Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: DAciHNkOtFOEkrzpbB9np+Pq7kXuelnciBLVfe1/+OY=
Subject key identifier: 2A:EE:D2:B7:BE:B8:1B:7C:3C:05:27:CB:72:3F:C2:5B:65:C9:19:C2
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01A116E126CF2D72E9276FF158B0BC70E798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0A3C
Signing time: Wed 07 Oct 2026 15:00:16 +0000
Manifest this update: Wed 07 Oct 2026 15:00:16 +0000
Manifest next update: Thu 08 Oct 2026 15:00:16 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: j14lVvgI9DVAUV5zDeCqBDpQL7k9AN4E28nRM9pm1t8=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:e1:26:cf:2d:72:e9:27:6f:f1:58:b0:bc:70:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Oct 7 15:00:16 2026 GMT
Not After : Oct 8 15:00:16 2026 GMT
Subject: CN=2aeed2b7beb81b7c3c0527cb723fc25b65c919c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:80:f9:d5:13:28:4e:d0:a2:f8:93:a4:f0:
63:b8:ce:87:32:14:5c:5d:66:12:41:be:0a:db:03:
c4:c5:50:a1:5c:72:d0:1c:f2:ee:c3:4e:71:73:87:
5d:f6:6c:b2:dc:64:60:dc:3b:74:d6:84:eb:28:78:
29:43:58:17:c9:a4:4a:bf:33:0e:55:3e:5c:c3:b4:
fd:ba:a3:3a:2d:57:cd:01:ef:8c:b4:f1:71:96:93:
ca:d7:00:95:4c:4a:75:49:f6:f3:7f:b1:b0:d6:80:
ed:be:a0:85:2c:8d:ec:a5:59:ef:db:e6:a8:57:48:
43:e2:a3:50:39:11:51:ab:0a:7b:8c:4e:e7:67:a3:
71:be:1d:59:d3:98:07:9d:26:18:60:9d:4a:da:f2:
35:eb:d3:49:f2:25:01:27:0e:25:aa:2c:f2:f1:39:
95:ea:16:21:52:b0:57:29:59:1d:3a:b6:75:09:d3:
c8:75:57:c1:9c:c1:be:ac:da:5f:d3:bf:bc:9e:00:
28:f4:59:d3:09:a5:6b:47:33:7f:d2:de:e5:69:29:
fb:ea:50:9d:93:30:ff:26:ce:c1:67:33:8c:5c:aa:
32:92:d3:82:62:a6:e0:46:2a:3c:42:86:3f:6e:b4:
aa:fc:2a:57:af:a0:83:1b:11:51:31:47:db:71:87:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:D2:B7:BE:B8:1B:7C:3C:05:27:CB:72:3F:C2:5B:65:C9:19:C2
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:95:90:a9:24:99:cf:ca:3b:06:a8:ab:f2:c0:12:33:ce:35:
4b:84:5e:8c:1b:f7:6d:d5:5f:94:24:a6:42:d2:2d:f1:8d:74:
3a:08:8c:b4:dd:d1:20:07:75:c8:83:22:2d:63:aa:93:ee:6f:
86:67:4b:f9:d3:d5:a5:1e:bb:b0:7d:6d:99:3c:3d:0b:bf:2c:
6a:0f:1d:39:be:5c:42:c9:34:81:c1:6b:5b:30:cc:f5:77:e4:
7b:11:dc:51:65:bd:9b:c6:f9:b5:6f:e1:ad:87:76:4e:78:ab:
f9:f4:79:bb:e4:78:9c:40:ff:25:89:c3:1e:1d:1f:2e:73:6d:
e5:ea:17:23:97:33:67:34:f7:24:26:4d:2a:a4:52:93:16:68:
9c:db:5f:de:cd:b0:a6:48:54:ef:2a:24:20:5a:22:94:0d:59:
f0:3f:0c:63:4c:4f:ec:ca:78:63:0e:b4:c0:b4:e5:3d:27:cb:
ea:eb:ef:51:49:42:da:39:7f:52:6b:9f:46:54:ba:b4:2b:5b:
93:eb:de:e0:a8:b7:de:dc:ee:34:84:12:06:c3:ed:7b:5d:e1:
13:ce:f5:e1:b4:0b:a2:6c:20:27:45:46:15:51:9a:f2:aa:fc:
e5:d8:ab:b6:35:3d:66:0f:85:d7:d3:1a:0b:b3:78:11:08:07:
2e:fb:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:16:09 2026 by rpki-client