Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: cmU42fMAiDrY7sTpllOR/okDm5fP7aFjyhAJQN517QM=
Subject key identifier: 8C:B2:04:8E:08:31:DF:3F:FA:40:41:58:7D:5D:7C:DE:D2:85:10:F2
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 01A1792815EC11FED1426FF8F6F0FFA798BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 043F
Signing time: Mon 26 Oct 2026 17:00:32 +0000
Manifest this update: Mon 26 Oct 2026 17:00:32 +0000
Manifest next update: Tue 27 Oct 2026 17:00:32 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: PFT0DXjAh7bcb5Ks2mbXrfUsa/1hMkC+ibHNxFDC2jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:15:ec:11:fe:d1:42:6f:f8:f6:f0:ff:a7:98:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Oct 26 17:00:32 2026 GMT
Not After : Oct 27 17:00:32 2026 GMT
Subject: CN=8cb2048e0831df3ffa4041587d5d7cded28510f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:b8:e0:fc:54:e5:bb:04:0e:32:5e:61:8c:
07:8f:25:78:60:f7:cf:a6:0a:f6:0c:7e:f3:37:29:
bd:28:0c:0e:09:f6:2d:f8:78:8f:11:d0:c8:a6:9d:
3a:74:de:41:ce:0f:dd:68:b4:45:2f:2f:1e:61:01:
5f:b6:8d:7d:ec:03:aa:16:49:35:9e:a7:85:f7:6d:
55:f0:ad:50:ae:03:43:c4:0d:94:4d:06:b1:47:52:
8c:c5:64:52:d3:18:ff:d0:0a:a9:9d:18:25:c3:4e:
0e:6f:4c:54:40:f1:00:d1:63:fe:74:e4:15:1e:a2:
76:de:32:9d:e6:ba:86:43:65:c5:8f:54:36:d6:a5:
90:3b:69:9b:af:78:18:1d:42:48:a6:d4:83:6f:a4:
ce:a6:84:94:ef:db:0f:be:ce:9d:8f:49:7e:f1:5c:
b8:fb:4b:f3:61:f6:3a:1a:f9:e6:43:a8:5f:35:55:
4a:05:04:53:94:9c:0f:7e:5b:cb:92:b9:d0:a7:b6:
24:7d:5b:8f:77:ff:35:6c:9a:e0:73:25:37:01:e6:
aa:d8:a5:54:4e:0c:38:77:f4:24:41:f2:43:99:77:
1e:22:b6:cf:98:b6:3c:84:58:42:7c:2e:36:32:1b:
12:8f:cf:75:1a:2c:c5:f4:41:b5:de:8d:3b:89:da:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:04:8E:08:31:DF:3F:FA:40:41:58:7D:5D:7C:DE:D2:85:10:F2
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:eb:0a:51:5f:68:89:b2:99:36:35:36:f3:39:3f:73:32:
ca:d8:0c:4b:84:40:7b:26:31:62:c7:33:39:8d:40:b2:3e:c6:
b2:87:f7:13:ba:f6:46:94:f2:97:7b:48:8c:5d:a2:74:79:a1:
45:71:7a:20:d4:98:10:2c:c7:44:0a:f6:96:b8:cf:38:ac:db:
4b:9c:0c:fa:f6:ac:2f:1c:fa:ff:9c:52:9d:f3:cf:e8:5b:54:
54:d4:48:31:5e:c8:32:c9:69:f3:76:ed:27:c4:1f:a1:e0:fb:
a5:03:94:f5:96:0e:ee:41:f0:b0:43:a5:03:dc:4b:ec:c8:34:
40:4c:2d:06:76:2f:5a:86:ba:7e:5b:57:1e:54:6b:5d:df:5f:
18:b6:f9:f6:c7:30:8e:01:4f:90:b5:d7:a2:74:e3:ff:4e:96:
8d:e5:4e:41:b9:38:f6:d6:93:9e:f1:7f:a6:1b:8d:6f:9f:c5:
a6:77:1d:a8:a0:09:f2:f3:25:14:41:35:7b:47:3e:b3:c3:bc:
ba:f7:60:a5:f0:bf:4f:a0:91:36:a7:17:ca:f6:62:97:c1:f3:
66:cb:e7:ce:4d:8b:84:fc:66:1a:b5:ec:70:d0:51:a7:08:a9:
ce:92:04:9f:e0:66:d8:98:ae:ff:02:cd:a4:03:78:7f:bc:8e:
b9:1b:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:48:58 2026 by rpki-client