Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: yeFgfzCWomn9/VuaQhWyE69ZJIw3NuuqC+o7KJGlKA0=
Subject key identifier: 4E:CD:86:EF:D0:E7:6B:4A:8E:44:8D:FC:A7:64:48:9C:95:19:12:99
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01A0C3D732DB561AAE826A196FD36F228150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 0A1B
Signing time: Mon 21 Sep 2026 12:00:55 +0000
Manifest this update: Mon 21 Sep 2026 12:00:55 +0000
Manifest next update: Tue 22 Sep 2026 12:00:55 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: fxRek0xkI75bHhP/p227WuDU37VCwX9OTHgprRJqL2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:32:db:56:1a:ae:82:6a:19:6f:d3:6f:22:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Sep 21 12:00:55 2026 GMT
Not After : Sep 22 12:00:55 2026 GMT
Subject: CN=4ecd86efd0e76b4a8e448dfca764489c95191299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:59:82:08:da:44:b5:8b:5f:1f:53:ae:08:
72:1b:64:f6:c8:ee:a1:90:47:e8:99:51:f7:da:89:
40:9f:89:d2:97:ed:d8:11:c8:0d:d4:ee:e7:6e:9b:
26:bc:e3:0c:b4:be:41:26:c9:3e:e7:07:01:c4:d8:
a3:5a:ea:c0:9d:0a:33:ff:fa:71:1d:d6:e4:06:04:
7f:b6:69:bc:3c:c6:9c:72:73:41:94:62:cb:26:6c:
66:58:cc:a6:b6:5a:e8:de:55:3d:71:87:45:34:08:
65:9d:e5:57:d9:d8:e2:ec:78:b9:69:2a:86:50:31:
14:f5:20:c3:02:69:74:bd:56:4a:09:2e:d7:75:ab:
63:a5:91:ac:d2:bf:83:98:27:2f:e6:66:2f:cf:75:
83:1b:23:f1:e2:37:c0:01:9c:91:f8:b6:41:69:71:
57:44:9a:39:c1:07:68:31:e9:d4:68:a3:48:25:f1:
64:85:fb:6d:b9:d0:d6:d2:5b:ee:43:e9:65:66:31:
b9:3b:e1:4d:14:db:56:16:52:50:00:a9:c6:90:ca:
2e:64:09:9c:c6:1c:81:31:57:e7:d9:8d:b9:d8:e0:
2c:d1:36:00:d1:81:a3:3a:76:b7:80:fe:99:9b:16:
eb:89:b0:d9:dc:9e:da:80:94:71:9c:d2:4c:f7:0c:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:86:EF:D0:E7:6B:4A:8E:44:8D:FC:A7:64:48:9C:95:19:12:99
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:f7:78:3e:fa:e2:a8:c1:55:10:70:84:2e:59:57:38:ce:
79:ae:d9:3c:a3:30:9a:d2:28:20:06:8c:b3:dd:40:ec:92:e7:
31:f3:bb:04:f2:6c:2e:5c:bf:c0:f0:eb:03:a6:61:ce:1e:f8:
e0:a0:73:09:dd:a9:94:e6:a2:72:92:43:ed:6c:b8:58:10:83:
0e:1f:56:13:c2:eb:84:4c:8d:23:b8:2a:1c:07:18:11:51:0e:
c0:ce:79:d3:97:14:57:b8:a1:99:71:cc:db:15:f4:4a:6b:e0:
54:9e:96:5b:b0:e8:38:dd:0b:2f:cb:d2:c1:7b:da:80:82:cc:
86:b2:71:76:8b:ce:dc:dc:e6:6d:d5:b3:31:23:e9:2b:f0:63:
fb:21:b2:0f:60:d1:b9:9f:36:de:34:07:4f:f7:6d:7d:9e:b6:
c6:4d:46:1b:c3:52:45:ca:3f:bf:2a:da:a0:77:a7:44:6f:a2:
78:90:f8:d6:79:6e:4d:f4:07:00:b6:49:16:13:10:29:8b:29:
d7:4f:56:ef:5a:b1:c1:ad:28:81:ec:6f:15:41:81:7f:38:a4:
38:43:75:88:32:c9:d1:de:9c:2f:2a:f4:d3:df:f2:e4:9a:06:
6a:05:62:3d:db:91:e9:d5:79:69:b5:12:0b:f0:04:f9:4b:76:
92:e1:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:00:05 2026 by rpki-client