Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
File: raIk0OXYWSPj7P_C173W-b7Q3lY.mft (raw, json)
Hash identifier: 8kTZtiCyDTCpPTVOMz5YN3B261BjeWO52dpSZFXvZoQ=
Subject key identifier: 51:D7:F1:17:3E:AA:3D:E4:26:9F:92:CD:66:E0:C4:CA:A3:DF:B6:F7
Authority key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Certificate issuer: /CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Certificate serial: 01A0FC7D3A6497A362D45810289541B483BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
Manifest number: FC
Signing time: Fri 02 Oct 2026 12:01:00 +0000
Manifest this update: Fri 02 Oct 2026 12:01:00 +0000
Manifest next update: Sat 03 Oct 2026 12:01:00 +0000
Files and hashes: 1: UNpzg1fBXvY1R69SVFovHk6gy1w.roa (hash: meovwRk5rmV2wC72JrwzouzdrYO+qwuFP7XdlxUNR08=)
2: raIk0OXYWSPj7P_C173W-b7Q3lY.crl (hash: BACOSqXIK9UH9zD/+wEujQoV+5RzIyAGeavx+HtNtsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:3a:64:97:a3:62:d4:58:10:28:95:41:b4:83:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Validity
Not Before: Oct 2 12:01:00 2026 GMT
Not After : Oct 3 12:01:00 2026 GMT
Subject: CN=51d7f1173eaa3de4269f92cd66e0c4caa3dfb6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:8f:1b:cc:25:3d:35:57:c5:ea:d7:2e:17:
d9:c3:be:3f:d4:a5:fe:20:38:3d:56:de:c5:73:c6:
26:81:7f:8a:8e:08:66:be:e5:48:7c:11:6f:74:2c:
27:94:b0:4f:62:2d:cc:18:31:7d:7a:f4:58:bb:b5:
4a:9f:1e:44:0f:81:27:27:41:b6:c3:b6:ad:91:a6:
b0:ea:c0:12:dd:04:a4:e7:87:b7:66:b9:82:5d:60:
2a:66:9e:42:99:e9:ab:5e:a8:24:da:8f:80:7f:b7:
23:a1:f9:16:6c:fc:9b:53:9e:a6:1a:1e:1f:99:c8:
a7:2b:3c:ad:ba:1e:19:61:46:d5:21:bf:73:ac:23:
1c:7b:36:ff:54:5d:3f:91:ca:8d:83:95:ab:d8:38:
fc:93:b6:0e:f3:35:c0:05:85:1e:49:50:6b:ee:8d:
20:bf:b7:68:44:69:89:c8:1c:63:e9:39:84:ba:f1:
54:9a:23:87:af:c3:02:bb:06:36:83:41:a2:76:6b:
05:f2:f9:59:94:f0:ef:57:71:a9:f1:5f:bd:bd:0c:
5f:49:cb:89:a4:c2:02:1f:34:51:b6:cb:f5:a8:b8:
92:db:eb:e2:e6:a4:01:02:2d:29:08:2f:35:23:47:
b1:4d:9a:79:8a:68:65:0c:66:29:f0:cf:45:7a:70:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:F1:17:3E:AA:3D:E4:26:9F:92:CD:66:E0:C4:CA:A3:DF:B6:F7
X509v3 Authority Key Identifier:
keyid:AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d2:e4:2a:3c:38:b7:9d:da:a3:94:17:73:c6:6c:ef:89:ae:
f2:a4:79:58:20:d6:7a:3f:7a:05:6b:29:04:2c:a8:9e:a9:bd:
f0:43:94:7e:a7:70:49:d6:7c:9e:60:2e:da:e5:3f:ba:78:21:
aa:06:d2:89:54:94:04:06:2a:af:2c:e5:5b:7a:8e:11:b3:53:
a9:36:03:28:b8:1a:86:7a:28:43:14:6d:c0:36:35:66:df:c1:
96:0d:c6:9c:0b:94:18:9f:4f:e3:b4:82:ac:f1:04:18:04:54:
51:81:6c:e7:71:d7:8b:cb:82:8d:09:3d:65:59:be:b9:ad:13:
a4:7d:06:04:8f:b7:bb:73:cb:66:d7:11:1f:fb:89:67:b7:9a:
94:5d:65:83:4e:99:7b:28:b6:fd:9f:aa:65:58:f1:bc:17:ea:
e1:ac:ad:aa:8d:4d:3b:0d:28:d2:60:df:df:f7:d5:93:e7:22:
bd:5d:c5:7d:44:07:df:d6:1b:52:5e:cd:11:14:f7:9e:33:55:
0e:95:9b:ba:64:ae:b3:b0:1a:68:31:15:15:64:9f:c6:0d:02:
3c:d5:07:42:b3:26:9f:a5:5c:78:a2:4c:67:0e:ce:13:5c:f3:
ce:b2:28:fc:f3:53:0f:b2:a7:d6:04:3b:5f:d1:f1:17:44:c2:
02:f5:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:11:35 2026 by rpki-client