Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: njSCbDD3wpzYaJdG7BEWj8Qgvc0ZkLEJpIXDnRzFWhg=
Subject key identifier: 5D:14:FF:85:77:83:9D:72:42:29:27:EF:63:E0:31:D6:33:8C:CD:87
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 01A06F831ACBDA23A0604C38225E2EF74C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 066A
Signing time: Sat 05 Sep 2026 03:00:58 +0000
Manifest this update: Sat 05 Sep 2026 03:00:58 +0000
Manifest next update: Sun 06 Sep 2026 03:00:58 +0000
Files and hashes: 1: YvcN6K_UssWa3nJxS1veSyl_xQY.roa (hash: t+mIJo/SlLUrms8Z2lET1unxQJd9AMYvk21JZsGJ2+0=)
2: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
3: fySblURiBoP5SziKdVGmimST7RI.crl (hash: ZsAfxjCc0E5ai6gNjw16tz3U9iexS02iv8gwmu0ELF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:1a:cb:da:23:a0:60:4c:38:22:5e:2e:f7:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Sep 5 03:00:58 2026 GMT
Not After : Sep 6 03:00:58 2026 GMT
Subject: CN=5d14ff8577839d72422927ef63e031d6338ccd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:36:ca:00:dc:01:8e:67:7a:b3:46:75:e0:b9:
4e:ee:bb:e2:d4:14:e3:07:30:29:c5:6e:30:8b:de:
72:5b:91:5d:80:33:4d:bf:e3:81:79:39:45:13:51:
32:1e:f6:13:81:dc:62:7a:e3:21:25:f5:67:21:6b:
c5:c1:bf:cb:c2:b0:6b:7c:62:fd:38:e2:7c:d6:1f:
09:cd:d4:a8:2a:c4:02:c1:0e:ec:41:80:55:a9:4f:
9a:59:ff:d7:79:ab:11:bd:cb:f8:4b:dd:2e:ea:58:
1a:06:c0:cb:8d:55:f6:fc:a1:10:fb:1d:05:dd:a7:
5a:22:df:8b:74:93:d6:e8:f9:92:c4:8c:cb:a3:5f:
94:c1:b8:a8:e8:3d:72:0c:70:59:35:72:ba:af:a8:
cb:83:3c:fc:63:dc:b3:ec:8b:ff:f8:a7:e0:d5:c6:
d8:6e:f9:10:f7:03:4c:ed:1c:59:90:87:87:d6:73:
34:90:04:ca:80:da:a1:a5:7c:00:7b:ec:5a:72:93:
08:fd:d2:11:a9:74:a3:a0:6f:f8:27:87:07:90:5e:
f5:a1:43:3f:f3:73:07:3f:ca:2a:2b:61:c6:d0:b5:
73:d9:2c:c0:05:65:b3:1b:96:c0:02:18:a8:62:b9:
ec:db:4a:32:1d:51:3f:2f:e0:d6:95:09:ae:7a:56:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:FF:85:77:83:9D:72:42:29:27:EF:63:E0:31:D6:33:8C:CD:87
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:3c:d9:9d:bb:67:8d:04:9d:ba:8a:86:8e:cc:09:75:6b:
b2:86:6b:58:37:f9:64:e4:3d:ee:d8:98:b4:f7:4f:5b:01:cc:
16:76:c9:7c:ae:1a:4e:01:1d:56:f8:8c:dc:08:39:79:94:73:
d6:2a:2b:5a:35:0d:0d:2c:26:e2:d7:c5:0e:ec:ee:4a:1b:27:
5b:18:76:d4:37:d7:4f:54:bb:79:47:fa:d5:85:c6:b8:4a:79:
15:77:30:95:c2:e4:03:3d:82:32:3e:dc:0e:03:b6:7f:4d:40:
34:2a:b1:6b:89:a7:0f:a4:e3:e1:c5:9f:43:ab:62:bb:d3:18:
bf:d8:95:85:33:ff:fe:bc:bb:76:60:86:c3:74:08:c1:6d:28:
5b:b3:eb:9e:bf:14:97:9d:3b:37:b8:3a:3b:55:6e:0d:97:ee:
bb:68:f2:dc:b2:3d:d0:4e:b7:04:1a:56:e8:4b:be:0b:79:0f:
c6:be:d4:ae:5b:c9:07:95:52:9f:e6:ba:18:a0:43:45:ca:d7:
2c:b7:67:22:f9:07:0b:31:38:36:22:c2:75:21:fe:5a:40:9c:
b8:96:5d:cd:e2:3e:50:5c:2e:cc:d3:82:1e:cc:41:e9:6d:70:
3e:53:d1:67:55:3c:f7:ec:92:8b:82:4d:83:e2:7d:3d:08:55:
4b:0c:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:38 2026 by rpki-client