Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: aSX04K6GIL95MPdURAqQ2d7Eo8Z3uFN9RQgrKo6gwyI=
Subject key identifier: DA:08:B3:C2:7C:5F:A8:F9:1F:B2:B8:82:2E:8B:83:E8:95:06:F1:81
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 01A08A1ED2FD720E06BCE671402AC3E2CC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 128F
Signing time: Thu 10 Sep 2026 07:01:10 +0000
Manifest this update: Thu 10 Sep 2026 07:01:10 +0000
Manifest next update: Fri 11 Sep 2026 07:01:10 +0000
Files and hashes: 1: _chBVEiIFGC5r20fIYTsPORg6rk.roa (hash: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: o1e4mHsnQkz0zf4RN48OGobWflE1KnRmigNgQ36VSew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:d2:fd:72:0e:06:bc:e6:71:40:2a:c3:e2:cc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Sep 10 07:01:10 2026 GMT
Not After : Sep 11 07:01:10 2026 GMT
Subject: CN=da08b3c27c5fa8f91fb2b8822e8b83e89506f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:8a:a1:e4:57:b2:18:4c:ef:c2:98:72:3f:
d4:e0:9f:87:5d:ef:8e:d2:66:bf:a0:75:0a:a8:3c:
3c:bd:28:75:42:c6:bc:8c:1a:a6:92:91:99:23:a1:
00:d4:fb:30:d3:93:67:24:c8:ef:7c:6d:b8:5b:90:
bf:5b:58:5b:9a:bb:94:ed:94:26:30:d1:68:8d:d3:
8a:3e:27:d3:88:56:95:48:8d:34:78:ba:2d:6e:fa:
3c:82:7c:a4:bb:80:05:3d:95:3e:10:91:6a:4b:12:
31:c9:07:eb:1a:3a:aa:6b:8b:1f:0c:8b:f9:6a:ed:
93:fa:04:a7:04:5f:b0:a9:a9:40:48:7d:e5:d4:27:
ec:f7:99:aa:d2:50:7e:57:4f:da:3c:d0:f9:0c:da:
5e:e0:1a:bf:76:44:ec:c6:ec:45:75:90:93:a3:9e:
77:e5:4e:24:35:0c:94:41:d3:04:47:75:9b:8e:f6:
a4:9d:fd:5c:98:5b:a7:41:24:f5:58:34:ad:22:a9:
25:94:0d:c0:45:5d:94:0e:45:36:af:bb:05:c8:f2:
51:5a:85:7e:dc:ea:12:af:7e:83:a6:33:80:6a:33:
e5:fb:10:cc:11:92:44:a6:50:45:c3:25:e2:d0:e7:
87:81:fe:3b:4e:67:63:bd:8f:27:d1:56:2d:b4:33:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:B3:C2:7C:5F:A8:F9:1F:B2:B8:82:2E:8B:83:E8:95:06:F1:81
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:26:2c:b6:81:f4:a4:d7:94:89:e6:14:85:35:82:a0:13:6b:
8f:e8:b2:2c:4f:2c:d0:ee:63:52:f8:8e:ff:4e:05:0a:81:31:
40:c4:92:c8:79:20:b3:26:4c:12:3d:5e:24:8f:5e:23:40:54:
b6:37:35:46:09:d0:50:98:c8:3f:93:95:25:0c:9a:5d:c0:e8:
6e:77:71:7b:9d:ea:3d:4f:fd:d1:d0:bf:b3:26:ad:90:8c:b1:
98:01:c2:ce:5e:13:38:c5:8c:70:26:04:53:17:09:2f:1d:6f:
84:f6:d1:91:be:3a:28:9a:f5:1e:d4:5c:0a:cc:e9:3d:01:32:
1a:97:58:be:e0:5b:6f:15:c1:b2:3d:17:1a:2f:cf:4a:27:19:
4c:1e:4f:ef:15:41:e7:a3:9f:13:70:b5:f7:03:ef:9c:8e:ef:
b6:d8:98:5b:d8:c8:a5:9b:4e:23:0d:85:44:c0:a0:6b:86:72:
88:d9:be:17:bf:83:1b:09:47:b5:5c:c5:d4:80:a4:ae:21:af:
0f:8a:4c:a9:bf:55:3c:58:31:d6:4d:11:f1:ef:cf:bc:a7:28:
40:d2:94:60:09:96:50:3f:9c:e8:75:04:21:ff:79:9a:d8:f8:
d9:50:21:50:33:c7:8d:fe:b0:05:b3:30:e3:f7:8d:81:07:e9:
19:1f:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:00:39 2026 by rpki-client