Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
File: FXPG9nseOPvBEuPu_dWM6PGBmhg.mft (raw, json)
Hash identifier: /AsIrJEtaZ6Elzqz4zHsMQJWp3/JmBBfqGTk40x1IR4=
Subject key identifier: C4:7F:2F:4D:1D:B6:3B:81:5D:EB:5D:DF:A0:F1:EB:53:95:EF:EC:C6
Authority key identifier: 15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
Certificate issuer: /CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Certificate serial: 01A0C40E79A4521020A54E7F3E5E242CAFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
Manifest number: 27
Signing time: Mon 21 Sep 2026 13:01:17 +0000
Manifest this update: Mon 21 Sep 2026 13:01:17 +0000
Manifest next update: Tue 22 Sep 2026 13:01:17 +0000
Files and hashes: 1: 2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa (hash: cwU5pAf2dP5NYzTVspwr70DBPw/O8TM1hJgcxejxVzw=)
2: FXPG9nseOPvBEuPu_dWM6PGBmhg.crl (hash: j/vAR/v9G+/UCR9GLt6f/pSF9zc1mwlCZUUigb31YRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:79:a4:52:10:20:a5:4e:7f:3e:5e:24:2c:af:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Validity
Not Before: Sep 21 13:01:17 2026 GMT
Not After : Sep 22 13:01:17 2026 GMT
Subject: CN=c47f2f4d1db63b815deb5ddfa0f1eb5395efecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:a9:3c:76:fb:bf:45:24:f7:be:ae:d8:7b:
4f:31:b7:c2:85:ee:d8:b9:66:ed:63:a7:8d:e6:1d:
f4:50:73:49:3d:e0:57:5e:75:f2:45:8e:40:f6:de:
fe:7a:83:43:f4:45:c0:29:05:8c:47:a0:c4:4f:63:
90:74:bc:00:bd:5d:dc:bc:81:4c:ba:39:2e:aa:e0:
72:a6:02:be:b9:e1:07:a3:be:86:2d:8b:b1:d9:cb:
ae:81:5f:ca:e2:5c:5d:1c:b5:b6:17:45:46:59:7f:
35:12:5a:85:0b:39:54:7b:bd:41:3d:df:02:c8:3c:
5d:39:cb:44:1b:90:01:39:e9:4c:4b:52:1b:d0:6f:
77:97:88:ae:f0:52:0c:92:cf:b9:6a:bb:25:14:f3:
cd:e2:7f:12:86:05:28:ea:eb:a4:ef:7b:10:6d:21:
98:9e:73:7d:48:3c:f6:96:f6:46:21:83:a7:84:87:
01:41:1a:fc:88:c7:f8:38:33:d4:f6:f6:bc:9f:66:
6b:9c:d5:ae:72:f8:62:3b:f0:73:1c:9b:8c:ce:9c:
95:a4:fa:07:29:2d:1b:06:94:b3:5a:86:19:0b:42:
19:9e:93:6f:f2:e7:57:0a:7c:eb:2c:56:c9:43:0f:
08:b7:9e:a7:4e:bd:8b:36:6f:03:40:57:05:7c:c4:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:2F:4D:1D:B6:3B:81:5D:EB:5D:DF:A0:F1:EB:53:95:EF:EC:C6
X509v3 Authority Key Identifier:
keyid:15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:52:8f:c9:7b:57:b3:83:a4:15:d7:eb:41:15:b1:ff:10:
cc:4a:ff:39:2c:41:78:e7:27:2f:b6:44:a2:06:f3:3f:b3:2c:
c6:b7:4b:f5:b4:2e:ad:c6:f3:73:1e:5c:30:19:3a:bb:8c:4f:
4f:dc:5d:e5:a6:3e:dd:69:0f:03:58:a9:1d:7f:39:59:ca:fa:
7a:98:3e:50:01:e4:b9:fb:32:dc:5b:2d:c9:ae:c8:03:40:e1:
ce:8c:ec:7c:c7:4e:4a:40:0a:64:cd:fc:5d:39:c2:fe:f9:82:
ac:98:46:55:55:0d:ee:23:3e:01:b2:6e:88:b4:8c:dc:9e:fb:
d9:ee:ad:8d:47:c3:a7:8a:90:53:17:78:8f:92:94:1d:c8:01:
d3:0a:86:23:cf:68:2d:74:1a:e5:69:aa:26:23:83:b3:6a:05:
89:b2:76:49:5f:0a:48:26:c8:5b:a2:c5:fa:03:4f:7c:c9:7e:
07:71:c3:98:e5:17:91:61:35:8f:21:33:dc:ab:1e:f3:8b:81:
76:a8:b1:cc:0e:6d:0a:3b:1e:94:a7:f4:21:28:d5:56:f9:bd:
b0:9f:6b:08:d5:03:13:a3:b0:3d:1e:3e:65:db:c5:cd:b1:c8:
e9:4d:e2:43:5e:6f:92:8c:ac:65:f2:b1:24:a5:f9:f9:d4:00:
4f:f0:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:22 2026 by rpki-client