Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: PXio+riR267WC595EtWXX7DTU++TAc2gHccfTOpSFCI=
Subject key identifier: 63:27:37:4F:18:96:A6:8C:33:D8:37:6F:15:C2:F6:72:26:A1:B8:9F
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 01A18A8A0DDFA079A57C3B3B16B0E23F5FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 107B
Signing time: Fri 30 Oct 2026 02:01:05 +0000
Manifest this update: Fri 30 Oct 2026 02:01:05 +0000
Manifest next update: Sat 31 Oct 2026 02:01:05 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: On/JDfwiSJce3VYcpTKdIImfthmqtZ/FK5l5kq6/2/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:8a:0d:df:a0:79:a5:7c:3b:3b:16:b0:e2:3f:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Oct 30 02:01:05 2026 GMT
Not After : Oct 31 02:01:05 2026 GMT
Subject: CN=6327374f1896a68c33d8376f15c2f67226a1b89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:90:c6:68:87:7e:0a:2d:fe:18:f9:01:ce:
ee:b3:9c:68:5b:c0:02:11:c3:0b:f6:bb:d1:6d:92:
9f:71:f9:df:d1:c3:79:14:1e:83:e2:d9:bd:d6:26:
ab:ba:96:f7:7a:d2:f0:e1:10:60:7d:26:8c:77:78:
3e:f9:23:a6:51:e2:4f:89:93:66:80:d3:f6:bf:2e:
c8:aa:a3:ce:ad:b8:6c:c0:32:ac:3e:2c:07:cb:3e:
15:dd:8f:c4:6e:4f:b0:95:1c:48:7b:ff:9d:65:99:
99:c6:70:86:8e:5a:c1:a7:b3:88:9a:2b:70:11:42:
12:7c:47:57:f6:dc:ec:00:f9:bd:14:6e:43:90:3f:
73:d4:4c:44:61:80:09:73:be:15:51:a9:ae:4a:2d:
68:05:ce:40:0a:b1:b5:6d:38:dd:f0:37:50:a0:e2:
3f:63:1d:44:95:b3:c9:8b:2e:74:2b:9f:a0:4c:33:
f8:61:82:42:09:54:f0:6f:be:4c:08:d3:19:5a:56:
3d:61:81:12:ce:2e:ea:dc:4d:e1:d6:70:9c:52:46:
da:e2:fa:2e:b0:92:01:ac:89:3b:07:57:5d:30:b6:
ba:92:2a:4a:f9:33:e7:b4:d5:4d:91:85:5f:e1:e8:
8a:2f:83:c4:ff:9a:b7:9a:8a:c7:60:9b:c4:d6:07:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:27:37:4F:18:96:A6:8C:33:D8:37:6F:15:C2:F6:72:26:A1:B8:9F
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:72:3e:e8:be:4c:4e:32:b5:b1:28:26:1d:83:d1:9d:55:
04:b0:ef:d1:da:0a:83:96:ff:1e:93:ac:dd:4a:8d:53:97:27:
aa:02:aa:b7:41:6d:81:ff:74:9c:bc:ef:85:ee:c5:36:71:55:
24:a5:2f:af:58:3d:0c:a9:c1:45:ee:1e:6b:f5:01:44:f6:3c:
19:67:29:da:f8:f5:64:02:84:43:ca:b1:2f:05:6b:ed:83:b5:
d7:1d:f5:fd:67:07:47:ce:64:c8:b6:ae:86:5c:ab:f2:c4:d7:
9b:57:7d:f2:4f:86:d3:7a:3c:d7:d9:b2:2b:44:7a:d5:75:96:
5d:ab:92:72:f4:52:70:04:db:24:bc:df:4b:68:a6:b1:53:ee:
7a:b7:82:82:4d:6b:ab:d7:be:ba:59:d0:e1:36:50:3f:5c:da:
a7:a7:a1:4c:e3:87:2f:e6:b4:a0:a2:e8:21:10:eb:69:3b:1c:
49:29:7d:1f:57:07:ae:50:c3:03:67:f4:07:17:4a:44:ad:cb:
2e:67:14:5f:ac:51:47:1f:58:a4:12:fd:ff:37:7a:75:a0:0b:
0a:fb:c1:d7:61:14:46:9c:b7:c4:72:bf:8a:2b:a3:62:6b:8c:
4d:28:b8:7b:8d:a3:c2:58:12:4d:38:7e:45:de:04:bc:60:62:
4a:d4:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:09:35 2026 by rpki-client