Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: SKtfGCSCYuEyO9zRkE6jGiS7U+mYcUrKAtjzKWHXx0c=
Subject key identifier: 4A:0B:BE:B9:B0:58:91:3C:FD:E1:40:03:79:61:AB:E4:49:25:30:A4
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 01A0F0E81C6CCBB077109A8A53AC3087E08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 1298
Signing time: Wed 30 Sep 2026 06:02:18 +0000
Manifest this update: Wed 30 Sep 2026 06:02:18 +0000
Manifest next update: Thu 01 Oct 2026 06:02:18 +0000
Files and hashes: 1: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (hash: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ=)
2: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: kR9WnPzNyYpjA4v3x3525r5WmUV9wUgBSP/BIxohJqg=)
3: m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa (hash: 3rV2iQRzXo45L9Capru2ivV9n6Svuwy7ha4SJJSVcRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:1c:6c:cb:b0:77:10:9a:8a:53:ac:30:87:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Sep 30 06:02:18 2026 GMT
Not After : Oct 1 06:02:18 2026 GMT
Subject: CN=4a0bbeb9b058913cfde140037961abe4492530a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3b:44:b1:a3:f7:c9:0e:1a:1d:97:29:97:40:
ea:48:f1:79:5a:e2:9d:95:38:ed:b0:d7:5e:7c:9f:
88:b2:0a:ac:0f:d9:74:4b:ba:48:03:35:a2:64:f2:
ab:ce:7a:37:f7:60:8b:f4:9d:1a:a0:4b:00:12:60:
df:2a:c3:76:6d:8f:2b:5a:2b:d0:32:20:2c:be:cf:
3d:39:af:4a:20:74:fa:d6:dc:b6:56:47:f7:66:e9:
b9:bc:dc:92:e3:cd:85:5b:51:69:e4:34:d4:d9:7b:
00:7b:f9:26:dd:6b:43:63:37:70:80:af:d1:ca:bb:
52:fb:1a:a4:e3:c9:52:f7:48:d4:66:f8:3a:e4:4b:
9f:22:3c:58:cc:cd:72:25:7a:14:fc:54:32:72:6f:
ab:83:bc:b6:d4:01:4a:e5:3e:af:a3:53:7a:ba:66:
59:0b:3f:cd:a4:a0:5c:fd:da:4d:40:44:9f:28:db:
26:2d:73:32:78:68:6a:b2:b8:62:ed:ef:ba:99:97:
40:81:d9:c1:14:6e:35:73:9a:b4:26:a1:8d:49:91:
cf:97:6c:25:fa:06:ec:65:57:58:94:77:e5:d2:ba:
5d:4a:26:79:ff:fa:04:a4:04:4b:6c:ab:bd:e3:b0:
d2:65:57:d3:3f:a2:00:a2:a2:88:67:fc:92:05:8a:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:BE:B9:B0:58:91:3C:FD:E1:40:03:79:61:AB:E4:49:25:30:A4
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:08:3a:c0:94:89:d8:25:b8:74:74:fc:b8:1d:3e:0f:08:9e:
1e:52:55:e7:28:c6:6e:3a:d5:7f:1d:d5:90:86:da:35:a0:2e:
48:6d:5d:c5:05:e7:fa:8d:6f:c3:8f:98:c7:b9:f1:c1:5d:4f:
fe:08:6f:c2:20:be:cc:01:9b:d8:8e:2f:e3:71:bd:9e:1f:24:
77:fc:9a:1a:a2:e7:28:5f:d7:69:de:4b:66:5b:0f:89:51:a9:
2c:21:2c:3a:12:88:a1:e3:9b:9b:0e:4b:b2:36:4b:75:a0:f0:
0f:c3:c5:be:a3:6c:60:d7:6d:c4:d9:c3:c0:bd:43:fb:68:c7:
2f:c3:ae:ff:5e:60:cc:e4:30:d1:a5:bc:dd:c8:a0:1b:ef:7c:
f9:db:4d:b8:98:ee:9a:1c:2d:62:01:6f:07:ed:9f:d5:41:4e:
ec:53:19:9f:15:97:4e:1b:a3:56:39:70:2f:bb:44:b6:63:27:
cc:29:5f:dd:ff:1b:93:40:d2:bd:91:1b:8b:91:8c:6f:04:3c:
76:c1:58:6f:9d:9b:2f:4e:15:6e:70:6e:4c:9b:83:e7:08:01:
d5:00:c7:e7:77:25:07:87:80:99:24:31:69:3e:a1:dd:cc:a2:
2b:49:a2:48:cd:cf:b4:5c:f5:21:b9:d9:02:5a:3b:c2:2f:47:
da:9a:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:10:34 2026 by rpki-client