Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: P2+NG/GQpvINNGJPjJ5jxiZA3oVWFBnRKEJrpUbYiao=
Subject key identifier: 9F:7A:3E:31:67:E3:B8:C0:3C:65:03:8F:70:35:3F:8D:58:72:7C:76
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 01A1754BBEBA75DD0FA2790F1ED7251111CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1ABE
Signing time: Sun 25 Oct 2026 23:01:00 +0000
Manifest this update: Sun 25 Oct 2026 23:01:00 +0000
Manifest next update: Mon 26 Oct 2026 23:01:00 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: tt1mbA/lxmciA4xP7GVLsfG1hBhtgKPqrI2AOHeuQzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:be:ba:75:dd:0f:a2:79:0f:1e:d7:25:11:11:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Oct 25 23:01:00 2026 GMT
Not After : Oct 26 23:01:00 2026 GMT
Subject: CN=9f7a3e3167e3b8c03c65038f70353f8d58727c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:02:d2:a3:81:da:15:b6:3d:6e:40:4e:82:
7e:64:15:48:11:43:71:5b:5b:1e:de:a1:9d:38:17:
c2:6d:b5:5c:c1:16:87:92:74:c9:ab:92:4e:ff:3a:
51:b1:a6:5a:54:27:a6:a0:eb:01:0f:f0:2f:85:53:
4c:f7:2e:86:67:23:79:d6:db:e3:1f:65:93:94:eb:
a0:09:6d:2a:67:5b:58:cc:43:7f:e1:f8:c7:5b:19:
e5:42:88:b7:47:f4:1b:74:db:d1:c2:33:48:a4:d2:
ed:e5:cf:1d:ff:35:27:ea:e4:e8:b7:79:24:23:1e:
b1:21:1f:b2:91:ff:09:50:13:32:0e:b9:5c:fd:af:
4b:07:2f:fd:6f:96:ad:8c:cd:ec:88:26:1b:b1:0a:
e4:f1:79:f5:36:5a:5e:4f:59:e2:61:f9:3b:e2:8d:
39:e3:4c:00:ea:50:d1:ce:4a:34:f9:cd:10:39:4e:
72:ab:ef:1b:9b:5f:71:f7:3d:56:68:e8:c8:66:9b:
01:ab:b1:e3:fa:e9:96:b9:cd:dd:d1:bb:47:18:48:
78:a9:92:43:be:7c:57:f8:d0:b4:e9:db:c8:7d:4b:
69:f6:62:84:f9:c7:2b:cb:36:b1:9f:a5:e6:29:33:
75:5a:94:a4:d2:2d:b5:f4:27:09:fd:55:3d:d5:63:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:3E:31:67:E3:B8:C0:3C:65:03:8F:70:35:3F:8D:58:72:7C:76
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:cd:76:b8:4a:18:d6:65:5e:d2:49:d0:14:3b:b7:41:f7:
2e:a5:53:ca:a0:6c:e4:99:ce:8c:18:fb:61:3a:a2:52:02:17:
f1:81:af:b1:28:71:77:53:7c:ee:b6:2c:49:87:56:25:20:3f:
ea:5f:fc:41:b7:71:4c:bd:14:d1:32:75:ff:5a:07:f7:2f:51:
02:d6:6b:79:61:27:1f:c5:09:03:d5:ff:08:6c:16:4d:cc:76:
b1:0d:85:c1:09:94:62:bf:c9:6e:ac:19:60:66:5d:9d:c4:50:
9e:55:1d:fb:05:8f:a0:4d:b3:5d:6b:46:d7:22:71:75:c2:94:
d5:6c:67:b1:73:b4:d7:25:fd:a1:d9:b2:98:c2:65:f6:8a:67:
b9:72:cb:32:1c:63:75:0a:e1:b5:ab:3f:bd:2f:fe:53:6f:39:
f0:79:a2:c2:e6:19:ad:1b:98:89:00:5f:31:37:79:f1:ee:6c:
1d:ec:d3:67:52:88:05:0c:44:e0:a9:79:b3:e3:cc:70:f4:d5:
0e:5d:18:46:f9:6e:ff:74:b4:1d:71:5d:5d:4b:e3:4e:a9:fb:
42:5a:54:a4:6a:83:8d:69:5f:b9:3c:14:af:24:c1:6f:75:73:
7b:8f:2a:54:2f:d9:00:8a:e3:16:36:a6:89:03:79:24:17:1d:
4f:62:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:15 2026 by rpki-client