Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: 4FyTcA7WHQg3A6WX0+ZjpOqsBxl6J9KkgPouoVoCtLM=
Subject key identifier: DF:B8:76:40:95:FE:8F:9D:C0:F8:91:E6:43:74:4F:C5:30:45:7C:41
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 01A1871B42DE4F5D6A6A2812671FBFCC2832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0FD3
Signing time: Thu 29 Oct 2026 10:01:13 +0000
Manifest this update: Thu 29 Oct 2026 10:01:13 +0000
Manifest next update: Fri 30 Oct 2026 10:01:13 +0000
Files and hashes: 1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: 9/xYPDUnm8dpSJ62qJGMyGe9TDBNBY1I5vTBmq3t64c=)
2: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (hash: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:42:de:4f:5d:6a:6a:28:12:67:1f:bf:cc:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Oct 29 10:01:13 2026 GMT
Not After : Oct 30 10:01:13 2026 GMT
Subject: CN=dfb8764095fe8f9dc0f891e643744fc530457c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:e9:28:c5:7a:d4:d4:75:ce:20:16:11:f6:
9a:c9:c2:53:0a:ac:30:a2:55:d1:c6:76:cd:b0:f2:
6a:d8:6a:bf:4e:cd:f8:41:ea:2c:48:7c:ce:26:bb:
3a:40:34:f5:57:64:62:47:96:f6:53:5a:64:11:22:
0f:9d:22:6d:b8:54:39:8d:4d:ae:ac:35:56:1b:78:
f5:57:95:12:f3:34:48:8b:60:50:79:3f:ab:aa:ae:
94:4c:47:fd:c6:bc:27:00:0b:d3:fa:a0:36:30:62:
fa:6d:1a:46:bf:73:88:f4:fc:66:54:e0:5c:07:b0:
f6:38:87:86:5b:da:f1:4d:78:ce:0c:70:98:19:bf:
ef:af:33:5f:cf:9e:ec:45:40:d5:bf:d8:99:f8:dd:
40:08:50:76:01:95:75:5f:86:c1:04:f9:93:d9:37:
2c:23:15:59:00:fe:d1:9c:11:c4:a0:9e:e8:f9:6b:
53:46:69:81:43:32:75:02:35:6d:2a:35:a8:b1:00:
49:c7:39:13:97:e2:78:4e:e0:b3:a9:7f:7b:c7:97:
46:80:8f:57:fa:20:5b:79:15:4e:e9:1c:8f:f0:ca:
bb:c9:86:0f:51:a4:38:49:5b:1b:e1:bc:ed:f3:83:
b1:37:0c:b7:49:f9:77:0a:7d:f7:70:1f:9c:16:ed:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:76:40:95:FE:8F:9D:C0:F8:91:E6:43:74:4F:C5:30:45:7C:41
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a1:9a:cf:a7:03:c0:fa:9f:48:52:08:0b:31:f5:22:d9:17:
2c:cf:51:72:b1:a8:c1:fb:fb:bc:9a:c8:76:e9:eb:7e:21:3b:
8f:fa:40:23:14:ab:6e:10:58:2b:a1:56:d9:b5:87:28:c2:08:
8a:cb:5d:39:3c:24:7c:25:d1:78:4e:92:fc:8e:25:73:5e:28:
81:aa:32:4a:fd:02:37:16:d8:f2:9c:1b:79:a5:ec:ad:90:d3:
63:31:38:28:89:ee:d1:2e:5f:b4:2d:6c:2b:9f:c8:b1:07:2a:
18:b9:10:42:bd:ca:34:9e:3b:4f:98:6e:ee:fe:ca:60:47:91:
c8:ab:62:a3:cb:2f:ec:b6:c1:f0:54:f1:fc:75:6d:76:78:74:
68:03:16:e2:a7:58:02:00:c5:e8:8b:e4:90:22:a6:61:84:dc:
7d:c5:91:13:c7:40:a4:37:a7:5f:24:37:87:e5:fa:5d:03:29:
72:d4:a4:1a:51:df:13:16:27:a4:8d:e3:56:51:c2:c3:b3:da:
40:76:49:59:26:28:69:3a:73:f2:23:0d:d9:d1:f6:b8:dd:fd:
b1:fd:f8:81:27:37:ac:09:fc:86:60:04:d6:6f:4a:01:47:61:
a9:ac:d3:70:bf:cd:71:65:7f:43:ae:e0:7d:91:e5:02:5a:4b:
0b:f5:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:25 2026 by rpki-client