Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: JFIhaozclnOoKMob6aU/Nz8I/4iyVYmDqVPv98IFMlQ=
Subject key identifier: 63:17:6F:F2:81:1E:FC:01:22:16:53:A9:1E:62:E6:D6:3A:F1:75:1C
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01A0C6D7C79633CA2BA21AC9CC7625DBEF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 02:00:25 +0000
Manifest this update: Tue 22 Sep 2026 02:00:25 +0000
Manifest next update: Wed 23 Sep 2026 02:00:25 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: hCnRtFnAMzPio0hht9CciKuzzbtrufDPhnbC64NcjrM=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:c7:96:33:ca:2b:a2:1a:c9:cc:76:25:db:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Sep 22 02:00:25 2026 GMT
Not After : Sep 23 02:00:25 2026 GMT
Subject: CN=63176ff2811efc01221653a91e62e6d63af1751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:09:8e:79:f3:be:7f:3c:40:46:f5:58:4c:ab:
53:17:43:9c:7f:69:84:90:99:82:c9:4a:d2:8f:d7:
9f:a0:07:21:e7:5c:12:86:f6:b6:71:60:0e:d8:1a:
95:b3:a4:32:18:cb:0e:ea:d6:db:86:52:a5:fd:19:
ae:71:39:0b:16:90:8d:27:c8:95:74:99:36:df:d1:
c0:02:e1:4c:8d:5e:8d:ce:d1:38:ec:ed:6b:fc:2e:
a5:c3:f9:8a:09:a2:27:14:52:d1:8d:df:a8:b9:16:
a1:af:d7:02:57:71:21:7a:36:9d:29:52:fb:30:ce:
86:0d:57:c2:52:4b:75:04:a1:0e:8a:02:a3:c7:0c:
00:bc:9d:0f:fb:25:39:02:93:7c:b5:f5:3f:39:3b:
02:e3:e2:55:94:d5:7d:a6:f3:df:1f:64:1e:e7:b9:
63:fb:2f:22:6a:3d:2d:53:e8:38:99:e0:46:67:c8:
66:b6:8b:2f:16:93:10:ab:26:c3:28:6c:a7:bd:a0:
a9:c4:75:a6:f0:c4:a5:ac:ba:19:29:a3:a9:d0:33:
6d:e0:b9:2e:81:ae:0d:b6:0e:3b:e2:81:c1:6c:cf:
b0:3b:eb:67:d4:0c:e9:d4:7b:5a:36:bd:d8:72:5e:
8d:17:23:90:1c:9a:f1:9f:75:b9:2e:ad:d0:4c:38:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:6F:F2:81:1E:FC:01:22:16:53:A9:1E:62:E6:D6:3A:F1:75:1C
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:05:64:81:9f:bb:08:c2:e3:c3:af:78:e5:41:e4:f1:e3:f6:
b2:5a:1a:b4:ed:70:9b:5f:5a:e3:ed:17:ad:a3:c0:62:34:59:
11:2c:09:c0:83:81:a4:13:65:7c:8c:fd:ee:f7:a9:be:af:64:
9f:00:e3:95:d5:c7:9c:e5:23:70:26:23:36:c1:34:d8:3c:43:
52:0f:e9:93:88:38:bc:c5:fc:28:d4:80:38:85:a9:da:44:a1:
5d:a7:02:ab:f0:74:08:9e:d9:62:1b:53:81:ff:e8:1a:4b:d8:
a8:74:61:f1:26:c4:13:f8:c4:8b:4f:82:c7:36:65:b9:aa:28:
aa:75:3b:c9:9b:3a:90:07:c5:d2:00:a7:24:5f:f2:89:da:de:
48:1c:b4:61:a3:f2:0d:c5:d9:f4:49:ed:06:8e:53:a9:c9:31:
a5:8b:5e:d4:08:d7:70:f7:2d:e4:aa:be:48:ad:6b:1a:a8:87:
c4:5a:2e:7d:19:55:57:dd:d7:9b:58:79:e5:45:10:83:74:89:
83:e5:b1:fd:26:f5:e7:08:d8:93:c6:31:6b:41:a8:2d:2c:c7:
2f:6d:93:04:4a:84:b5:c7:9b:93:df:4a:c8:4f:82:f5:a9:6d:
b5:d5:1b:42:8a:cf:cc:83:dd:d9:9c:a0:a7:f5:87:48:ab:89:
af:42:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:01:14 2026 by rpki-client