Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: KspMnpKfb5ePnX26VHUCR+UR6x1mFAiNlNrJSlPC8vg=
Subject key identifier: 4B:89:C7:9B:A6:1B:40:B1:CA:05:66:67:5E:08:FD:AC:99:31:DB:C6
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 01A0C746430A9AF093AA8AEC43CCC112BA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 1204
Signing time: Tue 22 Sep 2026 04:01:05 +0000
Manifest this update: Tue 22 Sep 2026 04:01:05 +0000
Manifest next update: Wed 23 Sep 2026 04:01:05 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: WplHskN7S43JdLvYcZ4fAiPCTg5Jknp8s9mQSLqy2fQ=)
2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:43:0a:9a:f0:93:aa:8a:ec:43:cc:c1:12:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Sep 22 04:01:05 2026 GMT
Not After : Sep 23 04:01:05 2026 GMT
Subject: CN=4b89c79ba61b40b1ca0566675e08fdac9931dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:1a:83:bc:3d:26:e8:ea:b9:b5:81:13:64:
2c:10:5f:bb:e1:4d:5e:03:3b:9b:05:dc:3e:eb:10:
f0:c7:20:22:c7:3e:01:dd:b1:cd:9c:f3:dd:e1:c6:
d6:00:70:7e:dc:cc:f8:dd:4c:c1:fd:65:50:e3:b0:
32:85:1b:f7:ff:b0:db:a5:a4:1a:ec:71:1d:73:f7:
44:7a:8c:02:79:24:9d:c1:4b:44:4e:44:41:8b:68:
fb:2c:33:3e:0f:91:16:4b:d8:46:99:c8:c2:32:00:
8b:58:fb:13:08:5b:11:b9:bb:86:b2:59:cc:64:c5:
19:54:3e:27:30:d5:a7:71:ae:ea:e3:be:b4:70:c5:
0d:f3:9b:6e:af:9d:be:a2:5d:e6:30:05:e7:80:4b:
28:86:0f:43:4d:88:72:28:c4:e1:a1:14:f0:7a:79:
28:53:e3:55:e9:9a:a6:c5:50:8c:81:49:5c:60:0e:
51:fe:d2:ed:66:2b:e2:8a:35:fe:07:89:62:3c:df:
39:18:b3:b5:c1:cc:da:ad:72:89:6c:3a:af:0d:9a:
c4:12:ae:78:b1:41:10:0c:99:67:2c:7c:86:98:49:
d3:e8:72:83:eb:b5:1b:c6:54:fd:39:34:0e:40:36:
af:74:3b:75:90:23:61:a2:bf:a6:ee:4a:77:84:e3:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:C7:9B:A6:1B:40:B1:CA:05:66:67:5E:08:FD:AC:99:31:DB:C6
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:68:76:bc:f9:94:16:56:7a:4e:9a:e2:a7:1f:fa:a7:3e:06:
08:42:f5:fd:83:4c:aa:b1:e6:0b:59:4d:4f:ba:9d:7f:36:71:
6b:e6:7f:d5:42:16:c8:e6:ee:1a:32:12:fe:4b:5b:04:dc:a5:
3b:22:97:d3:d8:78:57:60:d8:1d:02:ae:95:57:b3:ee:26:29:
c9:11:f3:89:b1:70:16:9d:1f:bf:e0:33:1c:70:39:95:9d:d5:
b6:f8:d9:b3:94:51:7b:d9:22:e8:f6:22:6c:83:60:0e:0b:66:
18:19:a4:ec:2a:b8:9c:28:13:09:21:65:47:3b:85:e8:71:ca:
63:03:33:67:a6:e7:bd:d5:44:8c:32:b6:3a:8c:eb:04:45:0b:
3a:a8:e3:fd:5c:eb:38:79:86:37:8d:06:78:ba:13:93:e9:9f:
d5:2c:8b:ca:3b:71:9d:4e:0f:23:20:f4:12:59:c3:c4:5e:8d:
5f:3b:17:d9:94:49:b6:d5:85:e7:ed:c4:9f:05:a6:ba:73:dc:
b5:d0:b0:00:40:57:5c:2c:71:11:c7:d9:f0:dd:f0:78:f3:0e:
8d:4c:07:2b:71:ad:27:c9:25:d2:2b:11:ab:0a:74:9a:18:67:
f5:a2:ad:c1:4b:08:e0:83:6d:8a:57:32:c4:c6:28:e3:08:71:
c1:b1:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:39:49 2026 by rpki-client