Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: r+JtDjWmYs1hwiraGA2iTNKhn5xD5ndP44Lrp15u10Y=
Subject key identifier: 7B:09:98:DF:62:93:96:82:10:9D:50:F9:B2:73:76:4A:20:8D:26:A4
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 01A1841A9479D4FD2335F9FA6C949076B554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0B55
Signing time: Wed 28 Oct 2026 20:01:36 +0000
Manifest this update: Wed 28 Oct 2026 20:01:36 +0000
Manifest next update: Thu 29 Oct 2026 20:01:36 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: XgoVp+tjxDbCbR1hB8Uo/4ClUzjSac7PSg6WMOSI0O8=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:94:79:d4:fd:23:35:f9:fa:6c:94:90:76:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Oct 28 20:01:36 2026 GMT
Not After : Oct 29 20:01:36 2026 GMT
Subject: CN=7b0998df62939682109d50f9b273764a208d26a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:66:c5:7f:36:c1:fc:d2:cc:b2:bc:5c:e0:
ab:30:4d:a2:9f:54:92:45:9b:49:62:7f:a9:62:01:
ff:87:88:79:0c:72:89:8b:4c:dd:1e:46:f5:ca:a3:
8f:8a:38:7a:ab:75:09:b0:10:ec:e9:53:61:a9:75:
e7:1e:40:b6:9e:bd:7d:8f:80:62:c8:52:7c:c5:2f:
17:c2:48:d3:03:50:6e:b3:b6:c5:83:42:6f:f0:fa:
05:47:64:8d:be:07:43:4d:e5:6d:a4:0e:be:f6:0a:
c3:ae:0f:63:3f:2d:1e:9e:79:8f:e8:26:ed:8e:93:
53:de:63:39:b0:a6:8c:b4:26:18:0f:22:91:a2:90:
a0:a6:4e:09:a2:1a:e2:e0:a9:1a:ed:e6:5d:6b:fd:
77:d6:ae:d8:2e:15:94:ed:fa:75:48:96:08:b5:a6:
88:fa:43:df:5f:25:e7:56:96:a4:7b:55:6e:c3:fd:
e4:b2:74:b6:b0:5d:8d:0a:ee:e8:17:50:46:3a:a0:
71:18:ba:34:67:98:6f:af:f5:f9:8a:3b:65:ed:0a:
c6:6d:fe:b4:bc:d5:2b:69:fd:34:53:85:fe:36:aa:
45:9a:97:df:4d:ab:16:61:41:5f:a8:a4:70:d4:3b:
b2:9f:5c:25:29:50:9c:81:87:4b:b7:89:41:50:6b:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:98:DF:62:93:96:82:10:9D:50:F9:B2:73:76:4A:20:8D:26:A4
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:39:6f:d3:76:4a:e4:57:a4:5a:bf:fb:a6:01:18:32:5c:97:
cf:66:c0:d2:03:84:7f:50:0c:6a:66:5f:22:93:0c:f6:60:72:
c4:22:e0:f6:4c:c3:1a:2e:c0:7d:7c:3f:21:f4:be:15:b5:18:
a8:05:91:e5:5b:c4:74:4d:d5:0b:7f:ce:bb:e0:ee:53:f4:7e:
4c:62:4c:f6:c4:e3:83:c7:a6:d4:f9:8e:10:a8:92:1f:9e:22:
a5:1b:6d:85:c0:e8:cf:f1:6e:b3:13:90:6e:96:0f:be:bf:a1:
0b:ce:3b:61:e4:d6:4b:91:78:16:99:d6:ae:19:ec:36:f6:3e:
b3:19:9b:a6:14:0c:39:58:ba:29:fb:1a:e3:d5:fc:8f:c6:1e:
4a:e6:bc:ad:5e:4b:93:6c:c6:4e:c0:7f:33:d3:87:8f:96:63:
6d:5f:c5:e6:0c:f3:21:05:4c:93:d6:0d:82:28:95:fb:26:b1:
ef:56:0b:4c:2c:d2:8c:ea:66:46:b9:31:a4:ee:70:cd:f4:48:
dd:cf:14:86:7a:10:5a:a3:1c:e9:15:75:b7:2f:78:25:d0:8e:
5a:e4:6a:52:b1:69:72:68:d0:a8:d1:2f:8a:69:ca:bd:61:8d:
f8:c3:30:98:b0:ef:55:47:3d:c7:80:e2:c3:b5:63:50:6b:0b:
3a:e1:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:44 2026 by rpki-client