Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
File: 206iqo001DtLZBo68wZChJv0qP4.mft (raw, json)
Hash identifier: RIHHBK7BRbxJPfZl9Gj2BfvmxF53JLIAZ/bKc2NXZPU=
Subject key identifier: FC:CF:DE:DE:FB:FB:68:F4:3A:42:7D:BD:DE:D0:66:D8:71:31:EB:37
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 01A132909D985F48F10D2807571397F42D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
Manifest number: 0166
Signing time: Tue 13 Oct 2026 00:01:40 +0000
Manifest this update: Tue 13 Oct 2026 00:01:40 +0000
Manifest next update: Wed 14 Oct 2026 00:01:40 +0000
Files and hashes: 1: 206iqo001DtLZBo68wZChJv0qP4.crl (hash: eRRC/eDI4ahF5FMWtaSSJovrCjnHpcwL2yYithrpDRI=)
2: 91e9yF9Tf7PVgXnUQvheAdf-6Us.roa (hash: 98Ii+uAjQhKWebR7PAPkmqEpVcWs6e6h4lYnAI9zFHo=)
3: pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa (hash: i1jQeihj8pFQh1bbrfH4V97DkpUqCZyj8dwZ2mijp1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:9d:98:5f:48:f1:0d:28:07:57:13:97:f4:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Oct 13 00:01:40 2026 GMT
Not After : Oct 14 00:01:40 2026 GMT
Subject: CN=fccfdedefbfb68f43a427dbdded066d87131eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:87:f6:1b:53:f1:1e:6b:d2:c9:0e:72:a3:
fb:7d:f9:fc:29:bd:ca:8e:e0:36:b8:69:1f:f6:b7:
29:f2:2b:46:8e:7f:a5:69:36:37:ba:37:d0:c1:25:
23:a6:7b:c4:13:e3:db:64:dd:34:9e:ca:d0:59:4d:
15:44:1a:4b:24:47:d6:00:f1:a5:6e:c7:1a:85:de:
46:32:b8:bb:bb:61:38:98:10:bf:87:b9:93:d4:fa:
34:e6:0f:9c:df:95:61:6c:2d:1c:05:c1:20:26:5c:
11:3d:ce:c1:16:7a:8c:81:24:d0:5a:2b:02:6c:7c:
4a:99:d2:79:6b:21:64:3f:c4:77:5a:8b:82:f9:be:
78:2d:37:71:38:55:5e:10:55:e3:25:09:ce:e9:8d:
15:cb:09:9e:2e:86:db:38:b0:45:29:62:ea:9b:0d:
78:cc:0d:35:25:03:c0:20:03:ab:08:1e:f3:0f:26:
73:fe:cb:4a:2a:55:dd:0e:17:85:84:79:88:ce:35:
ae:92:56:52:c2:46:15:03:59:40:f0:2b:5d:ff:4e:
09:6d:b6:22:aa:6c:93:56:4d:50:fd:51:db:8f:04:
3e:6a:ee:75:0f:cc:2d:6a:a7:70:57:c9:8a:9e:f8:
5b:5e:04:b9:c0:36:5f:e3:2c:28:07:8c:63:8a:d1:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:DE:DE:FB:FB:68:F4:3A:42:7D:BD:DE:D0:66:D8:71:31:EB:37
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:90:ad:37:5e:fa:d6:b9:1b:f0:5d:fa:d8:b3:9f:b4:51:df:
07:17:dd:46:b3:ad:1f:e5:30:5c:f3:52:53:77:48:cc:16:ae:
d2:ef:b3:16:41:15:c6:5c:c7:33:73:1d:27:0e:54:3b:78:c0:
39:41:af:de:6f:e8:e6:44:2e:a5:c6:f2:3c:45:c5:b0:4e:13:
b5:e7:38:9d:49:23:c8:03:ff:bc:fe:88:96:1c:0e:0e:24:e2:
76:fc:6a:70:24:89:1a:75:a0:22:64:80:59:0c:a9:c8:e8:bf:
c4:60:73:35:92:de:53:2f:f4:7e:59:79:18:61:60:f4:3b:67:
5a:ea:bd:df:7a:3d:9f:77:4a:de:e9:31:66:8d:a4:e3:c0:a8:
d8:56:b0:24:18:72:b0:a3:e3:aa:09:95:5e:42:13:94:f8:83:
db:34:e8:99:6d:6c:f6:a7:45:48:ff:4c:e9:45:48:6b:a4:34:
e2:a5:bd:4e:04:fa:da:22:93:e4:c2:93:68:bd:bc:e1:32:7c:
b3:af:9e:7e:66:ce:63:ec:de:cd:b5:39:3f:58:a6:85:91:55:
84:f4:e1:b8:1e:a0:22:78:e0:06:f7:2b:3f:be:04:c0:6b:f9:
58:b7:96:53:c4:b6:84:10:13:df:79:bb:55:f9:51:38:60:4c:
24:0a:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:00:43 2026 by rpki-client