Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: bPxoWTV3nKWzfnEror9ZJnkqw4MdeZJBciJROZhh6gI=
Subject key identifier: 59:00:E5:1D:08:A6:FE:E4:AE:3C:45:F2:3C:87:31:F4:19:39:87:55
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 01A110A8C5E0650FC7A567C7259D42E45E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 09F1
Signing time: Tue 06 Oct 2026 10:00:58 +0000
Manifest this update: Tue 06 Oct 2026 10:00:58 +0000
Manifest next update: Wed 07 Oct 2026 10:00:58 +0000
Files and hashes: 1: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (hash: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM=)
2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: TORYGjUUUiT5ljiYA56MZW3PMaFtmk0fqBFQ2NRJ3JA=)
3: wFhxeOIRYZRjHE_NR_YMO7VFyJ4.roa (hash: Fmj1myi/dimk9BjIvdN9tLy/wytpW18VOOMvrJoUFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:c5:e0:65:0f:c7:a5:67:c7:25:9d:42:e4:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Oct 6 10:00:58 2026 GMT
Not After : Oct 7 10:00:58 2026 GMT
Subject: CN=5900e51d08a6fee4ae3c45f23c8731f419398755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:64:66:82:cf:7c:25:d0:3d:d6:42:75:de:
7d:d4:3c:cd:1c:ee:9e:7d:ad:2c:3c:fa:50:38:fc:
c3:95:c4:70:04:dd:10:0c:06:8f:35:e0:8a:18:84:
0a:27:93:e3:cd:af:fb:e6:73:78:b3:99:f3:58:bc:
39:57:fe:5b:82:a1:e3:07:04:e7:ed:68:38:77:29:
86:7c:d5:4f:b0:32:e3:55:21:92:c5:0f:3a:0e:3e:
40:88:58:75:98:ab:55:ea:0c:b5:a0:88:7b:11:e7:
0a:dc:6d:3f:e2:5a:86:d1:32:92:8c:c2:e7:57:66:
05:0c:60:d7:5b:8a:51:fd:26:70:5b:a6:80:26:2d:
96:3d:4c:83:34:27:ab:f4:ae:49:de:d6:9b:99:d1:
ba:cc:e8:bd:3e:65:5a:0d:ac:7e:a7:cb:be:d5:0f:
8e:60:0c:09:bf:43:e2:38:15:7b:71:f9:5e:ac:53:
56:ca:93:bf:40:26:52:fd:b8:54:c7:0c:cf:9d:f1:
6f:cf:89:bf:2e:da:de:1c:b9:c3:47:56:ef:5c:43:
a1:29:b2:9e:cc:99:39:45:38:2f:95:28:a5:8f:11:
3c:be:2c:82:70:2e:d6:f2:9f:f4:f5:8b:2b:3b:9f:
33:fb:29:a6:40:67:c0:05:10:ae:73:ef:2f:ae:77:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:00:E5:1D:08:A6:FE:E4:AE:3C:45:F2:3C:87:31:F4:19:39:87:55
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:aa:c5:73:5f:d6:65:0b:13:b5:3f:c8:6b:76:2f:7b:57:af:
00:90:ee:77:91:63:a2:cc:db:58:b3:96:18:49:44:e8:12:89:
72:55:2e:43:ef:c3:46:3b:2b:90:b6:b1:ac:af:30:80:9e:09:
f6:21:65:b9:22:06:b6:a5:5a:c2:e8:7d:4f:86:05:3c:b2:86:
87:52:85:22:37:b7:4f:4d:5a:c1:d4:e4:16:50:fb:0d:e4:ec:
6b:1b:f3:13:f5:60:98:6b:8f:de:6e:75:ff:35:17:c3:6b:ec:
e5:a6:5b:14:53:7e:25:30:26:75:ce:e4:b4:ad:f9:e2:bf:2b:
83:68:76:80:94:57:7c:b9:b6:cf:a8:93:a1:cf:f9:74:0f:a0:
91:dd:00:1c:55:0d:99:ba:7f:88:49:12:41:78:9f:6e:81:f6:
13:ec:9b:15:5e:3a:3e:e9:35:63:58:80:02:40:f6:b3:4c:37:
84:88:71:42:8e:f3:8c:2b:ba:7e:3b:97:80:c3:ed:5e:7e:7c:
92:c4:8d:83:7a:a2:1c:02:39:3f:31:35:78:0a:46:ef:1b:23:
11:a7:14:f0:4a:68:30:1e:21:2c:47:53:a0:bc:87:0d:20:00:
f1:f5:72:13:ab:9f:ee:8a:3d:9e:a2:dd:4b:fa:12:dc:90:21:
35:5e:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:30 2026 by rpki-client