Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: dFelC8B1pt7gR+BaDqzdaZm2GpnRNf8KTxOGfIPQrZM=
Subject key identifier: 1A:60:49:BC:BE:7B:D3:90:56:52:6B:B5:57:C4:3D:51:35:63:1E:66
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01A089B0656B80DAC9BAF9FF69307268A769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1A5F
Signing time: Thu 10 Sep 2026 05:00:33 +0000
Manifest this update: Thu 10 Sep 2026 05:00:33 +0000
Manifest next update: Fri 11 Sep 2026 05:00:33 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: lqaF0Mj/f+9F8IWy2dGrhkWJtjgK+DTCqsZ3xyxz4eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:65:6b:80:da:c9:ba:f9:ff:69:30:72:68:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Sep 10 05:00:33 2026 GMT
Not After : Sep 11 05:00:33 2026 GMT
Subject: CN=1a6049bcbe7bd39056526bb557c43d5135631e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:7c:bc:92:60:38:8a:9e:0c:73:89:54:2b:
19:b0:1d:88:0a:9e:2b:2e:0f:56:93:4b:b3:21:64:
25:31:62:5c:08:12:ab:28:b3:ab:15:a9:6f:60:63:
fc:9f:7a:9e:95:8f:ec:b7:13:99:4b:44:2c:22:54:
6f:aa:73:52:5c:7d:d1:e8:6d:69:e1:b8:20:c4:bb:
bc:1e:04:3d:54:78:5f:e3:6e:fc:a1:1b:a4:f6:22:
34:cb:68:e1:e7:3c:6c:88:75:d9:c1:b9:0a:36:a9:
a1:bc:53:3f:f3:eb:9f:15:11:8a:e6:44:f7:80:9e:
46:5b:51:b8:5f:02:02:94:11:3e:cf:49:91:49:d7:
74:56:68:01:61:f3:3a:0d:1b:38:27:44:fd:df:ad:
0e:6b:52:ba:e6:38:0d:73:bf:8a:c0:9b:04:c9:59:
91:50:4e:5a:6d:94:cc:ac:3f:a3:2c:01:57:82:01:
ee:52:f4:e0:95:d4:5f:8e:c6:78:4c:bc:d9:a5:71:
49:38:e5:e6:65:f1:54:e3:fb:04:a9:45:5e:66:a8:
ac:30:cf:17:99:a5:5a:22:e8:56:60:ca:f3:9a:65:
2b:43:8c:4d:b2:d0:dc:08:83:db:25:ef:88:a7:a6:
88:d3:20:58:8f:b7:fd:9f:c3:c1:50:8a:13:5f:5e:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:49:BC:BE:7B:D3:90:56:52:6B:B5:57:C4:3D:51:35:63:1E:66
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d9:7d:38:1e:55:2e:64:fb:fb:04:0d:c3:62:ea:fc:5a:6e:
10:f3:c5:99:48:b8:fa:b6:24:16:0f:3b:05:7c:68:76:50:50:
2f:69:fc:e4:14:92:21:72:c4:e8:9d:df:1b:30:6a:64:82:d7:
5f:0b:1e:e1:17:af:2f:d0:1c:27:1a:f1:a1:1c:df:26:5e:70:
0b:76:65:de:f3:c9:cc:11:b7:4e:d1:37:2e:9b:4b:64:8c:03:
39:2e:6e:7c:6b:88:74:91:93:62:d4:7f:bf:0e:1f:6f:b6:73:
0c:09:35:19:1e:87:79:50:5c:a5:92:ce:cd:67:2a:30:9b:da:
86:42:db:1b:62:b4:50:cf:bf:bd:b2:8f:0d:c5:e0:ba:11:30:
c7:82:c0:0e:72:4d:d7:db:85:76:44:e8:1b:e6:c1:6d:56:35:
2b:cd:e9:64:92:cb:e5:9e:8d:31:d4:77:ed:f5:9a:89:e4:0c:
4a:d1:72:11:34:5a:6c:0b:a5:01:9e:f1:19:c5:de:7e:c8:82:
2a:27:66:85:0b:7c:28:e7:83:75:91:99:af:68:37:e1:a3:13:
63:b8:6f:0d:04:3d:f3:59:c2:6f:43:8d:bd:4d:47:3a:ac:0f:
38:dc:b4:3a:14:a8:86:b1:8e:5b:4a:dc:63:36:5e:15:07:f1:
84:97:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:02:58 2026 by rpki-client