Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: RVd/lCKPWvDC0sMxxDLiyrB+svbORGfTNz1nr+wj2pM=
Subject key identifier: 02:4E:F4:B1:FB:ED:44:0F:AF:90:03:63:AE:17:55:56:3F:46:34:91
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 01A002F00BD43F963A38E592F18AE4196C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 01:01:21 +0000
Manifest this update: Sat 15 Aug 2026 01:01:21 +0000
Manifest next update: Sun 16 Aug 2026 01:01:21 +0000
Files and hashes: 1: YKjCiOvrHZHwAoOhLiE4km3LhaQ.roa (hash: XRdYFOkY6v4wv3ww26grBfJ07o8ReOtA69DPcgVZ2KA=)
2: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: xdkX4UjiwTyrOIIDDunwrJVSI1nRLXunEgchtgikNdA=)
3: yF060uWUoglc46_9aiek0Wif5nI.roa (hash: cEbgERmtvG6ESk2oyjnDw4pe0X2ApYpPhYt51QTI0uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:0b:d4:3f:96:3a:38:e5:92:f1:8a:e4:19:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Aug 15 01:01:21 2026 GMT
Not After : Aug 16 01:01:21 2026 GMT
Subject: CN=024ef4b1fbed440faf900363ae1755563f463491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:40:22:4f:c0:fe:00:27:b7:ed:72:f6:ae:
09:07:cd:3a:6b:bd:bf:12:2f:35:25:67:31:f3:bc:
53:48:e4:c3:bb:f7:f0:f1:89:14:71:21:22:54:0c:
00:ab:28:de:52:1a:67:5f:c8:64:18:23:af:ab:af:
7c:75:42:6b:df:18:4d:46:82:c2:0e:6d:8e:c9:da:
25:04:54:d6:2b:61:e7:c4:2b:dd:3a:e6:d4:63:a3:
8b:f7:8b:a4:74:e6:71:2e:2a:ed:d5:8c:04:2a:e2:
54:c5:ab:01:b1:b2:01:52:76:ef:41:94:2a:5f:80:
26:74:41:a1:33:91:dd:c8:a7:25:91:9a:3c:dd:56:
54:71:c1:a0:f1:dc:8f:fc:e2:b1:0f:23:32:9f:ee:
9f:ca:e2:a8:b4:88:34:41:97:5c:ae:db:6b:4f:c5:
60:86:22:b3:f8:d1:40:2a:14:55:61:29:2d:b3:da:
40:bf:4e:b6:20:bb:63:ca:e3:40:d0:06:12:df:20:
62:0c:34:b5:89:aa:6a:0a:5e:1b:be:95:46:71:76:
b9:1c:45:89:6a:83:21:6d:fb:b9:12:4c:ce:43:80:
1f:38:32:4a:2d:f9:32:b2:f3:20:7e:f0:0f:15:de:
31:e8:d3:8e:7d:49:a6:0a:61:b0:1d:cd:3d:a8:7d:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:F4:B1:FB:ED:44:0F:AF:90:03:63:AE:17:55:56:3F:46:34:91
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b7:01:ad:6f:a0:ae:fc:e5:62:81:6e:df:52:3d:0d:5f:a5:
1e:19:0b:b2:ec:f6:28:88:8e:b9:1a:32:51:6b:bd:92:91:1d:
ce:12:84:7f:2a:f9:35:1f:1f:aa:ed:30:11:c9:97:b5:4f:49:
9a:55:c7:12:88:4a:d8:c8:04:a1:e8:6f:43:9f:cc:f3:d8:63:
7e:95:bb:48:24:d1:da:da:2f:7d:9d:e7:e5:82:51:88:f4:79:
8f:ab:fe:7b:93:e6:52:21:7a:b3:2f:d8:2b:cd:91:33:5c:f3:
03:4c:13:42:fe:79:a7:03:67:6c:11:6a:11:cc:f9:12:1c:ee:
aa:68:91:36:0c:10:7f:5f:74:90:87:ac:8c:bc:b4:b1:a6:d6:
29:b6:c0:9d:e2:4b:30:96:69:68:c3:1c:27:6a:43:7f:96:26:
6c:f5:7d:30:d0:b5:17:2e:3d:28:1d:d6:ba:95:a2:5a:35:76:
2a:38:e6:a7:fe:8e:6a:a6:08:44:bb:8d:fc:f2:28:15:c5:92:
f6:86:ad:a1:f6:3f:07:99:61:5b:76:7c:4f:d6:56:a5:19:47:
d0:8f:e0:7a:e8:e6:88:88:44:89:92:ab:ae:40:c1:d2:24:4d:
f4:80:8b:24:2d:cd:71:c5:39:0f:f5:76:5e:5c:4b:18:b7:da:
44:64:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:37 2026 by rpki-client