Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
File: fsGdR6J46MXxy7L88r0LJnajZew.mft (raw, json)
Hash identifier: NNqsCoO9L+G1We1J30/rILWnveWLbDChxOolJFURoQA=
Subject key identifier: 86:A0:F7:81:19:39:83:62:A5:ED:DE:77:54:5F:06:9D:69:3A:CD:AA
Authority key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Certificate issuer: /CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Certificate serial: 01A17A04A3C3580452D8CAEA09DA313B6CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:01:26 +0000
Manifest this update: Mon 26 Oct 2026 21:01:26 +0000
Manifest next update: Tue 27 Oct 2026 21:01:26 +0000
Files and hashes: 1: fsGdR6J46MXxy7L88r0LJnajZew.crl (hash: hzfwkR+97MaotEltRcCzKQMWNtC8pGr/j5NAJe6tph4=)
2: lJwPx_YfXagzrWfCaDbeHMh9VSU.roa (hash: lpKb9Ke9ORsiJSWDSA7lflKj6VXsYAISsmKT3+p+SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:a3:c3:58:04:52:d8:ca:ea:09:da:31:3b:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Validity
Not Before: Oct 26 21:01:26 2026 GMT
Not After : Oct 27 21:01:26 2026 GMT
Subject: CN=86a0f78119398362a5edde77545f069d693acdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:cc:fe:a2:f3:24:87:56:9c:55:a0:ed:51:
9d:5d:b1:36:b3:b4:67:15:4c:27:66:cd:80:ec:81:
72:ef:fc:bf:61:80:96:6f:e8:01:73:a7:17:f4:cc:
cc:62:2d:05:bc:16:12:29:68:dd:e1:3d:88:74:b9:
16:0a:43:76:f0:a3:75:80:99:ca:29:31:0c:7b:dc:
26:27:de:1f:10:eb:f3:d1:c6:cc:b9:d4:b1:ba:0d:
03:48:58:c8:0b:1c:6b:2e:24:ca:7d:c5:29:d3:14:
9b:ad:1f:e1:b4:0a:1d:12:2d:f6:c3:07:d0:ae:1c:
84:6a:1b:c0:64:d1:47:b6:98:e5:a0:3c:61:12:c4:
72:0a:cb:69:12:af:70:8b:77:3d:05:6e:e4:b6:95:
ed:7b:25:f5:80:a8:28:3a:bf:bf:5c:4b:e8:c8:c6:
47:ab:4d:ab:ce:76:50:b1:21:2e:46:47:b4:94:a1:
bd:f1:55:20:04:81:41:0b:a0:03:74:3b:25:8e:1d:
1f:b8:72:33:a0:e4:13:eb:14:28:89:13:df:f7:fc:
a2:a2:59:f0:19:0d:f8:58:88:45:57:f2:cb:5b:bb:
85:7d:e6:5c:21:3f:93:a0:91:25:10:cb:b2:ba:72:
88:63:9f:e5:14:8b:f9:b1:43:47:67:dc:8c:3e:eb:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:F7:81:19:39:83:62:A5:ED:DE:77:54:5F:06:9D:69:3A:CD:AA
X509v3 Authority Key Identifier:
keyid:7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2f:7f:d7:46:f1:3b:c8:f4:57:e5:f2:74:01:ca:be:fb:6b:
51:bd:d6:6a:27:8c:f8:f4:c9:b4:b6:5c:69:6c:6b:fd:74:2c:
fb:8a:fc:af:39:ee:1d:13:69:e7:97:06:0a:5f:a6:a0:4f:dd:
f9:11:c4:cf:cb:50:71:4e:e7:b2:38:e4:f4:0b:02:18:ae:12:
90:4a:59:b7:8c:e0:12:ea:a2:17:44:f4:0c:f5:6e:ad:6f:8a:
d6:2b:39:b0:58:b6:34:b7:7f:c3:aa:17:8b:87:84:46:27:cd:
0e:d3:91:ad:3a:8d:ef:4a:64:b9:ed:f9:5a:ab:9f:02:9b:b2:
3f:e6:d5:6a:9a:40:ee:28:dc:30:fa:24:9b:d6:05:43:17:c8:
ef:9b:19:74:c7:8a:6e:d5:92:54:72:5c:8f:b3:6a:fd:ef:d6:
c3:61:d5:95:07:bd:64:5a:c9:e9:0d:0f:3b:50:29:a8:ca:a7:
ed:a5:e6:88:ca:4d:ab:0a:0b:38:dd:71:bd:c8:a8:e4:ac:e0:
86:a2:32:a7:a4:1a:74:cd:08:d8:d3:05:d8:90:18:aa:87:6b:
0a:67:0a:38:39:a3:43:cc:fb:2a:7a:b9:c1:aa:ee:c5:a3:4a:
77:0a:5c:f2:fe:dd:88:78:46:c2:b0:2a:12:8e:70:a8:d9:84:
67:82:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:29:13 2026 by rpki-client