Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: 9KVr5CWV60oB3+elYc+MoStxscfSM2KgYK20b9sNseA=
Subject key identifier: 46:5C:80:77:76:C5:BF:87:91:08:C6:41:AE:89:FC:36:A6:92:4A:0A
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 01A0CDECDDFED6A05F8DCD211E723BEF7238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 085D
Signing time: Wed 23 Sep 2026 11:00:47 +0000
Manifest this update: Wed 23 Sep 2026 11:00:47 +0000
Manifest next update: Thu 24 Sep 2026 11:00:47 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: 2B6vHBJSs/ZRNwbM0LGBRHm1+/aHnZGO/Z/QUxFrAh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:dd:fe:d6:a0:5f:8d:cd:21:1e:72:3b:ef:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Sep 23 11:00:47 2026 GMT
Not After : Sep 24 11:00:47 2026 GMT
Subject: CN=465c807776c5bf879108c641ae89fc36a6924a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:71:e2:cb:92:f7:3b:ae:f5:91:8d:44:a0:
42:64:de:66:17:77:a8:86:aa:bd:cf:74:f3:27:d5:
8a:de:47:88:41:ec:b5:f6:f1:00:d7:7e:a1:b5:cd:
e5:9b:23:02:f4:dd:68:72:c2:86:e6:5c:80:d9:df:
7c:45:81:15:a0:84:99:c3:2e:b8:1a:42:34:a3:9c:
c1:7b:c1:f2:17:63:e2:9b:0a:3e:c6:ab:08:ef:de:
53:91:9d:ee:1e:01:e5:bb:23:08:13:66:dd:73:47:
7f:8e:16:cb:d6:e4:85:24:87:b5:65:3c:cb:a8:3a:
92:b9:e9:ed:1d:d1:79:51:02:c6:67:93:ae:ec:a4:
fc:61:30:7d:6b:7d:cf:1b:37:8b:af:e0:09:b1:b1:
24:9f:e9:11:60:35:b8:df:30:bf:93:87:7c:ff:b5:
31:0b:c3:72:3b:17:6c:e8:6f:1b:6e:30:68:85:b5:
a7:e5:1b:fd:d6:83:15:2e:3a:e9:7f:c8:15:e4:02:
db:38:11:7c:62:6e:b7:f9:96:b5:09:17:b9:b7:29:
e3:72:4e:30:f9:63:76:a5:1d:e0:e0:89:69:ab:1d:
20:ba:ad:60:7b:c3:38:5f:60:66:80:42:d9:1b:0f:
21:70:2e:d9:7b:b7:1b:14:2d:1a:5a:9b:4f:5d:2a:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:80:77:76:C5:BF:87:91:08:C6:41:AE:89:FC:36:A6:92:4A:0A
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:ad:66:e7:e5:03:f9:b9:90:7c:fe:bc:96:51:b3:de:3c:
81:fe:d5:83:63:ff:ae:ca:90:83:51:33:8b:ea:f3:88:0e:3d:
13:1a:8b:db:e4:2c:b8:42:c3:1e:90:80:e1:09:16:0b:16:5b:
f8:f3:36:e5:53:89:3f:fa:54:52:30:b7:34:95:5d:39:72:8d:
25:17:81:d9:a6:80:5d:20:2a:8d:55:a6:eb:19:76:06:24:8b:
3e:4f:e7:be:d1:05:62:89:bc:03:3e:56:47:98:d0:a4:08:f6:
4f:a9:7c:16:0f:d1:ab:73:9c:a9:4c:8e:2d:e5:58:bc:49:ae:
27:c2:bd:ed:ac:df:53:02:5e:0a:2a:29:dc:68:c5:a7:b0:e0:
b6:6a:b5:91:78:30:16:33:33:09:0f:4b:82:c7:68:d4:1f:60:
9c:5e:a7:0a:87:e0:7a:5a:53:ac:b0:2f:8b:29:5e:6d:39:e2:
0c:0d:da:a3:9e:d2:1b:09:f6:cb:9a:07:6c:65:53:11:58:22:
7b:d4:59:7f:de:c3:a6:a5:cc:6d:20:01:cf:a5:75:62:66:3b:
80:bc:72:9d:a5:42:5b:ab:b7:7d:e6:c3:cb:f8:53:82:41:3b:
18:3b:36:50:e8:e0:8b:6f:63:a1:fe:39:c4:4c:a1:c7:a2:20:
0e:74:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:11 2026 by rpki-client