Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: UT3m+bClNV82hEolk89b7k6dQoRVqOYZa6kfgXlErs4=
Subject key identifier: 3D:6B:D5:23:D5:71:1B:B9:40:CD:2D:58:3F:CC:07:14:C8:12:85:67
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 01A14D99CBE135CDE7C857E998719BFEB0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1AA8
Signing time: Sun 18 Oct 2026 06:01:27 +0000
Manifest this update: Sun 18 Oct 2026 06:01:27 +0000
Manifest next update: Mon 19 Oct 2026 06:01:27 +0000
Files and hashes: 1: Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa (hash: eyE//5nnGG1gd1MKGli98Ub3MuP1GL2b5RO5JiAkJBg=)
2: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
3: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: Fym0wPTJHr53FWqAbjLuRu3K9R68XWQmHGsC+uondGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:cb:e1:35:cd:e7:c8:57:e9:98:71:9b:fe:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Oct 18 06:01:27 2026 GMT
Not After : Oct 19 06:01:27 2026 GMT
Subject: CN=3d6bd523d5711bb940cd2d583fcc0714c8128567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:b7:49:c0:e1:ad:ab:ee:d2:7e:11:0b:19:
18:9e:66:b9:76:f7:5d:e2:39:92:b6:62:e9:74:90:
5d:41:ca:94:d2:1e:e2:53:55:14:c8:9b:e3:db:fa:
c0:82:e7:6c:47:82:f5:ac:f8:e6:6d:fa:ac:48:c2:
54:63:d9:d3:ad:52:ba:92:02:b5:94:06:fc:db:94:
d7:61:c7:ef:cc:97:4b:d2:f8:94:ea:5c:9b:bf:66:
ec:9c:7a:9f:aa:21:3c:21:47:bd:8a:a4:d2:66:e5:
9d:f6:1b:44:8e:e9:df:28:23:82:c1:14:ce:19:70:
a2:c7:d3:c8:b1:f0:50:c4:12:ef:7d:bb:c9:d4:d9:
82:74:db:48:ae:fd:0d:18:c2:05:3d:0f:21:e1:3c:
2c:b7:f4:4a:6d:83:ea:89:25:80:72:33:5b:d3:54:
79:e3:43:69:93:45:7e:ae:88:88:10:7c:5b:d6:f5:
71:44:80:e1:e5:07:a8:df:00:5c:e0:6f:53:c0:ff:
a1:b1:49:7c:2b:11:6a:f2:5a:52:b5:2b:2e:ed:07:
7f:66:bb:3d:bb:f6:76:c4:a8:15:8f:41:bb:4e:95:
a6:ef:65:c2:bc:ef:8a:10:dd:35:b1:0f:b7:50:ca:
be:1d:66:aa:57:b1:3c:27:6f:9a:44:cd:bf:ad:ff:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:D5:23:D5:71:1B:B9:40:CD:2D:58:3F:CC:07:14:C8:12:85:67
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:70:8d:57:78:eb:7a:29:e9:f2:7d:38:3f:49:10:39:2d:
54:83:9f:81:7a:2d:c8:f7:cd:b4:30:af:97:27:6f:d4:7f:a9:
a9:d6:62:59:9b:b3:eb:e5:94:e1:14:9f:31:75:a8:61:23:1c:
63:c5:a9:d1:7c:24:9f:19:c5:a3:79:b2:01:ca:ff:c7:e9:2d:
a1:98:e5:96:67:02:b8:6b:38:3a:65:f0:90:08:51:56:b7:2c:
1f:c0:6a:b5:d6:72:36:b9:af:0c:8b:6d:07:82:7c:13:f6:39:
00:f2:77:f0:fb:26:ff:7e:4d:ae:25:96:42:1c:b4:5e:54:db:
00:32:aa:36:ca:5f:3d:fe:0c:bb:ac:c2:ea:f3:9f:66:ea:1d:
bc:79:86:b1:6e:30:ae:c5:b8:2a:ba:80:5d:54:8e:de:9d:da:
ee:1a:f9:04:14:e4:34:58:4f:cd:90:c7:11:06:e4:88:37:89:
b7:67:1a:1c:24:f5:e4:a3:70:4e:b8:05:cc:80:a9:43:41:60:
8a:bd:71:ff:da:43:48:16:f6:8e:14:07:38:7b:f3:55:eb:cf:
6a:6c:b8:ba:92:0a:97:4c:63:75:2d:71:cf:73:66:e4:5e:d3:
75:c1:80:67:ce:31:45:22:9f:77:07:68:5d:ec:e2:ec:6f:12:
73:94:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:17:10 2026 by rpki-client