Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: SFm6xrzlXF9z73UDhUHeB3kV8mQcLCinQifhya6HrcY=
Subject key identifier: A1:CC:3A:16:4C:E0:D4:92:4D:B2:9D:2C:CE:FE:D9:52:07:8D:FE:3D
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 01A180749ABCE42C4F7779B059FB1FFD4FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 1AC2
Signing time: Wed 28 Oct 2026 03:01:27 +0000
Manifest this update: Wed 28 Oct 2026 03:01:27 +0000
Manifest next update: Thu 29 Oct 2026 03:01:27 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: Yp6Z313qILeHBiJcKpNPOKNv9cwVyyTy6i2IanEZVaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:9a:bc:e4:2c:4f:77:79:b0:59:fb:1f:fd:4f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Oct 28 03:01:27 2026 GMT
Not After : Oct 29 03:01:27 2026 GMT
Subject: CN=a1cc3a164ce0d4924db29d2ccefed952078dfe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:c1:f7:43:27:8d:4d:79:d2:3a:8f:f6:0e:
50:9a:ca:a4:d5:62:60:90:43:9a:96:da:18:fd:4b:
11:6d:d7:f6:94:eb:51:64:60:45:eb:2a:7f:8c:68:
89:f2:fc:7d:b4:42:03:15:60:15:7e:99:56:28:13:
d2:08:79:bd:ab:a9:1c:d2:22:9d:6f:83:cb:39:27:
5e:4a:8b:83:fe:d5:93:3f:5a:c8:96:9d:a6:35:96:
67:e3:9c:ee:63:ae:a6:10:e9:71:fb:5b:ad:c7:82:
9a:61:7f:eb:6f:5e:06:6b:db:6c:3e:7b:a4:f4:67:
8e:e1:e5:9d:cd:ea:b8:c1:5d:c4:9b:f3:4c:78:db:
47:f4:ad:dd:37:13:9a:96:b5:4b:40:59:38:93:40:
cc:a6:c7:52:b3:0b:54:53:fd:07:e9:ae:fe:ed:3b:
75:90:4f:df:3a:64:de:ff:0a:67:67:cf:c0:34:fe:
5a:34:4a:f2:7a:93:a9:c5:9a:a8:3a:4f:d1:0f:65:
ce:4e:c6:e2:cf:2a:70:cf:6a:38:70:2c:39:bf:b0:
e9:5d:7d:62:99:e5:19:45:dc:02:61:61:71:fd:35:
ce:69:0b:6c:f4:df:be:63:4d:a9:2a:12:04:00:86:
13:a4:de:51:10:a8:a6:05:f1:c5:a0:96:db:ff:64:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CC:3A:16:4C:E0:D4:92:4D:B2:9D:2C:CE:FE:D9:52:07:8D:FE:3D
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a8:a8:4c:27:57:9b:98:6e:1a:07:2e:48:73:7f:de:4c:b5:
53:cd:44:c4:ae:7d:b6:c8:0f:75:b1:f8:90:dc:4f:c3:94:71:
1d:35:60:98:61:4a:50:e7:57:af:47:9a:a0:78:f9:ed:87:07:
57:e0:5d:06:05:a9:ab:c9:21:94:07:bf:1d:62:9d:7e:4d:d2:
d0:07:71:d4:56:4b:f0:fb:89:b2:f5:ba:0f:42:f7:51:16:b2:
7e:a8:a7:1a:b8:d9:7d:98:84:b4:3a:46:aa:a2:cd:fa:4b:ee:
cf:f5:ce:61:1e:93:04:4d:cf:08:4d:1d:24:db:f5:b9:94:51:
d0:2a:89:ce:23:df:b4:52:b2:c5:05:82:c2:74:a0:df:08:e6:
b4:4f:ba:09:20:d8:95:d8:13:e6:0b:5c:9d:e9:53:94:23:bc:
01:70:11:07:1f:ca:21:db:36:2e:1c:7f:ca:69:2d:1a:cf:1d:
dd:f2:81:37:d0:9b:c6:95:ac:8e:6e:06:30:14:61:12:b4:12:
5a:8c:00:49:22:5d:70:73:43:05:96:55:b2:0f:37:bf:90:0e:
d1:7b:68:57:42:2b:88:a3:55:b4:1b:fa:f1:9d:2f:57:cd:9a:
c1:57:ab:54:cb:55:e6:2e:a8:09:3d:7a:56:e1:d0:f6:3c:05:
ee:0c:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:05 2026 by rpki-client