Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: fSHh7nny3W7Z1zZjwuSB0C6uu89qSlQdY5L/3hf/BeM=
Subject key identifier: 5F:4E:B1:1B:00:34:F3:AC:01:EB:64:F8:EB:15:47:5F:B7:8C:03:E7
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 01A164C5D37E10B58C3B478A0AF6CCA0861E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 06E9
Signing time: Thu 22 Oct 2026 18:00:48 +0000
Manifest this update: Thu 22 Oct 2026 18:00:48 +0000
Manifest next update: Fri 23 Oct 2026 18:00:48 +0000
Files and hashes: 1: YvcN6K_UssWa3nJxS1veSyl_xQY.roa (hash: t+mIJo/SlLUrms8Z2lET1unxQJd9AMYvk21JZsGJ2+0=)
2: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
3: fySblURiBoP5SziKdVGmimST7RI.crl (hash: JK4zH3zzwbg8bkGP4dV2WUNPZDqYgSIl6+OAFStZ8Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c5:d3:7e:10:b5:8c:3b:47:8a:0a:f6:cc:a0:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Oct 22 18:00:48 2026 GMT
Not After : Oct 23 18:00:48 2026 GMT
Subject: CN=5f4eb11b0034f3ac01eb64f8eb15475fb78c03e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:8f:80:72:c8:1f:14:bb:ae:fe:42:40:96:
b3:61:c5:b0:23:ad:3f:70:83:b6:01:6e:eb:cf:2f:
51:6a:1b:0b:28:41:be:94:71:e4:1e:3e:fc:ae:cf:
94:c2:50:b8:26:80:fb:78:a9:43:9a:17:11:40:70:
29:39:c6:f6:19:5e:34:cf:54:a7:91:bc:ce:8c:7e:
2f:d6:91:1f:84:ae:ca:f3:2e:93:97:82:0f:25:2e:
2f:ec:d5:eb:15:76:62:ab:00:e1:1f:04:37:48:93:
5b:09:f6:80:b0:5a:8f:45:07:a0:ec:f9:3c:33:59:
ff:e7:a1:78:72:6a:be:5d:02:16:51:8f:3e:b6:59:
49:01:af:05:85:c3:37:5a:16:8a:b3:cd:49:be:7c:
5f:f8:90:b1:ad:fc:5a:04:4b:2f:fe:2d:d2:eb:b5:
ff:08:f6:fa:60:7b:ac:e3:43:ec:16:d9:0b:52:64:
20:5c:3d:05:a0:08:63:21:fb:1f:a1:b8:89:74:59:
41:3e:6a:24:86:8f:26:07:ce:fc:5f:40:fe:7e:c0:
ef:12:13:74:0d:3e:03:13:1b:a0:d7:6a:eb:fa:e1:
1b:f2:9a:92:94:31:bd:8d:e1:e7:10:4b:5d:bc:04:
23:c9:d5:1c:ed:b7:d9:a5:99:29:be:4f:61:70:6a:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:B1:1B:00:34:F3:AC:01:EB:64:F8:EB:15:47:5F:B7:8C:03:E7
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8f:0f:9c:e5:90:89:15:4d:ed:5d:a1:83:34:f0:57:5b:33:
07:d9:f1:45:f3:5e:27:4b:e4:96:3f:21:16:a3:bc:35:7d:29:
a9:f2:16:27:31:87:27:62:01:df:2c:b2:2b:f3:40:ec:c7:f4:
25:5a:3f:ad:6b:bb:86:b9:51:bd:29:04:9c:de:05:3d:fe:e8:
15:36:fb:a7:2f:45:13:c8:0d:09:68:83:b9:2d:97:07:13:9c:
1f:e5:b7:25:d6:c8:9a:41:7b:9d:f7:58:ae:6a:e9:82:a4:9b:
b8:bd:da:2c:41:3b:21:48:4f:68:f8:43:aa:d3:95:81:05:ae:
57:69:de:c4:95:c0:db:1a:f2:36:01:61:6d:ec:17:f9:49:09:
fe:08:14:47:c6:43:41:cc:34:e1:3b:8d:f3:df:90:8b:e4:0b:
ac:ee:26:b6:9f:43:ef:89:73:5f:61:ef:bb:f3:b7:d1:4e:02:
ae:3a:1c:70:af:db:1a:de:28:51:74:87:c0:ba:11:41:8e:7c:
9c:a2:21:88:67:cd:71:06:19:a0:ff:fe:dd:7d:55:83:e8:87:
82:fe:5d:6e:a5:fb:a9:0b:8b:c3:4c:84:e2:a6:96:e4:70:b3:
fc:d8:20:31:4f:fb:45:b7:4f:06:0a:10:5b:9d:82:40:1d:1e:
ba:8b:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:01:01 2026 by rpki-client