Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: cCt1Y4MKC5CR9ekjtGLYobZB0kYI0upGkHgGm33od30=
Subject key identifier: A0:67:9F:0D:4D:B5:A8:18:B0:2E:7C:29:1F:D7:42:8A:75:69:B4:B9
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 01A08AFAB7B4282723E28F158CFAD31CFD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 1958
Signing time: Thu 10 Sep 2026 11:01:21 +0000
Manifest this update: Thu 10 Sep 2026 11:01:21 +0000
Manifest next update: Fri 11 Sep 2026 11:01:21 +0000
Files and hashes: 1: 9XBEdkFqQL4X8XkiTZpFyp4JlA0.roa (hash: st4zcKMZ4W6edf6bOgVfYzaLlJOVCKMK+IcIcZ7zIME=)
2: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: uksdpnC3sE3dD8+gbhtO8ii734+APoJIjd4goJQoOd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b7:b4:28:27:23:e2:8f:15:8c:fa:d3:1c:fd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Sep 10 11:01:21 2026 GMT
Not After : Sep 11 11:01:21 2026 GMT
Subject: CN=a0679f0d4db5a818b02e7c291fd7428a7569b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8b:47:b0:f0:15:f5:cd:79:8c:9d:0d:f8:b6:
30:f9:18:e2:7d:2f:a9:8c:3d:4f:f5:2a:49:42:82:
dd:64:8b:ad:b8:f0:b0:d7:d8:c5:8b:3d:af:e3:4b:
99:84:f0:04:95:7e:f3:21:af:53:4f:78:a0:b2:7c:
06:e4:8a:df:cb:80:31:5e:a0:d6:82:5a:27:e1:82:
11:55:32:f3:b1:89:f0:2f:1a:90:82:2a:9c:59:7b:
4c:50:ce:cb:c2:38:2a:4b:0b:76:31:6f:59:4e:3d:
ff:ac:e6:ef:de:0d:f8:7b:8e:c2:d0:2d:49:6b:31:
fa:7c:c0:30:bd:13:f8:a7:d2:e3:2e:72:b4:98:b2:
cd:3e:25:c2:64:7a:5c:1e:a5:8d:2e:85:75:7b:20:
86:dc:ae:17:3e:c8:8d:19:1a:4c:2e:f0:16:8a:70:
0b:a4:e2:f5:e1:11:c5:b4:e0:3e:2e:5d:aa:f1:fb:
59:2e:db:00:73:a0:ef:bc:59:92:e4:72:2d:5e:3f:
f1:54:a5:e0:26:79:b8:3d:09:4c:aa:9c:1d:b0:c2:
d6:80:eb:a7:3c:92:3d:89:a6:98:0d:f6:4f:20:ab:
d5:7f:a4:80:00:60:19:b4:a3:6c:b5:19:04:22:30:
10:0f:4a:b7:b9:cd:59:be:87:b4:52:5b:12:6b:38:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:67:9F:0D:4D:B5:A8:18:B0:2E:7C:29:1F:D7:42:8A:75:69:B4:B9
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:53:42:33:97:51:00:7c:b1:01:84:28:fe:eb:0e:06:b2:77:
3a:d9:d1:d3:7f:f5:1c:95:e8:2e:e2:c7:cb:32:55:9c:6e:20:
7d:0d:ae:57:c9:c6:9e:fc:fc:03:d1:f3:5a:e9:59:c0:cb:59:
48:04:dd:f9:fd:6b:1d:e9:ac:15:29:14:5d:41:e3:7d:4a:dc:
b4:71:2c:27:0b:54:61:4b:b9:72:0b:96:ac:d9:c4:c3:b6:e9:
ae:4d:e7:46:86:ba:18:64:8f:54:61:25:0a:be:75:b3:26:e4:
e8:0d:ad:34:d5:1b:8f:31:b6:cf:83:27:37:f8:8f:6b:21:43:
0b:4f:ec:eb:b3:90:f1:77:fc:b5:33:51:fe:63:bc:ca:fd:ad:
57:79:ba:c7:74:23:9a:82:df:c5:93:b1:43:56:c6:7f:1c:a1:
90:06:e6:82:bd:83:a1:9b:c2:78:4d:a6:6d:63:7c:99:e6:69:
4b:7b:1f:6a:9d:74:e8:53:34:51:8e:dc:57:c6:e5:83:dd:e3:
a4:de:e3:29:fb:4b:7c:08:35:70:be:01:44:ea:75:7a:7c:1a:
2a:e1:7c:c3:8d:e6:72:90:7e:e1:8b:8c:d3:0b:4f:2a:c6:e9:
09:36:1c:cc:bd:1a:a9:71:79:d7:cd:2d:7a:7c:ae:69:fe:8f:
d0:ed:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:16:04 2026 by rpki-client