB3D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 041C
Signing time: Tue 13 Oct 2026 14:00:51 +0000
Manifest this update: Tue 13 Oct 2026 14:00:51 +0000
Manifest next update: Wed 14 Oct 2026 14:00:51 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: EUlyCx+OhSN/OPlLL0QByKLoeX+w547/LnT8hnGk6TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:e8:ea:61:c6:50:5f:ba:2f:f0:31:41:eb:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Oct 13 14:00:51 2026 GMT
Not After : Oct 14 14:00:51 2026 GMT
Subject: CN=90df1ad7aaa639075c38b7bdba87af4021447a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:37:e5:68:fd:eb:fb:1e:64:06:36:a8:1d:
d2:23:3f:a4:ad:a6:9b:20:93:da:b0:3b:95:20:6c:
07:b3:ff:40:20:37:85:a6:dd:13:86:77:8a:dd:b9:
70:40:fa:d8:ec:c1:5f:6c:ca:74:08:d9:3b:7e:b1:
e5:ec:22:ba:66:d2:1e:25:85:e4:27:5a:a0:f0:a5:
72:8b:26:df:31:1a:7d:42:f6:3a:fc:b8:a8:25:b2:
6f:d5:24:00:02:10:bd:1d:be:61:02:bb:6c:6e:f5:
7f:51:ff:97:ce:b7:03:20:8c:2d:59:a8:83:55:e0:
85:cf:dd:3b:e2:4a:26:c2:c1:89:bf:b0:7c:61:e9:
85:c8:5d:48:4f:d6:ae:ae:4b:1b:23:5d:01:1b:bf:
a9:83:27:3f:e7:60:25:6e:ee:50:73:9d:c1:4a:11:
51:c9:51:1b:7a:c8:ae:4e:93:96:50:4c:a7:e4:dd:
05:79:d6:25:4a:e1:76:d7:8c:0f:21:1f:86:89:61:
e4:ba:64:66:54:66:81:29:5a:9c:dd:b6:df:40:d7:
ee:d2:10:ba:9c:9c:b9:bd:90:c2:f6:f7:70:e5:80:
07:eb:b7:92:27:23:d0:4f:bd:be:96:26:41:38:a9:
bd:5f:14:1e:f1:cf:1e:7f:fa:b7:a8:97:13:9f:c9:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:1A:D7:AA:A6:39:07:5C:38:B7:BD:BA:87:AF:40:21:44:7A:29
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:cc:54:b8:da:f8:66:04:a4:57:f6:82:bb:68:75:8e:f5:
10:ac:40:96:ae:0a:c2:c5:89:eb:d7:a9:f1:68:d2:97:01:9c:
48:de:ad:fa:f9:37:fb:6a:22:98:9c:3e:0a:8e:8f:5f:12:a7:
3e:89:58:f3:67:10:55:07:ce:7b:05:81:2d:54:33:57:72:c3:
75:0c:0c:ec:68:a2:f0:d2:72:2f:68:2d:3a:23:55:1c:f7:9d:
c2:13:9c:45:9d:c7:79:c7:31:40:cb:f4:7e:5e:fa:25:70:c2:
81:7a:a5:9c:13:d4:ed:71:b3:8c:07:e5:37:da:4b:5b:7e:f0:
04:e3:2b:53:7e:5a:6d:42:c4:3e:a2:29:de:f7:2f:51:7a:90:
1b:ba:53:4c:5e:d9:c4:83:93:7e:3a:b9:63:ec:49:50:b6:ca:
ef:71:44:ee:4a:8a:00:31:db:f0:d2:9e:49:75:e2:d0:ff:ac:
b7:8b:b2:7c:ac:d0:bc:51:79:c5:b6:3e:e9:8b:4f:1c:37:75:
e0:71:64:89:09:e9:0c:e1:26:2d:c0:a2:3c:fc:4f:79:bf:62:
6e:a5:05:c1:e3:f5:87:e7:16:47:02:31:dc:d7:9b:70:b8:f5:
40:4f:cf:e7:90:86:51:fe:d0:95:a3:86:32:f2:bc:ce:9b:97:
d3:64:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:44:28 2026 by rpki-client