Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: nGpsi1zazLgExS+TlS2F9t5v7GRmup/89gQ52/jkFzE=
Subject key identifier: 20:DE:0B:48:B6:94:E4:46:D0:A2:18:BC:D6:26:1E:FC:20:A6:56:6B
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01A03CA823EA2BB5F050C4E28162D188C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1A1F
Signing time: Wed 26 Aug 2026 06:00:47 +0000
Manifest this update: Wed 26 Aug 2026 06:00:47 +0000
Manifest next update: Thu 27 Aug 2026 06:00:47 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: XGuCvvFkWxWa2Dy3LPiUgddohgWGw8wX1FRKChpckeI=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:a8:23:ea:2b:b5:f0:50:c4:e2:81:62:d1:88:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Aug 26 06:00:47 2026 GMT
Not After : Aug 27 06:00:47 2026 GMT
Subject: CN=20de0b48b694e446d0a218bcd6261efc20a6566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:06:5d:b2:7d:10:70:4d:32:b0:3f:51:64:
5d:d7:bf:cb:15:ea:94:e1:19:65:9c:c8:5a:80:51:
4e:85:1d:32:88:0d:d1:74:e8:10:5c:41:5b:65:37:
b5:31:f7:75:8c:c3:ce:a5:c6:bc:91:cb:02:0f:74:
9f:33:40:d5:a4:85:2d:45:3c:33:fd:1d:db:92:a5:
22:63:6a:00:ae:8f:c6:4a:79:87:36:13:58:ba:95:
bb:59:ca:44:98:45:76:64:d5:0a:0f:45:a9:88:71:
22:4a:9f:a6:04:66:c9:fd:d1:5e:2a:51:03:54:fe:
ab:ba:09:d5:61:71:f7:a9:f1:a5:c3:55:17:9b:4c:
e7:23:b3:95:6e:5f:8f:c1:31:44:3f:1a:e3:1d:12:
b0:30:db:57:6a:49:ba:45:bd:c5:8b:eb:97:c7:e7:
f0:38:8d:8d:bd:88:08:af:c5:e3:d7:00:bf:36:9a:
1c:4b:d9:ef:83:91:f2:15:01:42:f5:a4:88:6a:17:
d1:9a:5f:33:6b:7c:82:ca:6a:c4:f5:9f:f1:c6:ca:
1b:28:57:7b:92:7f:c5:f6:6f:8f:4a:3e:bd:b8:35:
f7:4c:83:30:19:80:2d:66:99:be:c9:36:a6:ad:9c:
eb:c4:4b:34:35:38:42:de:ad:5f:42:6a:38:ca:7c:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:0B:48:B6:94:E4:46:D0:A2:18:BC:D6:26:1E:FC:20:A6:56:6B
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:91:78:20:32:64:c2:58:30:7d:0d:be:06:8f:f5:c7:ed:
91:78:ad:f3:4d:16:d5:5d:b2:f2:a6:42:25:b4:55:70:fa:53:
6c:ee:64:e5:13:45:7e:f9:2f:7c:5a:e5:27:f9:4b:45:fd:bf:
b4:97:b3:39:b6:dd:ef:5f:52:c3:87:c5:22:7b:85:38:0d:30:
50:fb:d3:95:2b:64:24:a3:93:89:2b:5b:b3:80:95:f3:0e:c2:
f7:eb:69:be:42:bd:d3:dc:0f:b7:24:f4:cf:ba:0b:5d:2d:bd:
df:74:40:1b:9a:3c:1d:ec:25:46:1e:5b:e1:9a:b0:4d:0f:49:
10:a1:08:f3:09:4b:87:f5:58:5e:c8:ba:5b:70:a8:00:db:cc:
8b:5e:1f:88:b7:d5:af:9b:ff:eb:c8:6e:1a:2e:b8:63:28:de:
cc:ae:fa:a2:70:83:ea:aa:9d:ce:38:f3:32:d2:2c:fb:70:c0:
07:c2:2c:5b:f0:32:dd:69:c8:84:12:67:0d:99:4d:0d:3e:35:
1c:3f:01:22:05:9e:b8:bd:b9:7f:56:02:e6:ce:36:bb:c7:72:
35:d1:64:cf:02:eb:e7:9d:b1:7f:38:37:01:15:d8:3a:06:b6:
6f:f6:a3:9b:fe:57:ad:0f:5c:c6:dc:1b:55:a0:44:25:6a:8c:
74:ad:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:47 2026 by rpki-client