Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: AcSnbBR9qB9h9VchAaJvDDQUDtPJkRuh1Yqf5dC4HO4=
Subject key identifier: A9:3D:FD:08:62:F4:F6:C4:0A:DB:18:B1:21:3D:5C:0D:1C:46:80:96
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01A11ED250A6ECA8C253C97D29C9333BC073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 04:01:01 +0000
Manifest this update: Fri 09 Oct 2026 04:01:01 +0000
Manifest next update: Sat 10 Oct 2026 04:01:01 +0000
Files and hashes: 1: K3AOm5Idwc4vN4ZBQPS4xtv3EY4.roa (hash: 9TWA2Ju7KXtVBuUXDkLkA6I5QxPo+MlHoHE+QsOraTM=)
2: Q6W9LYcFYycxkbxck2CwubnHIBk.roa (hash: 0LNTOFre19JPHdEo0rCszlO5y07uomdwgsNdpg2qnmw=)
3: dY56PZ-dRsvnKDvXo4McbQsvHAI.roa (hash: SOOatDV7hO/TWrylYWvtGzZm2zHDrCdXyxdW1RoCrrQ=)
4: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: dF5KISqTX6lQo1L4BzbiqjkeHiXIbX2ovZ/hLrT5MKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d2:50:a6:ec:a8:c2:53:c9:7d:29:c9:33:3b:c0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Oct 9 04:01:01 2026 GMT
Not After : Oct 10 04:01:01 2026 GMT
Subject: CN=a93dfd0862f4f6c40adb18b1213d5c0d1c468096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:c8:c1:3b:0a:f8:49:9c:da:a9:78:ef:a1:
60:48:f2:a0:3b:1b:35:de:05:c0:68:ef:19:d1:65:
21:e1:79:80:d8:4d:a4:03:dd:31:ee:74:6e:bc:13:
b7:ba:7d:48:ab:97:0a:58:ed:4d:b6:e3:f9:62:b7:
98:c0:82:67:61:ae:ca:96:9e:0c:47:f1:d1:29:ea:
6e:41:2f:d5:d7:cd:b0:3e:6f:96:41:f2:5f:26:3b:
a9:99:19:b7:62:1a:6f:ef:30:d5:88:cd:19:68:92:
43:7f:7d:0d:6d:e4:6f:12:ce:42:5c:61:4d:86:b4:
93:ce:35:90:6e:37:bf:9d:96:bf:22:e1:61:9f:fd:
4d:b2:dc:66:dc:27:e1:37:ec:cc:f6:a0:8d:2f:3a:
17:f0:d8:7f:15:ac:5d:cf:74:cc:d9:12:3b:e5:f3:
7e:01:f4:78:10:3a:a4:36:8c:0e:10:60:34:75:66:
9a:85:17:ca:dd:4f:48:e2:14:76:2b:03:40:5d:6c:
fb:bc:61:e8:6e:bd:f0:32:de:8f:c4:75:ce:7c:de:
fc:d8:f1:d3:d8:76:7c:5f:00:9a:77:59:d5:6c:3e:
ee:94:40:f8:3f:1d:73:16:82:87:e1:9f:9f:fe:34:
e7:2b:41:46:d3:3c:e2:1e:d4:d9:41:78:25:36:04:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:FD:08:62:F4:F6:C4:0A:DB:18:B1:21:3D:5C:0D:1C:46:80:96
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:b0:d9:2e:69:0c:dd:82:4d:e2:97:97:e6:37:b4:54:0f:
9a:47:3c:32:fc:2f:78:c3:95:c2:12:20:d8:af:f5:cc:ee:dd:
d5:a3:a3:b2:44:fd:61:6b:e0:82:94:05:40:7a:8c:a2:33:7a:
a0:93:66:bc:84:fb:a1:db:8d:19:d2:8a:c2:1d:37:9b:d6:03:
dd:31:82:a0:33:91:9b:39:8d:ff:36:2a:e0:7e:a8:d8:ce:a4:
31:74:6b:56:ec:62:06:be:f7:27:86:bf:74:79:28:74:4b:f9:
e8:1c:e6:aa:11:fb:33:66:07:fc:b9:06:cd:85:6a:92:be:d4:
e5:a4:8d:1a:ac:80:9f:20:47:f5:b2:3c:b4:2c:1b:c4:63:7f:
26:88:8a:37:b8:70:5a:1f:96:a7:ab:40:9e:8d:3a:60:96:84:
8d:40:03:80:f8:26:8a:c3:21:5b:c0:24:47:14:3e:fb:99:b3:
d7:a6:10:0f:63:c3:92:0f:5c:54:e6:cf:43:40:09:0b:8c:2b:
47:de:28:dd:50:cd:d1:85:33:44:89:b0:32:ce:a4:c0:b2:79:
50:49:48:6a:c7:f0:84:1f:69:16:17:02:71:31:5e:fa:37:fc:
77:c0:c9:6e:32:51:58:95:3b:5e:bb:56:c0:20:31:2a:fd:fa:
7e:56:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:04 2026 by rpki-client