Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: T2jBJDkCxMh1p/Fps/Oep+DvBOrgqpT776nQVRDQVLY=
Subject key identifier: 3D:57:44:64:33:B2:A8:6B:B2:F9:AF:0F:53:06:88:74:D5:7E:8B:26
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 01A14BAB472B03DF5D686B8CD23CA4565F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1AA7
Signing time: Sat 17 Oct 2026 21:01:18 +0000
Manifest this update: Sat 17 Oct 2026 21:01:18 +0000
Manifest next update: Sun 18 Oct 2026 21:01:18 +0000
Files and hashes: 1: Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa (hash: eyE//5nnGG1gd1MKGli98Ub3MuP1GL2b5RO5JiAkJBg=)
2: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
3: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: zVaYj/sQMxJ7/gu8WEzvaZ1Sp+iC9koOZe5ojeI7R6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:47:2b:03:df:5d:68:6b:8c:d2:3c:a4:56:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Oct 17 21:01:18 2026 GMT
Not After : Oct 18 21:01:18 2026 GMT
Subject: CN=3d57446433b2a86bb2f9af0f53068874d57e8b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:50:7d:5e:08:47:b0:01:18:ac:90:4b:d5:
f1:de:6f:b7:1e:64:54:35:01:ea:41:8f:d6:61:cc:
5d:22:7a:35:dc:a0:4c:54:dc:22:c9:79:d4:94:ae:
eb:c3:f6:5f:13:00:0a:38:dd:05:b2:aa:41:f1:28:
0f:80:e0:95:29:8d:a6:81:c3:9a:18:a1:f4:c5:95:
63:53:4e:1c:56:de:10:32:6b:45:56:d3:e7:0b:0e:
06:5e:4d:27:09:6f:8d:81:58:0a:f1:61:53:98:fe:
d2:fc:8a:32:de:67:a7:8f:f0:ae:78:d0:5a:35:8c:
bf:85:e3:51:ba:7a:4e:28:66:04:b8:cf:d6:69:d8:
49:74:65:5d:05:60:6f:83:08:38:28:ee:cf:c9:4c:
25:15:c5:88:6c:a6:25:1a:05:f4:d9:15:e0:ff:d5:
c3:64:cb:56:2f:0f:56:9b:7a:e6:0e:3b:25:8a:c4:
5a:17:08:1a:e2:fa:62:94:7f:83:f9:ac:84:13:86:
3c:ef:7c:68:70:da:f4:06:01:6a:86:52:af:e6:7f:
f8:a5:61:6f:ff:6a:48:3b:b5:97:c8:45:74:25:bc:
f7:f4:92:06:cd:ef:48:13:4e:70:7a:ac:49:83:d0:
fd:2d:2d:e8:7a:0b:ad:a0:a5:c6:12:c4:6a:6e:57:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:44:64:33:B2:A8:6B:B2:F9:AF:0F:53:06:88:74:D5:7E:8B:26
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:73:4f:bb:ff:aa:c0:82:98:31:b5:ee:a7:59:ac:7c:ad:
2c:9b:f0:e5:e4:f5:77:93:51:6f:b9:13:37:4c:0b:67:29:fb:
fb:8a:89:64:bb:77:51:fb:29:e1:57:30:9b:dc:55:ff:1b:61:
7f:48:61:19:1f:61:a8:d8:4e:b1:65:a4:18:e9:74:16:34:d8:
28:b9:fd:48:7f:55:03:4c:66:f8:71:b6:44:e4:57:b3:70:a0:
f9:f8:ef:66:72:82:61:04:78:bc:33:25:6f:0b:f8:b4:bd:a1:
50:3b:96:c1:21:dd:53:e0:a1:a3:cf:40:99:24:02:1a:a1:e0:
59:97:b3:55:20:38:b3:4e:dd:d7:88:3f:55:25:c4:ac:d4:bb:
ac:83:47:1f:87:04:91:30:0e:e9:be:a0:f0:0e:2e:55:01:08:
bd:4b:75:42:40:67:62:15:cf:65:dd:52:50:b0:54:e9:4f:a9:
20:28:a1:29:37:64:f7:75:7d:b4:e4:27:ae:30:f0:2b:d4:66:
81:ba:b2:ba:98:fb:cc:38:eb:f9:46:ac:ba:68:db:d0:d2:60:
20:66:59:10:b6:82:be:9e:6d:30:67:b0:d3:91:09:ed:0f:62:
c5:4b:9c:e7:ff:32:c8:82:61:bd:ea:6e:80:13:3a:eb:0d:d7:
1d:2b:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:35:08 2026 by rpki-client