
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: 6+KUYaLktAX+kWwjh5V51o+h+APBSpgx+hKAVOiOWbA=
Subject key identifier: 86:78:37:15:B9:F0:9B:B0:83:8A:E6:8B:89:BF:C5:0D:6B:74:B3:55
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 01A184F62EB094D354DCB6C847A16B9B5ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 13A2
Signing time: Thu 29 Oct 2026 00:01:28 +0000
Manifest this update: Thu 29 Oct 2026 00:01:28 +0000
Manifest next update: Fri 30 Oct 2026 00:01:28 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: Dptwq2+bvoWQUfnBUVJJvv8TFgfbnJWhhudo6XTTz+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f6:2e:b0:94:d3:54:dc:b6:c8:47:a1:6b:9b:5a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Oct 29 00:01:28 2026 GMT
Not After : Oct 30 00:01:28 2026 GMT
Subject: CN=86783715b9f09bb0838ae68b89bfc50d6b74b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:3f:23:6f:4c:20:ac:66:d3:6b:30:24:66:
bd:88:07:b2:08:aa:f8:5d:1a:f6:19:c8:f8:61:37:
93:75:30:85:09:56:a6:b1:b9:07:2a:ce:a7:11:ab:
91:5b:2d:88:3c:7e:5c:fb:56:69:24:64:b7:75:0f:
c9:6b:1f:3d:13:71:37:97:a2:28:8b:16:56:7c:45:
1d:10:d5:54:06:31:5f:17:63:60:a1:75:4f:a7:ba:
d0:9a:9d:77:38:21:37:7d:40:e1:ca:44:e8:d1:df:
09:e4:9c:33:0a:cc:ac:25:5b:7f:07:a1:50:91:1e:
0c:9e:10:0a:bb:ee:aa:ef:44:52:d8:c5:55:d6:36:
41:df:a1:25:44:bf:3a:84:30:b0:9a:1e:06:d7:16:
f1:b2:73:31:a3:31:47:46:88:04:e9:6f:cb:da:c0:
d6:91:9c:82:f3:36:6e:85:8e:ad:f5:91:b6:66:02:
db:af:cb:d9:ae:e4:cb:22:28:4a:62:c4:74:4e:34:
e9:2f:05:1a:7a:3f:8a:62:e9:e5:2d:13:f1:98:47:
dc:41:1b:3f:e2:b1:61:c3:61:9d:18:bd:a1:de:c1:
4c:29:76:af:39:cb:5d:e5:f9:ea:e9:0d:57:79:24:
9d:38:44:bb:2f:68:4d:1a:b3:73:ee:71:4b:f7:09:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:37:15:B9:F0:9B:B0:83:8A:E6:8B:89:BF:C5:0D:6B:74:B3:55
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:41:eb:72:df:58:ff:d4:a8:c4:19:d7:f4:6c:a6:68:5e:d7:
74:0c:68:47:ca:b3:4c:16:b1:b2:85:6c:78:fc:52:77:8a:58:
d3:72:c7:5d:ed:65:54:10:44:3c:04:e1:0e:3f:da:11:f0:e6:
f7:d2:93:f6:dc:4b:3c:7f:b0:16:12:04:20:fb:7e:00:ca:3e:
7d:61:15:0e:44:5c:3a:82:72:7a:e5:25:a8:99:00:f6:cc:c2:
1a:a0:75:5c:bf:d9:58:f4:85:cc:79:8d:36:06:d1:9e:2b:05:
1f:94:b0:f0:04:3c:db:9a:de:af:9a:d4:d6:7c:a9:ef:e6:e7:
a5:21:53:dd:a8:0f:53:86:81:7a:6c:2f:d1:c8:f0:71:6e:68:
6d:3a:59:7d:be:b8:12:49:30:9a:39:1a:7a:a5:c6:d0:5a:d6:
41:a7:12:c0:04:8d:5d:a1:3e:2c:f4:17:78:e0:33:62:08:f9:
d7:55:aa:e2:c5:f2:02:3d:39:4c:a4:12:c4:fe:15:1f:5c:0d:
0a:65:fe:41:ea:9f:a2:43:0a:28:c1:0b:2c:5a:72:01:48:86:
a8:22:d3:8a:67:a6:09:1f:d2:6e:64:5c:80:34:69:4a:f5:70:
16:b6:57:14:21:80:4c:57:8b:9c:c0:99:47:8c:0a:65:0b:a3:
be:e6:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:05:21 2026 by rpki-client