Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: 8peA2losdj3xZ340gB3bSLmRL3klObiifFQmUSliSfY=
Subject key identifier: FF:41:B9:39:A4:FF:B7:95:3A:63:87:4D:29:BE:DE:4C:23:C8:85:FD
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 01A08B68AE84E2192647870DA6C3CB778FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 13:01:28 +0000
Manifest this update: Thu 10 Sep 2026 13:01:28 +0000
Manifest next update: Fri 11 Sep 2026 13:01:28 +0000
Files and hashes: 1: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: AROdPuj24IvqiBLxp/M8VvdWzZRriGLWmH9rDaxCjy0=)
2: sxm22_6W7Ex3PLe8eO3R-ye3APU.roa (hash: GsyS1+P6O5X7lOJscZO4UAmyFbPtGTQroSIFlXKFsu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:ae:84:e2:19:26:47:87:0d:a6:c3:cb:77:8f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Sep 10 13:01:28 2026 GMT
Not After : Sep 11 13:01:28 2026 GMT
Subject: CN=ff41b939a4ffb7953a63874d29bede4c23c885fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:14:85:41:52:b4:da:22:5d:b6:5c:bb:e0:
26:db:31:d3:b4:44:cc:ec:55:5c:31:ea:c3:c7:f1:
42:ff:de:b8:fb:65:35:7c:96:82:81:7f:11:64:d0:
83:6b:40:a9:00:ec:2c:d7:33:a2:dc:45:44:2d:00:
f8:75:3a:ac:f7:e4:72:fd:2e:34:6d:54:28:a7:84:
68:f2:a4:7b:5d:d9:0e:70:98:5f:98:89:83:64:36:
af:e1:8e:d0:fa:03:5c:86:92:8e:ed:e5:c4:03:63:
3d:e8:42:96:c5:98:c5:ac:03:f4:a6:2f:7b:77:c9:
33:82:6c:3d:10:40:02:aa:d1:7a:1d:99:f5:10:d2:
67:98:26:e7:23:cb:70:46:ea:57:67:b0:fc:e3:3a:
1e:51:59:fa:ff:13:23:9a:2c:dd:98:60:fe:7c:9a:
c8:1b:13:5f:c0:b8:81:6d:90:42:0c:49:00:cf:1c:
40:22:82:a8:6d:ec:cd:ac:78:85:d4:bf:af:d7:63:
7f:b1:ec:12:a4:75:8e:c6:e5:94:a4:0e:49:9c:9a:
6c:c5:03:0f:81:3c:c4:ae:9c:96:ed:72:90:5a:11:
b9:12:cc:5e:94:12:77:6d:68:c9:c4:a8:84:aa:f4:
32:48:f6:8d:15:10:b6:c8:68:ca:2d:81:5d:f4:1c:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:B9:39:A4:FF:B7:95:3A:63:87:4D:29:BE:DE:4C:23:C8:85:FD
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2e:e0:03:b7:cc:38:33:79:c6:02:e7:30:32:ff:84:b6:5e:
3a:a1:f9:07:15:a8:31:63:bd:d0:b4:11:d3:1b:ac:50:00:09:
cc:6a:e3:5c:14:63:88:58:44:83:37:bc:93:8b:67:41:2f:1a:
73:ea:98:18:d3:ef:89:24:0f:27:57:d5:d9:f6:2c:f9:7f:e5:
d6:38:45:0e:3f:33:c4:ca:0f:ed:14:77:87:56:9b:b2:54:1e:
58:45:7e:65:23:c0:24:94:b2:5d:7c:5b:ad:01:c0:71:75:13:
d5:8a:20:b9:cd:9c:98:b9:d7:a9:ec:0e:39:1e:d1:34:71:f0:
9d:1b:89:81:c5:3f:c1:2c:8e:7c:59:4c:02:05:8a:a1:20:e1:
78:ce:8c:78:46:6d:89:d6:43:66:96:dc:3c:2f:6c:d5:a1:c2:
e3:24:59:6e:33:22:42:87:81:2d:29:e5:38:cd:d5:74:6e:0a:
d8:8e:c7:12:a8:97:52:03:ad:0f:0c:b5:71:89:56:bf:b8:9a:
bf:5a:96:29:d3:79:a7:13:65:fe:f5:88:02:58:55:75:0c:4f:
93:dc:09:4d:21:68:58:cc:76:06:78:df:11:06:08:30:80:6f:
78:7d:91:ff:6d:e0:eb:0e:17:20:20:6f:14:8f:32:7f:b7:f5:
ff:97:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:40 2026 by rpki-client