Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: w+oLj3qViI/DbFmaXYHA+kSD703l12Uo7DYP9wxzcEA=
Subject key identifier: F7:E3:A8:FF:58:57:71:FD:A9:2B:CC:21:B5:50:F7:75:92:0A:0B:5A
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01A0D8DF099A94F7396009E0B600E238CD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 18F0
Signing time: Fri 25 Sep 2026 14:01:30 +0000
Manifest this update: Fri 25 Sep 2026 14:01:30 +0000
Manifest next update: Sat 26 Sep 2026 14:01:30 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: EN27Nw7Hk12V6bjGnTJeUuE2YhYUMfTGO9jGIg6iGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:09:9a:94:f7:39:60:09:e0:b6:00:e2:38:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Sep 25 14:01:30 2026 GMT
Not After : Sep 26 14:01:30 2026 GMT
Subject: CN=f7e3a8ff585771fda92bcc21b550f775920a0b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:c4:7e:33:98:fb:b2:f8:da:04:b3:92:40:
e7:f7:39:49:dd:e6:2d:94:4b:cb:13:74:c4:fd:0b:
88:5a:62:d6:33:40:5a:84:1c:5e:01:09:5c:c1:83:
ad:40:f7:99:a0:b3:54:22:39:56:98:0a:b3:ca:63:
83:54:3a:ff:41:b3:b4:4c:87:ad:7d:e0:a0:3f:9c:
12:c4:22:ec:25:eb:d0:56:29:6d:ca:5e:b4:28:47:
a0:0d:82:75:26:65:dd:d3:57:1f:e1:f1:a3:5e:c3:
20:12:06:f3:89:e6:fe:ca:ef:91:d1:a5:73:5b:d5:
a9:4d:f5:98:9e:97:0e:49:fb:dc:b1:16:ca:5d:9f:
3e:d9:a0:92:0e:3a:30:71:36:42:20:60:83:e7:c2:
a1:bc:09:77:53:35:a6:07:27:3d:7b:10:4c:1a:25:
fa:b2:14:e3:6e:1d:63:88:18:3c:07:45:46:d5:4f:
f5:80:80:39:75:09:c3:46:6e:88:b2:31:18:67:fd:
b2:7c:fa:64:03:d1:a8:58:94:2c:13:0c:fd:42:c6:
c1:dc:00:6d:88:6a:71:ad:ce:65:af:2c:0a:11:29:
56:9c:1a:08:41:67:6c:52:99:30:33:69:4e:df:0b:
fb:e8:05:d1:a0:38:35:69:c1:8b:87:c5:78:29:9c:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:A8:FF:58:57:71:FD:A9:2B:CC:21:B5:50:F7:75:92:0A:0B:5A
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:af:b1:de:d4:e7:c2:97:c0:77:de:53:c7:d8:af:70:e6:
75:a1:06:a6:8c:4a:7d:03:fc:4a:1d:c3:f9:16:ab:de:ae:b2:
97:6a:01:1b:66:f1:8d:36:c9:e8:7c:2b:42:4b:ba:0f:9d:4c:
8b:bc:27:a1:34:03:56:3c:a0:41:80:b5:a4:67:82:ad:6d:3a:
70:1d:01:4b:32:66:db:12:7b:98:41:7d:1e:66:14:af:bf:24:
1f:be:d5:b5:d5:9c:d6:4d:db:c9:1b:d1:30:4d:aa:28:4e:83:
9b:24:1e:d4:53:9a:dc:e9:87:f9:43:40:7d:e4:41:ca:4e:07:
08:4d:9f:35:cc:70:cd:98:fd:3e:58:a6:f5:99:03:72:1e:0a:
f8:65:94:bd:51:e6:bc:2c:89:2d:00:aa:f2:3d:43:aa:da:ca:
f2:72:ef:ea:13:c5:22:22:f5:34:b1:36:d6:f9:55:d9:8f:ef:
60:27:10:10:30:61:e6:4c:83:02:db:fb:00:59:c2:61:ec:d6:
e5:20:b0:d1:c6:03:f4:e2:53:3c:39:bb:19:c6:60:3f:6c:66:
cd:bc:da:b7:0f:86:ce:b9:fd:c2:54:b1:e6:01:de:fc:a4:f9:
c3:ae:6a:f6:ac:1b:76:ef:44:ab:89:41:8f:d3:10:73:9d:d4:
13:f1:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:19 2026 by rpki-client