Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: NoapeSApUD/EXNKDxfuM5btrgbUt78KcLc3ocvg3LCc=
Subject key identifier: E9:AC:B3:B6:C2:8B:59:BC:67:7E:53:58:DD:EB:0B:C2:B8:BE:89:C2
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01A0D83B5E623FEA3A8938CD8CA01BB0BECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0A1A
Signing time: Fri 25 Sep 2026 11:02:44 +0000
Manifest this update: Fri 25 Sep 2026 11:02:44 +0000
Manifest next update: Sat 26 Sep 2026 11:02:44 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: ckhpBVFnd35p9JdnvfS1HXfjVO5p1rA1zsE2FbTOWHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:5e:62:3f:ea:3a:89:38:cd:8c:a0:1b:b0:be:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Sep 25 11:02:44 2026 GMT
Not After : Sep 26 11:02:44 2026 GMT
Subject: CN=e9acb3b6c28b59bc677e5358ddeb0bc2b8be89c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:8b:29:f0:ee:96:49:02:49:cb:f8:c6:ff:
9f:2a:9d:52:c2:7d:0e:56:98:e4:8f:da:3a:24:61:
5e:5f:42:73:43:77:16:84:82:9e:75:c5:93:2b:bc:
f5:04:2e:c8:59:ac:fe:be:57:21:15:3e:11:51:0f:
39:9b:04:7e:69:d4:ab:36:5f:ff:cf:3f:de:9b:72:
61:e7:0f:c4:ab:51:54:96:8f:0e:8d:9f:d6:b6:7a:
76:ee:8b:91:2a:17:a4:6a:b8:06:15:8b:50:2e:82:
a6:9a:b4:85:c4:1c:73:1f:18:46:52:44:9b:de:08:
b2:94:d2:02:37:fd:0f:a1:3b:16:b9:07:ca:e0:e8:
12:7c:c1:90:ba:dc:ca:c2:ca:27:ea:53:c6:a6:34:
92:ee:6e:63:ce:ba:24:68:c4:75:54:0f:e7:0e:d6:
c5:fa:81:84:13:4c:10:f4:cf:79:eb:a1:a3:01:00:
75:f4:fd:96:e5:ea:ba:4b:47:c3:e9:08:81:b9:92:
f3:fd:f4:82:c7:2d:6d:71:3b:5d:6a:84:84:73:80:
fc:22:0b:0a:a3:a8:cb:4b:47:06:00:e0:3b:40:a1:
4d:8d:db:ed:5b:07:40:ba:43:67:ef:10:5b:51:20:
83:9b:4e:77:20:57:a9:86:51:72:b9:a7:81:28:29:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:B3:B6:C2:8B:59:BC:67:7E:53:58:DD:EB:0B:C2:B8:BE:89:C2
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:65:d3:8d:b6:ab:dc:6a:85:4b:6f:8f:5f:bb:11:12:a6:6e:
2e:c9:5f:bc:6a:a1:f9:2e:e2:f0:71:58:73:b7:8a:f5:a4:b5:
4c:99:ba:78:21:3c:80:bf:df:fd:94:a3:84:2b:ad:55:ec:15:
98:9b:05:f9:b6:46:50:79:11:9a:86:45:5a:5d:c8:f7:19:e4:
1e:22:5a:2a:d5:67:b3:a2:67:4b:8c:ef:a4:5a:f3:ab:23:ea:
83:1f:dc:be:50:eb:b1:64:83:6b:0e:29:94:b7:ca:1a:7e:9a:
f8:f6:54:5f:d7:26:f9:a9:5a:5c:60:e7:dd:65:09:1d:95:ab:
e0:e7:61:39:17:54:67:13:e3:ea:1e:86:de:08:e9:8a:aa:17:
70:27:8b:75:b8:63:ff:ee:bf:6b:7d:36:03:76:da:d8:a7:30:
35:74:c6:38:49:7a:b2:ce:b4:52:64:ee:db:fe:54:6f:92:bb:
b2:cb:70:39:02:bd:7b:ac:b0:de:0e:96:43:f3:8a:74:dc:f8:
35:57:d3:7e:20:c9:6b:e6:3a:28:93:b7:ae:0c:67:37:4a:f6:
4a:91:c4:68:5c:06:87:38:ef:9d:ed:7b:44:7d:ad:d4:5c:07:
29:e0:85:92:bc:ae:9a:67:15:c2:54:f2:69:43:f8:5b:3f:9b:
f3:42:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:12:21 2026 by rpki-client