Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier: 78stL9KDIYg/kL7kqTXThP6ym/lYKSMZMVdWQr+uWN0=
Subject key identifier: 8A:79:61:40:EB:02:12:1C:EC:E3:0F:67:0F:02:D7:C3:A8:B1:F5:55
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 01A180E1E551C11703EFF55D84F3CEFB41FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 05:00:50 +0000
Manifest this update: Wed 28 Oct 2026 05:00:50 +0000
Manifest next update: Thu 29 Oct 2026 05:00:50 +0000
Files and hashes: 1: XeLe21TCUgGgtYtOHlBkAyxb588.roa (hash: xiA/Defg/C+SjF26EFCXyw3Y0ZfZkMB+IPbJcwNxla4=)
2: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: KpuUIt8MkjQ2Csk66/ka6NMGnZt098wO4MLdc7EzZF0=)
3: hJe2L7yijxhtLxWKyzVN_7iImAs.roa (hash: 6hCERIoNHi1oFb4UNguFbE1ZuB0au7wNYdl68ZyA7vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e1:e5:51:c1:17:03:ef:f5:5d:84:f3:ce:fb:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Oct 28 05:00:50 2026 GMT
Not After : Oct 29 05:00:50 2026 GMT
Subject: CN=8a796140eb02121cece30f670f02d7c3a8b1f555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:30:0a:ba:a6:5c:d4:bc:c5:b9:60:70:5c:
78:64:c2:df:bd:44:43:97:6e:4d:2f:af:61:45:04:
e4:c1:e9:64:ab:8a:f8:de:92:e3:9a:48:65:f9:6b:
2c:83:a4:19:34:eb:bc:bb:f2:dc:48:cd:cb:81:93:
cd:cf:e9:6e:87:3a:6a:44:29:da:77:27:df:f2:18:
ae:aa:05:7d:73:3f:7e:0d:1e:88:d7:22:22:61:2e:
8e:44:68:fc:3f:c9:f8:9d:36:a9:23:f5:e5:45:fb:
8d:f1:d2:9d:87:7f:f2:c1:97:60:9e:24:e2:18:25:
e4:14:99:ee:58:57:87:0f:a9:53:d6:98:56:07:3f:
5b:18:55:b7:d2:17:c3:be:08:d7:88:8e:c9:59:5e:
92:9a:cf:92:ad:8b:c4:95:fc:1d:7c:85:f0:77:a8:
8d:04:40:91:7e:16:80:8c:bc:e9:e8:9b:66:13:d5:
c6:ae:bf:da:5a:d4:a7:0f:68:26:da:32:0b:6a:da:
0e:1e:0e:d9:de:fc:8c:49:df:c6:1f:c1:17:86:47:
80:cd:4f:d0:63:cd:18:b4:c0:49:97:f9:7b:dc:85:
4f:36:89:ba:5a:e3:2f:e4:e8:6f:7f:eb:cc:40:32:
6f:4d:74:89:7a:17:c1:ee:f1:19:28:4c:ff:e0:2a:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:61:40:EB:02:12:1C:EC:E3:0F:67:0F:02:D7:C3:A8:B1:F5:55
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:7e:c1:ba:33:41:81:4e:49:10:5c:0f:fb:9a:3b:2c:b0:
12:6f:17:76:1a:4f:86:c2:21:84:77:4d:3b:da:aa:f7:bc:3b:
79:ed:5e:ef:64:2f:e7:e0:d0:c0:c4:40:6d:4d:e3:d5:45:5b:
7f:1d:57:43:56:d0:e4:a5:31:9c:94:1d:a2:fe:9f:57:83:3d:
75:84:5c:63:87:d9:da:56:fc:fb:bf:3b:2e:cc:df:3e:11:98:
7a:4d:bc:79:fb:27:6a:01:a5:17:51:59:ed:fe:4c:81:d4:2d:
6a:75:a6:ee:3e:5a:bb:eb:25:88:52:67:1c:ec:e5:69:f2:cd:
6a:54:47:f7:a6:cb:7c:c7:4c:2a:46:8c:12:d9:2e:5f:47:6a:
87:b9:3f:e4:67:c5:a8:8b:5b:f9:a5:4d:9b:40:a8:14:6f:84:
f7:5d:8f:07:e4:aa:f8:5d:96:69:8f:c5:31:f6:5d:26:80:37:
be:e6:9a:17:16:24:07:a9:80:4b:f3:6e:d8:6e:4f:09:2c:4c:
b9:94:71:b6:db:40:4d:74:df:88:11:8d:75:07:22:5f:e8:61:
3a:5f:b8:02:8f:50:2d:f3:12:18:0d:72:8f:c1:6b:fe:cf:69:
a6:6c:ff:13:0c:39:f2:e9:e2:5f:46:a6:97:9c:33:47:3c:17:
7e:12:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:42 2026 by rpki-client