Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: P8qIoAoy04WpN0wwjJhZsDG6p+IHcWU2DQYz/GMbxb0=
Subject key identifier: 2D:CA:4C:12:CF:78:3F:6C:07:89:EF:7E:B0:16:4A:46:F3:DD:BB:26
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 01A0C58DFA335ADDD58B83F00182BB70D03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1711
Signing time: Mon 21 Sep 2026 20:00:11 +0000
Manifest this update: Mon 21 Sep 2026 20:00:11 +0000
Manifest next update: Tue 22 Sep 2026 20:00:11 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: xVCR8GiczZxKcbUkkh6F6/F8Yt3l4SJ+dZAc/aS1Dh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8d:fa:33:5a:dd:d5:8b:83:f0:01:82:bb:70:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Sep 21 20:00:11 2026 GMT
Not After : Sep 22 20:00:11 2026 GMT
Subject: CN=2dca4c12cf783f6c0789ef7eb0164a46f3ddbb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:b8:7e:f0:6b:42:94:90:8f:19:67:c4:23:
35:9a:8f:35:b4:ec:a2:05:fb:7e:f5:ef:52:9e:8f:
7f:c9:99:01:e7:ab:68:63:fc:cf:1b:fe:f0:a9:2a:
b2:e5:94:f8:78:25:18:96:26:ad:00:99:c7:64:9b:
a3:f1:dc:d5:79:91:41:ac:d8:dc:b3:27:ed:a3:93:
10:3e:32:ac:fa:71:8e:ae:5c:cd:4b:98:8c:13:f8:
49:79:29:9a:fc:e4:84:1c:da:5f:f1:a4:e6:b1:b6:
b3:df:57:db:1f:6a:2d:66:50:99:4c:c5:58:5e:e6:
3a:fb:ab:de:43:6e:44:bf:99:d5:08:4c:36:57:c1:
f9:bf:c4:99:c8:89:4f:a2:61:ca:9b:48:06:54:af:
af:ec:fb:e3:22:80:8c:77:8a:d0:9b:96:b8:27:f7:
df:d2:69:22:1b:f5:2b:53:8d:7b:d2:71:f5:f1:88:
2e:b2:6b:5d:91:93:1b:b5:2e:9b:6d:07:e3:d7:87:
8a:02:5e:ee:07:08:81:a1:62:98:d6:bf:d6:af:7a:
23:0d:1e:2c:ea:95:26:aa:78:cc:eb:4b:bd:e2:d1:
9b:71:e5:92:fd:05:1e:9e:1c:fb:60:2d:b6:55:cd:
7d:fe:52:75:f6:0d:9b:e6:37:9d:15:a6:3a:12:01:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:4C:12:CF:78:3F:6C:07:89:EF:7E:B0:16:4A:46:F3:DD:BB:26
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:39:fa:ed:39:f8:91:04:04:7e:a3:24:30:f4:30:9f:f7:
e1:11:ac:22:f0:d1:54:46:40:9e:c4:28:45:15:f2:10:6e:b9:
0f:63:cd:ec:95:f7:88:1c:17:e2:33:80:aa:05:ad:71:ed:9f:
d2:f9:30:26:e0:dc:af:5d:75:a9:1e:2f:8b:a2:83:06:02:df:
5d:4f:e1:d9:b0:d9:2a:8f:c9:5d:40:0d:b3:db:8d:53:05:23:
44:15:3a:69:7e:f2:98:88:08:78:6c:3d:d1:3a:d9:9a:2a:3a:
04:0f:8a:ab:03:d7:80:8d:95:04:11:ea:a4:b2:6e:cd:e1:92:
93:47:38:37:31:f2:43:83:8d:a1:83:ea:ba:ab:44:9d:5a:42:
db:11:6b:82:37:e7:15:91:71:20:e6:5c:94:5c:74:86:44:8f:
db:85:76:ba:fd:83:26:d1:c0:0c:cb:ab:29:a8:bd:01:56:eb:
cd:6a:4e:a3:13:de:3d:81:12:18:2c:af:f1:90:52:41:e1:b0:
a8:a1:e6:d0:66:56:ae:b0:7b:d6:9d:b2:bf:ec:a8:3c:67:38:
a5:09:7b:ea:8b:77:45:e3:dd:16:33:d0:e9:b0:2b:9c:e4:7f:
10:bc:11:7f:2b:60:20:0c:c3:12:52:a3:4b:74:ff:a2:bf:20:
b1:4c:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:46 2026 by rpki-client