Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: j3P2m6c5GjjNG90NlFg62xaqJgKRAYsvcNbPrvAC/gE=
Subject key identifier: BF:C6:B2:C3:5C:A7:D0:FD:45:75:1C:5E:CA:13:B0:81:9A:8E:93:E6
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01A0C8FD4168E747A2423294FC53350EA529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1A73
Signing time: Tue 22 Sep 2026 12:00:35 +0000
Manifest this update: Tue 22 Sep 2026 12:00:35 +0000
Manifest next update: Wed 23 Sep 2026 12:00:35 +0000
Files and hashes: 1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: xSRhcSkNYu4k9ToeWTovnNxvvQITjDW/K+JuXQHEVkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:41:68:e7:47:a2:42:32:94:fc:53:35:0e:a5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Sep 22 12:00:35 2026 GMT
Not After : Sep 23 12:00:35 2026 GMT
Subject: CN=bfc6b2c35ca7d0fd45751c5eca13b0819a8e93e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:fc:27:f2:d5:a8:e0:be:40:54:7c:5b:54:
87:4b:b1:9e:19:5f:95:af:29:f0:7a:63:06:d2:83:
79:c6:22:3a:d8:46:6e:df:f9:2f:5b:d5:01:8d:ab:
2d:2f:51:02:58:d9:6f:af:39:48:4a:a6:67:42:aa:
39:82:b1:fd:ff:67:15:a2:87:5b:d0:99:df:aa:2e:
7d:97:66:65:a3:ec:e5:35:67:86:32:2b:b9:80:c8:
55:be:9f:da:8d:b6:37:37:e0:40:55:f0:47:6f:ac:
3d:2f:ee:49:f5:20:2a:6b:12:83:00:dc:15:76:da:
49:7a:e0:a7:63:bc:d8:93:74:aa:8f:53:6f:c0:b9:
98:bc:69:cd:ef:3e:61:7c:6f:c1:e8:bc:53:32:f4:
a9:ad:72:e9:c7:7b:f9:5d:2f:b7:b3:32:6a:fe:cc:
04:4b:8e:0d:13:24:21:b9:66:93:35:10:3d:35:3e:
38:cc:16:7b:fd:44:37:cd:1a:0d:e6:82:5d:ab:bc:
50:22:25:e2:7b:72:51:16:2b:80:73:b8:c7:0d:23:
87:a2:95:10:ab:9b:c5:2d:e5:ea:96:2f:b1:7c:1c:
92:36:9e:56:c2:4d:0e:24:03:eb:c0:ff:40:2f:ca:
c3:0a:1c:77:92:a2:65:64:28:85:28:d7:8f:4c:d0:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:B2:C3:5C:A7:D0:FD:45:75:1C:5E:CA:13:B0:81:9A:8E:93:E6
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:82:e1:50:5a:28:12:69:2d:53:6e:0f:ff:d8:d4:4d:7c:
9e:f4:b0:18:9d:a2:61:4f:78:01:ac:46:7e:6f:d1:7b:75:85:
62:7d:0f:4e:9c:b9:22:1f:b7:8a:31:0a:ca:be:d9:d6:9d:74:
17:44:3b:4b:cb:e6:75:39:b8:96:e4:81:b0:a0:02:05:e9:ac:
50:2b:37:1c:91:f7:03:b4:16:ea:3f:9a:a1:b6:11:52:01:62:
07:7a:a8:4b:7b:46:16:52:52:03:8c:ee:30:1b:b4:5e:f4:aa:
bb:da:d8:04:9f:59:42:40:20:e9:5f:14:2c:3e:bd:1e:c3:4e:
d1:61:86:84:a6:b0:28:d5:60:07:86:f0:44:5c:88:27:81:95:
d2:76:29:25:1e:8b:f2:11:ea:73:45:14:b6:1a:7c:53:a9:8d:
3f:d7:ea:bd:68:1f:31:fd:94:29:17:66:33:0f:b4:8d:45:65:
6f:0e:87:d5:6b:81:ae:09:6b:fb:f3:2a:77:25:c9:79:67:b9:
08:fb:ba:a3:c9:84:21:0f:2d:81:52:5a:eb:58:06:98:e9:4c:
d4:0c:a5:06:81:55:d5:43:0a:80:75:e1:c2:20:7d:cb:85:8e:
47:cb:27:e8:1d:af:3f:cc:0e:a3:a3:b9:28:35:bc:84:e1:51:
5d:06:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:21 2026 by rpki-client