Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: Q3Mx6Mkv2z5dlJUT1ETry4t7qztIL9TtzaSImiaU5xY=
Subject key identifier: C5:A3:84:75:FF:04:BF:91:D9:78:DA:3C:96:AD:99:AF:A5:0F:ED:02
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01A0C63337E4CF1CF9F09D3FC99DCB09D450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0ED8
Signing time: Mon 21 Sep 2026 23:00:40 +0000
Manifest this update: Mon 21 Sep 2026 23:00:40 +0000
Manifest next update: Tue 22 Sep 2026 23:00:40 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: Fh8YqUXQ+G5XO0EH6n76ttTAfgSUZ5Lei8H/ZPO9uV0=)
4: oJvITbepfzrc6o9BZXmQMi0rT08.roa (hash: s+wcpOjEeCx+BjpAw8N3cqojgGpwUPNtyJb5e2nTcLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:37:e4:cf:1c:f9:f0:9d:3f:c9:9d:cb:09:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Sep 21 23:00:40 2026 GMT
Not After : Sep 22 23:00:40 2026 GMT
Subject: CN=c5a38475ff04bf91d978da3c96ad99afa50fed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:98:76:a9:70:11:66:0e:db:4c:8f:00:3e:
3e:df:bc:26:ab:09:56:52:ab:35:2a:40:63:68:b6:
13:e5:78:dd:de:33:f6:d0:5b:c1:65:de:b3:f7:db:
80:a9:73:11:83:a5:7a:7a:59:c0:61:34:f2:9c:75:
9b:ed:e9:9e:a6:af:41:4a:e3:0e:cf:36:f0:1f:b8:
b5:a0:23:f5:53:bd:79:c2:d6:93:69:03:a5:52:ed:
46:f1:ad:bc:20:12:b9:f8:e2:1b:45:72:6d:bf:8f:
66:7c:96:4d:4a:a2:14:1d:54:b8:ea:0d:60:7b:b7:
91:f4:52:ae:48:53:43:04:f1:20:2c:94:13:61:ce:
7c:83:ae:19:df:4f:f1:2d:22:81:17:db:b9:aa:fc:
91:e7:1d:60:52:00:bd:19:61:f4:15:93:52:f1:d5:
3d:3b:73:53:94:71:03:38:be:ab:ab:77:bc:c7:bb:
b7:64:44:7d:e0:ef:6e:39:74:23:8d:86:af:98:1e:
e0:46:63:af:98:b1:66:25:a3:0f:3b:f2:5f:3c:7d:
ea:76:c3:bc:b1:a9:d0:ee:24:72:46:f4:1c:0c:9c:
37:8f:e5:1c:79:2e:9f:08:c5:78:7f:ea:73:73:f4:
30:18:4d:12:26:0e:ba:5f:36:57:57:2d:c6:94:37:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:84:75:FF:04:BF:91:D9:78:DA:3C:96:AD:99:AF:A5:0F:ED:02
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:19:01:17:fb:e6:b4:43:6a:27:9a:75:aa:cb:8a:7a:c8:84:
3c:b5:b5:7d:e7:f7:8b:d3:29:d4:36:9a:dc:c0:e6:62:99:ef:
df:07:2b:c1:8b:0b:e3:6f:ce:fc:58:6e:b9:c3:23:32:d2:6a:
75:99:ec:2f:27:49:f1:6d:1c:f1:b2:79:9d:bf:d4:ad:c2:4f:
ce:cf:37:ac:87:0c:09:f2:cd:14:ac:d7:30:14:e5:fe:4b:b1:
93:49:25:9c:f4:d6:cf:c6:f5:a3:b7:98:98:01:cb:a3:6e:61:
22:2b:5c:95:5b:1d:bb:71:ad:b4:20:6c:90:0c:c5:79:36:97:
c1:ab:f5:9a:ce:28:57:70:bb:62:35:a8:c6:58:34:ce:24:9a:
15:5b:ae:08:c4:0a:04:e5:24:01:1e:1f:02:7a:37:73:68:3f:
9c:7f:b9:ad:bb:27:8f:1d:8c:3c:3d:b7:5a:62:72:61:4c:be:
ba:68:ed:36:99:66:f9:4c:2d:05:30:28:7d:f9:c6:36:40:9c:
b4:6c:7f:66:4d:3e:67:3a:7b:68:b8:29:fe:ae:22:f8:30:f4:
26:4c:f5:7f:6b:5e:e5:0f:39:c0:3a:ab:c8:1d:f5:4b:3d:b0:
90:e1:61:c7:65:48:e7:3a:65:45:11:73:ab:67:c1:e5:cf:1d:
bd:32:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:56:03 2026 by rpki-client