Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: JlruVNhtsnNQAbcgJQmSrzk4+c8S4KC00urJS2cjpLE=
Subject key identifier: 43:5F:85:F1:64:17:93:B3:BC:84:EC:0B:20:42:98:A1:B0:F5:97:66
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019F1265D315259D901B5E9BDBDD2664624B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0A11
Signing time: Mon 29 Jun 2026 08:01:30 +0000
Manifest this update: Mon 29 Jun 2026 08:01:30 +0000
Manifest next update: Tue 30 Jun 2026 08:01:30 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: ahkcn+VSgPFh39n6URjOP+Ao1HFxTnZQYFx7bVkkuy0=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:d3:15:25:9d:90:1b:5e:9b:db:dd:26:64:62:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jun 29 08:01:30 2026 GMT
Not After : Jun 30 08:01:30 2026 GMT
Subject: CN=435f85f1641793b3bc84ec0b204298a1b0f59766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:04:bc:15:95:06:9e:02:9c:76:b6:ed:cf:
d7:3b:f5:e1:0f:3c:6b:cd:1b:03:fc:78:28:6b:5e:
4a:e1:2d:bd:f3:c0:04:83:5a:4f:95:59:af:7e:81:
19:02:e5:db:de:8c:dd:4f:c7:72:45:e8:a5:40:df:
ce:59:d0:78:5b:3a:60:82:fb:13:61:78:b3:18:c3:
91:ba:2b:fd:64:6b:cf:20:b5:dd:17:7e:38:04:d0:
f8:34:fd:ae:f1:fe:45:94:7c:42:ad:ed:01:51:77:
c8:02:f5:32:30:e8:5f:59:d2:71:af:83:16:67:44:
cf:29:d7:38:df:a6:ad:3d:1d:76:17:cc:05:45:d9:
54:a9:0f:54:bc:df:ee:e8:6f:45:1c:f1:06:62:47:
79:c6:20:4f:cd:68:ac:01:f0:33:d9:60:bc:9f:73:
9c:8a:ca:77:41:89:21:95:95:79:a6:fc:4f:f7:64:
28:0b:ac:01:f2:f3:31:28:41:3e:e8:4e:e0:0d:21:
d0:c2:f4:c6:6a:f9:b4:18:bf:b5:51:7b:cc:61:12:
15:3c:b6:2e:95:84:25:21:b2:ce:c1:b2:94:77:b0:
70:75:97:9f:d0:63:c6:91:14:55:f1:4e:7c:a5:ac:
40:16:21:af:4f:77:63:90:8b:5b:bb:7f:22:a2:ff:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:85:F1:64:17:93:B3:BC:84:EC:0B:20:42:98:A1:B0:F5:97:66
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:e4:13:9e:b8:4f:d0:4d:2a:fb:50:ef:56:6c:50:7a:2a:
75:24:13:d7:0c:e5:13:bf:3d:72:b1:23:5f:8e:85:1e:c9:6a:
5d:09:b9:23:28:51:4b:72:64:92:33:32:0d:5b:84:5c:12:99:
a3:d0:a6:07:8f:be:55:a6:15:dc:db:df:8c:29:0a:4c:84:72:
63:21:53:6d:49:5e:1d:32:cd:07:ae:70:cd:ba:b4:62:6f:7e:
92:8f:10:64:e0:17:de:42:af:ef:28:2f:58:f2:2a:57:fd:a4:
0d:31:4c:16:c3:3b:ba:5e:6c:0d:f5:06:aa:c7:25:b0:99:d7:
91:12:46:cf:16:b2:af:86:8a:cb:35:99:5b:e5:82:a9:e8:e7:
04:83:3f:9c:20:e3:d5:03:5e:99:34:88:cd:2b:7f:cd:ee:3f:
d9:6c:19:8f:ac:a1:27:74:c2:0f:3e:4b:0b:80:de:32:de:95:
43:e3:fa:92:f1:8a:af:8f:2e:ad:f3:70:ec:bb:65:79:79:bb:
0b:a6:1d:fe:bc:b3:71:70:bd:38:14:9a:bf:40:1d:35:4c:04:
1f:87:e1:84:03:95:28:b0:05:cc:6f:e5:b3:96:11:5f:5f:19:
33:2c:ce:57:c6:de:73:52:a1:af:f7:99:51:69:f9:dc:87:db:
fe:5c:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:05 2026 by rpki-client