Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File: FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier: YUls+MatUBOuDERFZRcbUUFh4COe2q1j97ISLI/Ku+A=
Subject key identifier: 80:A4:B1:CF:27:ED:9D:E8:56:1B:A5:5D:BF:4C:12:5F:2D:58:26:9B
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer: /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial: 01A08BD634A2776EF639830280A777CC8EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number: 0102
Signing time: Thu 10 Sep 2026 15:01:06 +0000
Manifest this update: Thu 10 Sep 2026 15:01:06 +0000
Manifest next update: Fri 11 Sep 2026 15:01:06 +0000
Files and hashes: 1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: bCjCxnKjw069RTIh3gSCMyL8Olh4JxjEw+fXe0bM6vY=)
2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:34:a2:77:6e:f6:39:83:02:80:a7:77:cc:8e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Validity
Not Before: Sep 10 15:01:06 2026 GMT
Not After : Sep 11 15:01:06 2026 GMT
Subject: CN=80a4b1cf27ed9de8561ba55dbf4c125f2d58269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:5f:51:f8:49:d2:86:7a:93:88:f5:46:cc:
ed:e0:a3:31:fe:eb:ce:61:fc:bc:0c:c0:73:b1:d9:
9a:61:3c:b8:77:c9:e1:6d:b8:8a:c7:38:74:83:2d:
a1:92:26:c8:5b:94:2d:80:db:35:84:22:ce:82:f0:
8b:3d:d5:e2:25:74:80:32:98:2a:1f:53:e1:12:61:
2a:cf:38:3f:79:04:c3:6d:6a:9b:40:ce:da:ec:43:
87:8f:82:be:37:b3:3f:4d:80:86:f4:bb:ff:84:66:
07:76:b6:d1:88:ce:10:b5:d9:9b:68:4d:06:e7:00:
8f:5d:44:79:5e:ed:b4:b3:de:11:5d:66:4b:53:b2:
08:1c:47:66:ee:77:84:88:73:7a:9d:97:fc:69:5a:
c8:6e:48:35:39:09:81:f7:9f:8a:af:7f:cd:9b:8b:
4a:5d:d8:04:9f:10:21:ef:f7:f3:45:48:ba:e7:fe:
c4:85:17:37:fa:60:9f:5e:68:95:cf:00:c5:a7:d0:
25:8b:29:0d:88:21:6e:70:9b:ce:6a:f9:ea:51:84:
1d:ce:e2:fc:e4:04:49:de:b8:53:a7:db:ed:1e:a1:
9f:df:18:b0:b7:68:6c:7c:e6:a4:b0:e6:a6:0f:df:
9d:23:e8:be:42:de:fe:9d:d1:a4:0d:02:af:0e:9a:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:B1:CF:27:ED:9D:E8:56:1B:A5:5D:BF:4C:12:5F:2D:58:26:9B
X509v3 Authority Key Identifier:
keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:ce:18:c7:59:d7:0c:46:70:48:b4:c9:20:0b:8b:cc:af:
ab:8d:fa:47:e7:b7:57:ff:da:12:27:42:a9:4f:6d:31:38:21:
40:04:5b:92:b3:72:75:22:41:cb:f0:52:97:14:cb:48:80:83:
b7:3d:fa:45:78:33:d8:ce:a1:ab:2e:ed:ff:2a:12:bb:48:5a:
57:cb:6f:63:7c:87:c7:90:71:ef:89:be:dd:b5:9f:a9:c5:46:
37:2a:4c:1b:17:f5:26:c6:fe:39:c5:50:d2:55:72:28:71:f0:
a3:c4:40:87:82:a5:20:7b:50:89:7e:79:e8:7b:22:3e:54:3a:
bc:ba:eb:94:93:7c:5c:93:90:82:5c:dc:d0:b9:9d:40:c8:f7:
e3:14:41:52:8e:95:1b:bb:94:d0:a2:c3:70:e7:b2:8c:d9:3e:
08:34:32:a2:40:54:08:c7:29:5d:1f:85:37:48:30:cd:5d:25:
1f:5f:65:40:98:39:d5:5b:7b:6f:4d:98:00:2a:f1:2f:4b:dd:
3c:33:d7:04:c9:05:01:cb:98:77:d2:90:65:31:05:ce:2a:92:
51:29:b0:a2:7d:82:f8:05:cb:99:9c:e1:de:03:c0:72:42:eb:
9b:88:29:c3:87:28:c7:3f:8e:88:88:8b:b4:6e:3f:27:a3:a6:
46:12:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:11 2026 by rpki-client