Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
File: fsGdR6J46MXxy7L88r0LJnajZew.mft (raw, json)
Hash identifier: 0nlFWwSOxRryv83QiEImpEMaeieAfB7IFUfUVoqGuFY=
Subject key identifier: 1F:40:38:84:38:1F:DF:5F:4F:AF:C3:EC:D1:34:C4:D6:F5:EB:4C:0E
Authority key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Certificate issuer: /CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Certificate serial: 01A08A8D8A500D591D469FBCB809F4F1F6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:02:06 +0000
Manifest this update: Thu 10 Sep 2026 09:02:06 +0000
Manifest next update: Fri 11 Sep 2026 09:02:06 +0000
Files and hashes: 1: fsGdR6J46MXxy7L88r0LJnajZew.crl (hash: uiUggRtRw+t5tUSNftdaUaOrK8aToShmFoT+u0ZN1VQ=)
2: lJwPx_YfXagzrWfCaDbeHMh9VSU.roa (hash: lpKb9Ke9ORsiJSWDSA7lflKj6VXsYAISsmKT3+p+SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:8a:50:0d:59:1d:46:9f:bc:b8:09:f4:f1:f6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Validity
Not Before: Sep 10 09:02:06 2026 GMT
Not After : Sep 11 09:02:06 2026 GMT
Subject: CN=1f403884381fdf5f4fafc3ecd134c4d6f5eb4c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:e4:f1:c6:48:7b:c7:3b:2d:55:64:77:58:
97:c1:38:01:d2:68:44:41:54:b6:71:d7:10:cb:6a:
d4:92:12:98:a6:0a:a4:00:60:89:81:26:4c:22:66:
13:d2:d0:9b:1b:75:cb:a4:97:e1:a2:52:f6:5a:e4:
ed:56:ed:54:59:56:c2:5d:f8:4a:5a:47:75:eb:96:
18:d8:86:64:b5:83:15:2f:ff:35:ca:13:f7:c4:2f:
a1:0b:3c:ba:1f:0c:8a:b6:34:f7:7e:92:37:6d:0a:
27:e6:a9:31:18:0d:2b:85:c8:36:82:d4:79:42:c9:
27:0f:3b:ce:10:47:4d:ea:0e:13:c2:88:2d:2d:49:
1e:24:79:7d:9d:e8:48:43:29:a3:7f:ed:a8:6a:94:
92:dc:d1:dc:3f:74:8e:a1:e3:06:98:bb:49:92:4c:
84:02:d5:39:ff:e8:8e:51:b5:55:92:d8:3e:12:e8:
21:a9:56:88:a4:2c:b9:ef:c5:ac:75:5d:d4:57:34:
46:19:dd:6a:c7:0d:d4:7a:e5:6a:12:95:c9:db:99:
87:f6:2a:5c:48:aa:0b:9c:f3:a7:f7:73:eb:48:73:
52:58:cb:ee:87:91:92:9a:8b:50:40:e2:7c:f6:d7:
5b:9e:e0:31:93:6a:11:02:ea:8a:dd:40:05:7a:10:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:38:84:38:1F:DF:5F:4F:AF:C3:EC:D1:34:C4:D6:F5:EB:4C:0E
X509v3 Authority Key Identifier:
keyid:7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:6a:1f:27:7c:f4:1a:82:07:f6:81:e7:36:b9:4a:c5:16:
0d:f3:a2:ea:65:98:99:28:0c:8c:94:a4:f9:01:32:7c:cf:ee:
c7:29:77:e0:9d:1c:6c:7e:94:bf:4e:76:9a:a0:d4:68:9b:74:
f6:c9:84:b7:c2:f8:fb:64:3d:78:ae:c5:01:86:c1:26:5e:33:
cc:2b:0d:f6:fa:f1:24:fd:c7:d7:ef:85:a9:b6:e4:68:3e:0a:
66:82:83:f6:7b:d8:3d:69:e6:6e:af:b8:af:6d:69:59:ff:b7:
d7:cb:40:a0:7b:d1:e7:a3:eb:b9:02:db:b3:42:3c:30:a8:0e:
06:ee:e2:f9:f7:7b:fd:d4:aa:1e:de:5c:06:96:5d:2f:85:85:
a6:bf:e1:8b:ba:55:8a:58:a7:e9:49:27:af:86:27:c1:4d:92:
83:a6:ef:d8:9e:93:7e:1b:df:7f:45:9c:8f:11:5a:71:04:43:
a7:5c:fd:47:fe:71:47:b1:5c:a2:91:7b:04:4c:9e:0e:20:7e:
3a:48:74:da:28:a8:ea:b1:04:0a:d3:ba:e3:1f:0a:2d:dc:1f:
b6:8b:d4:a2:78:77:4a:b9:e6:bf:df:d9:0b:d3:10:66:29:cb:
d3:87:e5:86:c6:5f:13:41:30:9c:2f:ff:ac:b4:10:fa:65:27:
27:29:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:33 2026 by rpki-client