Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier: JQKqNGaNLDyPRnSzH9ha/jeuAi7sW/161wDnJe0L+to=
Subject key identifier: AF:47:41:09:16:AC:0F:55:A8:11:7B:EA:4A:55:EB:BC:AF:4A:04:AE
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01A0EFD4EF219B9B2145A67767C015A32835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number: 1569
Signing time: Wed 30 Sep 2026 01:01:44 +0000
Manifest this update: Wed 30 Sep 2026 01:01:44 +0000
Manifest next update: Thu 01 Oct 2026 01:01:44 +0000
Files and hashes: 1: 3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa (hash: dC1Jmhk6Q3zkT4ET8SP9YRaPacsXX6m/6++3eHhj2g0=)
2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: smua8CqVQwUYLuclLPnEDLq4KABdEFPkojGIcs4r4cs=)
3: cKcoRWHQwfauJJ79HMNTxO8TArE.roa (hash: qSclfiqQpyIPt0VyXaw1cPESon9MZyiR7MxfOycVKxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:ef:21:9b:9b:21:45:a6:77:67:c0:15:a3:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Sep 30 01:01:44 2026 GMT
Not After : Oct 1 01:01:44 2026 GMT
Subject: CN=af47410916ac0f55a8117bea4a55ebbcaf4a04ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:53:26:9c:0e:a6:71:08:a0:c9:97:63:70:
42:1b:53:de:80:62:77:07:a5:3c:c1:06:cb:6c:05:
52:93:ae:4b:fe:0f:a0:b3:0e:e7:00:a2:06:b9:6b:
a7:b4:1e:9b:49:7c:f1:12:03:28:10:88:f7:b7:9f:
dd:36:6d:9e:60:9e:3b:c2:24:34:52:c3:b8:37:59:
0b:17:03:d2:6c:7e:c1:a3:2a:e6:00:76:97:d9:8b:
c7:ac:05:73:c9:5e:7c:53:80:64:bd:d5:99:c2:ea:
81:41:3f:74:22:f2:2f:31:dc:a9:88:19:8a:54:a3:
e4:0a:0a:9f:f3:46:9d:82:8f:10:96:5b:77:12:53:
1c:90:ba:8f:6d:1e:c0:4f:5d:28:39:46:4e:98:5c:
5a:86:f5:cd:9d:2b:e4:ae:b2:6d:8d:50:25:5c:93:
12:74:bc:a7:ba:aa:36:ae:58:66:79:2d:dd:df:1e:
28:8d:d1:70:f3:f8:3b:aa:0e:4d:37:02:10:e3:cb:
37:4a:3e:be:2d:60:cc:ad:0e:0b:a7:16:4a:60:88:
f0:e1:66:a3:3b:5c:05:84:c7:3c:dc:fd:37:56:58:
46:10:a9:63:1f:6f:7c:5d:f1:fd:dd:1a:5a:b6:f0:
f4:92:37:eb:52:cd:07:ca:45:49:59:b8:4b:f1:80:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:41:09:16:AC:0F:55:A8:11:7B:EA:4A:55:EB:BC:AF:4A:04:AE
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:68:ec:8b:85:50:6c:56:9a:2d:57:2c:bd:f0:ad:3f:4d:
f5:dc:7c:db:63:c0:e0:40:1e:9b:b8:78:72:d9:59:cd:25:eb:
95:04:67:e7:cb:80:8c:a7:65:e0:93:75:24:a3:7c:e3:15:00:
33:c3:a1:5b:e2:11:ea:50:bb:cc:4b:f1:e6:c8:a8:31:48:34:
8e:36:f3:1e:37:89:b6:9f:3b:2c:e1:a6:2e:01:cb:3e:7b:2f:
3b:ef:8c:c3:ef:42:46:26:e7:e2:88:a6:77:b1:b3:ba:ce:5d:
df:cd:64:58:09:4f:b3:fa:3e:33:80:1a:0c:8d:b2:e5:19:3c:
df:ae:b0:1c:8d:49:ae:4a:a3:5b:4c:b3:67:b8:50:01:90:76:
48:2a:f4:9a:5d:fe:ca:c3:0d:9f:18:19:da:39:d9:73:01:1f:
f4:87:82:81:c9:03:3b:cb:9f:dc:17:b1:ab:8a:bf:23:86:06:
cf:0c:42:3f:e8:40:24:97:76:b7:76:5e:b9:de:5a:67:49:29:
5d:7d:15:10:5f:ba:10:29:27:b0:74:c9:e1:6a:d9:9b:5c:34:
cb:1e:ef:0c:1a:2e:ba:11:b4:39:af:be:7a:42:d4:57:4a:f4:
3c:3b:65:bf:49:62:5d:f7:45:37:90:9f:23:26:61:3f:a6:fb:
11:a6:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:23:42 2026 by rpki-client