Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: ZwUto1zooJbc1AACxn0KMbc1Ek8Qb3YpRm1zqa7uR2I=
Subject key identifier: C2:7F:4A:87:82:5E:F3:A4:E5:9D:BA:1F:6D:5D:7A:FC:AF:06:1D:1A
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 01A120C0A66C85CE8DD106DCCB9BC88CC8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 05AF
Signing time: Fri 09 Oct 2026 13:00:58 +0000
Manifest this update: Fri 09 Oct 2026 13:00:58 +0000
Manifest next update: Sat 10 Oct 2026 13:00:58 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: rGOOEc8djxBP0hizmuvgLHGTOmh4HtajqVDGp8AYj5g=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:a6:6c:85:ce:8d:d1:06:dc:cb:9b:c8:8c:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 9 13:00:58 2026 GMT
Not After : Oct 10 13:00:58 2026 GMT
Subject: CN=c27f4a87825ef3a4e59dba1f6d5d7afcaf061d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:47:65:9e:d4:4a:3b:c0:2b:03:60:0c:ae:
98:0e:f6:74:6a:c0:3f:73:f3:9e:79:56:3d:f8:e2:
d2:29:b7:00:3c:9b:ba:54:a0:76:86:08:a5:95:2e:
3b:cc:1f:40:2b:3b:b6:97:6a:4e:34:de:f9:71:2b:
a0:85:5f:91:27:2c:70:4c:86:07:7e:58:55:e4:bb:
e5:d2:e9:c0:00:f2:88:96:a5:54:6a:f4:44:0d:05:
0c:5e:91:fc:54:ac:cf:44:2a:d1:be:2b:e9:e9:07:
69:23:91:5b:ce:d0:91:b3:81:4e:d1:11:57:94:70:
5e:29:b6:83:9c:de:6c:e3:26:98:ad:24:ad:ee:d8:
bf:3c:bf:88:7d:e5:a5:15:f0:d5:6a:67:61:26:58:
ec:b9:18:3e:b3:54:9f:0e:d8:76:c5:e3:4b:38:35:
94:16:da:11:de:09:fd:8d:5c:c4:cf:93:c5:a4:05:
78:5c:fc:15:bb:b8:0a:b6:10:36:c6:6b:87:4e:3c:
59:3c:82:64:9c:d8:3c:25:da:dd:d7:f0:79:61:14:
a6:9d:65:a3:a9:68:44:4a:76:e1:ad:89:6d:ef:cb:
10:82:11:0f:7a:70:35:87:0f:10:81:95:b6:f8:7a:
47:fe:17:29:9e:36:52:0f:b1:e6:a2:66:f4:49:eb:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:4A:87:82:5E:F3:A4:E5:9D:BA:1F:6D:5D:7A:FC:AF:06:1D:1A
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a3:f8:fe:7f:3a:a0:36:8a:59:fa:38:79:55:0d:04:14:48:
ce:d5:28:69:06:f8:91:31:c2:f7:42:23:28:b1:fa:07:6a:0c:
5c:b5:95:1e:89:99:6f:cb:83:c1:ac:b7:bd:0f:eb:d1:3c:fa:
cf:8c:ed:df:c5:99:99:5c:ee:0c:86:b8:6a:98:94:53:83:3e:
d1:ce:94:32:bf:87:c6:aa:0d:5e:e1:93:d1:ae:0a:4b:5a:67:
3a:d7:59:fd:23:21:21:91:67:3a:22:21:cc:a3:cf:d5:b0:b5:
b9:24:b1:00:42:59:00:1d:4d:6b:2b:af:55:18:33:6b:91:79:
eb:c1:52:bc:f4:ab:30:61:c4:b8:e7:b4:77:e3:76:07:e4:3b:
52:95:9c:4a:10:8c:98:66:0e:a4:e3:ed:1a:f6:4b:26:91:f3:
d6:9d:b1:48:df:61:36:7c:dd:d6:58:0e:16:2b:37:e2:8e:ce:
c8:79:b4:7f:ef:98:ba:a1:e5:87:87:31:99:c0:39:0c:fa:c7:
48:61:59:56:14:49:70:d6:dc:55:72:1c:f1:b0:a2:5d:33:ee:
31:98:ce:81:97:11:f9:16:48:ab:0d:70:31:77:7a:af:b8:ae:
a2:cd:3e:ac:b8:3c:40:ff:19:d6:06:4a:b1:75:17:e9:3c:ac:
bb:14:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:20:20 2026 by rpki-client