Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: xwvwpv1An6Ox+vy/55SY1kpYJC8OfTEWPYp4OWzSaxk=
Subject key identifier: 3F:ED:0B:61:93:7D:41:03:13:C3:5B:2C:F5:4F:41:1A:15:8C:34:7E
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01A0412A1C02DFC8472583A6D1F943B2D1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0FD3
Signing time: Thu 27 Aug 2026 03:01:13 +0000
Manifest this update: Thu 27 Aug 2026 03:01:13 +0000
Manifest next update: Fri 28 Aug 2026 03:01:13 +0000
Files and hashes: 1: 0k0SMXdBc9F-S0u5frPj7VZDATI.roa (hash: fH1r/M4QH7i4V9CfzqHbwrIzNmtm+Dkd+L50E5BaVjo=)
2: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: uQDyzr6gRAx6ANZTtKztzoNcgzYox0P8ApHIVEJwqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:1c:02:df:c8:47:25:83:a6:d1:f9:43:b2:d1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Aug 27 03:01:13 2026 GMT
Not After : Aug 28 03:01:13 2026 GMT
Subject: CN=3fed0b61937d410313c35b2cf54f411a158c347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:de:29:c5:40:ea:31:4c:21:e8:e7:3d:3b:
28:e9:09:06:4c:3b:ba:d3:e4:55:a5:50:7d:7e:eb:
a3:07:95:8f:e1:bf:d4:69:c1:17:cb:43:3a:f7:ea:
d4:18:f9:ff:84:d8:ee:08:eb:06:01:c0:cf:45:44:
85:0d:2d:b9:52:2f:b9:a9:55:7c:7b:34:15:d4:95:
b1:f2:01:af:6a:03:74:60:ea:e3:8d:7a:3e:26:8b:
77:0b:97:42:8b:97:e0:41:a2:e6:84:65:33:a3:d7:
bd:b2:9d:f4:32:bc:c2:0e:41:87:62:23:ff:71:b4:
08:9e:6e:4e:2a:30:6b:a5:e4:5e:2b:a2:3d:46:3f:
67:4c:7c:4f:76:19:21:59:f2:53:30:c0:bb:72:09:
6c:ee:9f:10:2a:d9:02:7b:8a:ab:f2:54:2f:35:57:
de:d8:8d:38:22:17:36:48:da:f1:37:a3:12:1f:4d:
00:09:3e:b6:13:e0:04:00:1c:fd:55:f2:fa:a2:c6:
14:85:b6:cf:fe:0b:7e:56:3f:60:d2:7d:71:27:e6:
d8:5a:96:b9:0a:c6:a2:b8:3a:81:a4:41:61:d2:f7:
ab:fc:b7:2d:f9:d6:ff:7a:6d:1b:d1:b5:d2:40:28:
98:51:71:a8:ed:76:28:0b:3e:dc:90:db:80:31:a1:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:0B:61:93:7D:41:03:13:C3:5B:2C:F5:4F:41:1A:15:8C:34:7E
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ce:f6:7b:05:56:73:36:1b:2d:be:49:c7:48:a4:d2:de:87:
08:ac:c6:73:36:65:28:94:7e:7e:92:51:fa:ad:3e:f3:d8:10:
31:d1:6d:e9:48:1b:13:e9:2c:c1:81:15:f6:61:35:0e:7f:15:
5e:98:d3:23:3b:56:42:9a:02:86:4f:c6:3e:c6:a2:41:f0:df:
ca:9a:e5:de:96:a0:d7:86:d4:e0:32:f8:76:40:46:bd:2a:9c:
86:a9:51:06:c5:91:d1:8d:7b:7b:e2:85:8d:6c:af:c1:70:9f:
69:2f:ff:67:2d:c7:b8:f4:bc:03:a0:67:1a:17:9c:23:6c:59:
cd:c2:a2:86:2e:5b:77:a0:d3:41:22:0a:f3:cc:7d:72:64:b8:
2e:95:af:bb:3f:e8:cd:c0:15:a6:db:95:f2:1a:69:80:cf:ad:
78:12:1d:99:3f:b3:e8:e7:3d:43:3f:a2:6a:34:73:0b:d7:8d:
ce:fc:81:89:c0:dd:17:26:0b:09:05:05:30:6e:40:9c:16:73:
a9:49:12:16:db:56:a5:fc:65:be:f5:87:8a:b3:85:67:29:4a:
2b:8f:c0:db:76:0d:e4:7f:eb:ca:0b:89:89:6b:96:09:8f:90:
fa:ee:61:3e:c2:4f:f6:9f:f9:b4:bc:cc:14:c8:dd:45:d4:64:
43:21:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:32 2026 by rpki-client