Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: gTqLh88A+I+QWmdb61XeERGwBkMTwmbBHzmNVLFVgF4=
Subject key identifier: 78:C7:9D:B2:81:63:D2:20:8E:18:10:85:3D:4C:11:AB:08:54:98:A8
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 01A039DEA1C7D2D37EB82CF4F234AF22FB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0AAA
Signing time: Tue 25 Aug 2026 17:01:26 +0000
Manifest this update: Tue 25 Aug 2026 17:01:26 +0000
Manifest next update: Wed 26 Aug 2026 17:01:26 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: 1OCTDT9GpkHH8g5phjzM2SyrASGleVlV8r+BcpyHZqs=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:de:a1:c7:d2:d3:7e:b8:2c:f4:f2:34:af:22:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Aug 25 17:01:26 2026 GMT
Not After : Aug 26 17:01:26 2026 GMT
Subject: CN=78c79db28163d2208e1810853d4c11ab085498a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:9e:c9:ae:d6:bb:7f:26:74:ef:29:ed:f9:
04:65:53:92:01:86:92:67:6d:01:5d:40:51:77:c1:
80:6d:5d:35:82:cb:a4:d4:85:5e:31:9d:30:e0:0f:
c9:ee:b7:56:1e:74:91:a9:7e:34:26:df:ac:13:e0:
b9:f6:5a:78:12:6e:25:97:7a:0e:47:99:28:1d:f0:
a9:72:3d:e1:11:34:9b:f4:f9:8c:8f:fc:08:ff:4c:
24:7f:37:25:b3:c8:52:d9:e4:03:75:f7:a6:26:36:
56:db:4c:9d:6c:ce:a1:d8:66:90:42:20:a1:d6:5e:
33:4d:25:47:e3:b4:45:41:54:5d:72:f4:68:97:bf:
ed:3c:28:bd:95:8f:16:2e:93:ed:01:c2:40:58:58:
55:38:67:9a:73:fd:79:a9:a8:74:31:cb:35:7a:84:
31:1b:7a:c5:30:74:d0:81:48:4a:a5:a3:ed:72:b9:
fb:61:61:78:70:5e:40:51:ff:02:46:ae:c9:35:30:
43:82:d6:07:a7:bf:16:d8:06:dc:d8:f8:e4:6a:a7:
e8:f7:b1:c0:2e:24:06:b1:32:2f:87:6d:31:c2:9c:
d0:40:1f:9f:9b:11:2e:01:16:23:65:51:42:99:37:
cc:3d:be:a2:68:29:e0:5a:fa:db:3a:e5:0b:48:b5:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:9D:B2:81:63:D2:20:8E:18:10:85:3D:4C:11:AB:08:54:98:A8
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:90:a7:b7:2b:a8:0c:ec:49:b3:82:b9:66:66:a5:de:1a:fc:
9c:30:8b:31:31:f9:11:83:aa:16:00:12:c6:ed:b8:7b:e2:ef:
e4:7c:b0:b3:25:b9:6e:cd:d0:ec:7a:eb:bf:50:4f:40:85:90:
0e:5f:60:34:4a:e6:53:10:98:2a:6b:15:c9:e0:93:e8:1f:02:
c4:6d:7b:6e:47:8f:64:18:a3:d8:5b:ef:00:31:9f:b9:7d:e5:
d7:56:81:d0:96:2b:6f:85:b1:a7:ec:40:12:1f:d8:20:f5:54:
9f:6f:84:a8:d4:f7:af:65:58:df:3f:df:7c:c1:d2:8e:0a:c0:
0c:c3:ff:1e:dc:d8:a2:2d:f0:03:17:ea:cc:cd:e8:ff:cb:60:
f6:95:62:48:a5:1a:80:4c:9e:be:ba:38:8a:df:c5:ea:fc:b0:
90:73:90:94:97:c2:e5:d2:04:7a:d7:67:23:70:f6:30:ba:d6:
47:f2:f8:90:9f:27:cd:52:5b:77:e9:b6:82:11:58:d4:e5:04:
4b:a5:ce:70:fd:fe:db:48:b6:6a:cc:2a:8b:07:e4:2e:ca:d7:
ee:9a:d7:97:cd:da:40:01:5b:88:d0:5f:ad:5f:72:e5:11:d7:
9f:84:42:32:5d:a8:2a:f7:52:02:d6:8c:09:d3:ac:0e:66:a6:
70:4c:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:04 2026 by rpki-client