Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: yOxwKhPe1qXH40AaoRuLIrR5VHK4zs83eHid6EAKzKI=
Subject key identifier: EA:51:53:F4:37:1E:E7:BE:0A:36:B2:DD:57:2F:91:71:D3:6A:E8:EB
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 01A09245F5ABF1684D85BFEE4256064A488F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0F81
Signing time: Fri 11 Sep 2026 21:00:53 +0000
Manifest this update: Fri 11 Sep 2026 21:00:53 +0000
Manifest next update: Sat 12 Sep 2026 21:00:53 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: XrEAFht3SelSR09Kf6vc+tPl5QVUDMtNRNuE/Ai5GuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:45:f5:ab:f1:68:4d:85:bf:ee:42:56:06:4a:48:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Sep 11 21:00:53 2026 GMT
Not After : Sep 12 21:00:53 2026 GMT
Subject: CN=ea5153f4371ee7be0a36b2dd572f9171d36ae8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:a0:98:48:31:66:17:21:ca:54:c5:32:4e:
0c:36:6a:6e:8e:b9:d3:47:9f:5b:68:9b:48:6e:d8:
3b:20:f3:24:75:ca:6d:b6:24:bf:3e:6f:2b:68:f8:
5c:32:59:6f:89:45:3e:ce:5b:17:34:13:c7:e2:a8:
56:d6:77:74:b7:a4:17:84:9a:66:b9:50:f7:76:3d:
55:4b:46:27:4d:22:49:ea:a6:53:48:17:9c:6a:a7:
d2:de:91:6e:60:66:3d:8c:8e:dc:b4:91:c7:db:2a:
77:09:d4:d1:d0:d3:b8:f4:33:81:62:31:d7:be:6e:
a5:0c:32:05:e9:bd:1f:a9:f0:50:8a:53:21:83:20:
61:b5:a3:b8:3a:90:ee:6b:c4:6f:39:d1:6d:b6:86:
21:b0:57:61:4e:a5:01:ed:45:59:27:ef:d5:9e:b5:
88:cc:77:a8:7d:61:4a:14:c7:91:4f:30:5d:6f:63:
6a:9b:fe:3e:e7:04:c7:e2:e2:d1:74:9e:58:66:b0:
ec:c5:55:31:80:a3:ec:5b:b6:d5:4d:18:f6:03:b8:
7d:17:6a:29:74:6c:39:25:cd:de:ed:d9:f9:e6:ab:
1a:2c:bd:aa:04:e2:3c:fe:ad:9b:ba:a2:4f:3c:7a:
b8:6b:bd:16:0d:37:c7:f5:7b:ab:34:e8:f2:99:1d:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:53:F4:37:1E:E7:BE:0A:36:B2:DD:57:2F:91:71:D3:6A:E8:EB
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:89:2c:36:23:74:fc:85:a9:be:81:0b:c1:57:c9:85:ec:fc:
5c:04:7f:eb:f2:d9:8a:dd:7c:ea:2f:e2:96:dc:4a:3d:ea:27:
bc:0e:72:99:c3:da:b7:b2:c6:4e:4d:10:42:2e:3f:30:3a:ea:
17:0d:3e:bd:9b:bd:6c:1c:44:df:9f:b6:be:6a:1c:39:16:66:
be:49:03:84:ea:c3:51:58:9e:99:25:5d:bb:3c:91:f9:88:36:
e2:ad:c7:b8:26:31:d8:3b:ed:3e:26:d2:61:70:e7:0f:17:e1:
39:33:a8:98:9f:22:25:18:d2:3e:73:35:03:40:4f:ef:04:6b:
17:ec:3f:72:af:94:a1:9b:77:79:67:41:82:0a:7e:c7:f6:09:
da:01:8b:e9:0d:d7:02:8f:a3:5e:dc:92:f4:60:e7:97:4f:17:
66:2f:b6:76:0c:f5:d0:fb:0e:dc:dc:2a:44:e5:75:ce:7a:48:
37:b8:d5:c2:4d:50:f2:31:54:2f:3a:64:08:1f:c1:a6:1e:ed:
e7:7b:f7:44:da:41:a8:dd:4f:72:c0:4b:e6:ac:a7:4e:59:cd:
9b:3b:fa:dc:5a:49:ea:25:b9:a3:d0:c7:35:05:94:81:03:3b:
04:58:c5:b4:5f:e1:7c:b4:5a:b9:71:3a:7e:4d:de:1c:5d:10:
da:f5:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 23:08:28 2026 by rpki-client