Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: RTf+Coc3tBEddy5rW6e5sxlh9swCOm+NDMhs+UJazKM=
Subject key identifier: B5:B1:DC:ED:77:99:4A:7C:BC:F0:6C:CA:B7:38:7B:37:71:FA:70:5C
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 01A17883B84D98E6E35A087DEB3FEF580F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0F8A
Signing time: Mon 26 Oct 2026 14:01:00 +0000
Manifest this update: Mon 26 Oct 2026 14:01:00 +0000
Manifest next update: Tue 27 Oct 2026 14:01:00 +0000
Files and hashes: 1: 12UJF4HYmWUHj7PV3zv7e2Gsrnc.roa (hash: MFtJUTjKP5EZY8W9GLM2rnUmvMbXeeAVoqfoR4gu6rY=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: naESWf/c9aKxVTyt2ss+qQz/uS0+IbmgthedNsDcCyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:b8:4d:98:e6:e3:5a:08:7d:eb:3f:ef:58:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Oct 26 14:01:00 2026 GMT
Not After : Oct 27 14:01:00 2026 GMT
Subject: CN=b5b1dced77994a7cbcf06ccab7387b3771fa705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:e6:97:e1:6a:e1:8d:30:22:69:30:ca:90:
aa:c9:1a:bc:b8:1d:be:5b:d6:39:ee:21:02:7d:c0:
dd:e7:a4:54:9b:3b:36:8b:5b:85:dd:d5:26:2c:e6:
38:5d:90:39:b0:e1:9c:c1:ae:3d:85:a3:5a:33:c9:
05:af:8f:8b:98:32:ba:f8:1c:44:96:b9:43:71:9b:
77:a3:de:3b:53:26:15:dc:32:d2:c6:32:f9:f1:08:
7a:ea:ce:31:0e:69:21:e2:c0:2d:ea:4b:a5:23:46:
1d:97:28:96:50:f1:7c:ff:34:e4:18:c7:61:8a:1e:
f1:58:cf:a0:99:25:18:1b:ba:4c:5f:40:d0:af:f9:
d2:bf:8b:e7:c3:e6:9f:8e:0c:d3:ed:2e:99:32:b3:
32:2c:a6:e8:cb:c2:d3:d5:f7:fa:5d:9f:f8:ab:99:
af:48:22:54:5a:19:43:51:f3:3e:3a:0f:70:9b:f4:
c9:92:a0:70:6b:57:e1:21:60:73:ea:92:d7:6b:31:
59:1a:f6:8c:65:c6:49:95:bb:0e:e4:a1:95:54:c4:
84:58:5b:cc:08:36:82:88:c4:e1:a0:1e:0d:85:bc:
5f:40:db:48:1b:84:25:50:5a:66:8b:e7:6b:c1:e5:
26:55:67:fb:c8:9f:58:48:a4:7e:86:b8:9d:96:ed:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:DC:ED:77:99:4A:7C:BC:F0:6C:CA:B7:38:7B:37:71:FA:70:5C
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ee:59:78:a7:d0:58:e0:5f:44:74:ec:2a:ee:08:6f:79:20:
53:e9:9e:93:74:6c:3c:bc:fb:8a:5b:e9:3e:1b:97:ec:30:46:
83:8c:3f:f9:84:49:b9:4e:56:cc:68:3c:5b:84:b7:22:1b:26:
df:e2:d1:11:fd:21:9e:ed:d2:43:4f:d5:7c:cc:e1:73:ef:96:
61:c8:25:d4:47:db:1c:ab:86:98:b7:01:fa:45:6d:0f:98:e4:
65:a7:05:a2:10:81:ec:7a:5c:6b:05:7f:8d:76:ac:7b:54:48:
62:76:f7:ee:0f:f7:38:29:0d:18:11:b6:ec:f1:6b:dd:d3:ce:
ce:d6:cd:46:6b:f0:23:c8:50:d2:96:63:10:a0:ee:e8:87:19:
90:26:03:c4:7a:b0:1b:22:f5:7c:bc:dc:62:e3:5c:23:b1:56:
0c:d1:49:17:09:cd:02:11:63:73:29:7a:97:f5:ad:6f:d7:6a:
21:e4:82:c0:3c:a0:96:c9:bd:7c:c5:a6:35:34:60:03:a8:79:
5c:c2:51:b1:2e:7f:10:5a:91:26:cd:f3:58:34:46:06:e3:01:
c8:db:60:33:13:42:e9:07:02:b6:d7:3b:84:ac:5c:a5:0f:ef:
a4:11:d7:ca:5f:67:ee:a9:70:cf:5e:8d:da:d7:b7:74:73:69:
fa:19:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:39 2026 by rpki-client