Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: cahlS8LukRsXCQIWYiltBKqrausNW1iqvGo9V32nWX0=
Subject key identifier: 8F:7E:48:1D:59:28:16:F7:29:CB:00:9B:C1:15:5D:B9:D6:3C:E9:BF
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 01A0E9D27D1602EFE75B9292437AA91E3297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 1956
Signing time: Mon 28 Sep 2026 21:01:20 +0000
Manifest this update: Mon 28 Sep 2026 21:01:20 +0000
Manifest next update: Tue 29 Sep 2026 21:01:20 +0000
Files and hashes: 1: BnkcR-zuhslzC_C9CeL-f_x72I4.roa (hash: uJSNgD6syL3St9C1qBsFditKy3aI8wT2H1jOG8X0Y04=)
2: CPLUynwu2NtFcucVWVxqTphoPjM.roa (hash: V+jAkOUO5qvzn78/cOQ6/1OzIhTFNyket1nMyJB8WXI=)
3: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: THF1i96y39vW8n/rlccw7NmdMVeVC3+KNbSN1KrMQgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:7d:16:02:ef:e7:5b:92:92:43:7a:a9:1e:32:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Sep 28 21:01:20 2026 GMT
Not After : Sep 29 21:01:20 2026 GMT
Subject: CN=8f7e481d592816f729cb009bc1155db9d63ce9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:13:b4:c9:13:33:3c:81:bb:5e:c4:f0:e1:
02:3c:b0:b4:21:90:b4:81:8c:a8:03:89:32:f8:51:
d3:0f:ea:d8:6c:e8:36:cf:5d:d5:af:fa:77:10:b0:
e4:4d:31:79:44:3b:9f:55:4e:72:67:fd:14:82:9d:
e4:37:bf:b1:4f:b1:84:de:e3:16:08:5a:5b:17:04:
d0:eb:75:66:80:a7:55:d1:0c:9b:0a:15:45:38:d8:
15:48:3f:81:9f:0f:30:2a:69:cb:14:95:ac:9b:ec:
08:af:33:88:bc:f0:35:dd:35:bf:9d:34:7f:ef:cc:
a2:be:a4:67:19:46:32:c6:b2:18:75:f8:aa:06:54:
40:63:72:85:73:89:2d:09:1c:9a:61:fe:84:f7:cc:
8f:b5:8e:2e:94:33:8a:a3:50:fe:e6:3b:58:12:52:
15:bc:65:df:53:9a:78:1e:dd:9c:a0:ac:cc:c2:be:
d6:b0:38:53:5a:0b:58:89:a0:9b:a2:ff:d9:d6:f1:
84:a3:7f:15:29:7c:19:51:d7:e2:63:4f:1c:e6:d7:
81:c3:6d:d1:84:fc:df:59:03:c4:12:d9:81:2d:66:
81:4e:ae:70:84:13:ba:bd:62:eb:96:fd:be:be:6e:
31:49:6c:e0:4a:8e:00:21:c1:fd:a1:79:ec:26:f8:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:48:1D:59:28:16:F7:29:CB:00:9B:C1:15:5D:B9:D6:3C:E9:BF
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:ec:da:51:30:bf:68:77:06:e3:67:9e:19:a6:8d:7d:68:
af:f5:7e:a4:ef:ca:c1:c5:d2:91:12:b4:24:ac:78:0e:05:2e:
d7:c6:3e:02:1d:5c:6c:d2:54:9d:6e:aa:14:b5:0e:6e:d3:1c:
91:21:f0:67:1b:43:7b:1f:30:99:48:c9:db:49:51:a5:24:45:
1c:68:03:1f:29:08:99:7a:b8:7c:c8:0e:aa:7d:7d:92:a3:6c:
65:6a:7f:b8:47:98:71:55:72:6e:e3:42:8a:bc:d5:de:b2:79:
ec:6f:80:36:cc:ff:77:52:d2:48:63:b3:54:b6:71:41:d6:55:
5b:1e:ea:ab:ea:aa:08:31:e4:a6:8e:ef:2c:69:40:1d:51:14:
f0:91:99:34:b6:f2:9e:83:d2:d0:dd:2f:71:43:db:66:9f:5d:
24:41:f4:61:91:37:b9:14:b1:4f:e2:66:22:7f:11:17:05:0f:
3b:fd:f5:ba:a1:37:db:ac:cd:9e:3d:86:e3:0e:78:ab:5b:27:
a3:d8:bb:4a:9e:43:d8:83:7a:82:5b:c2:4e:e0:e7:4e:dd:d9:
bf:b2:6a:ca:10:13:88:37:4d:15:5e:d4:c5:a4:ed:21:a3:61:
c7:04:78:20:9d:8b:36:10:43:99:de:94:b1:dd:61:e2:6e:1e:
9f:92:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:38:16 2026 by rpki-client