Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: hKQAejLS2SAl5cdrHeCPBoTQzgWIhBdwub2BUdLW3Xk=
Subject key identifier: 0A:87:EE:C3:D2:80:E5:91:32:6D:3E:EB:A5:11:5F:D1:7E:23:EE:25
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01A0B0BE92BABA81057B41927371B3571453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 1A34
Signing time: Thu 17 Sep 2026 19:01:14 +0000
Manifest this update: Thu 17 Sep 2026 19:01:14 +0000
Manifest next update: Fri 18 Sep 2026 19:01:14 +0000
Files and hashes: 1: C4T5bmxMGbL1-cR1zz-VuXKeCG8.roa (hash: msKAJnI9qa68IDEF0zcYcIvy+lu7WRdztygkKRE8PlU=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: lmuR+UzS9ddQW7Zg3vIyvWtNT8KTk2nfKBm7yRkYgSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:be:92:ba:ba:81:05:7b:41:92:73:71:b3:57:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Sep 17 19:01:14 2026 GMT
Not After : Sep 18 19:01:14 2026 GMT
Subject: CN=0a87eec3d280e591326d3eeba5115fd17e23ee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:3e:88:c0:03:6b:82:af:93:14:8b:9b:f8:
af:6b:55:b3:e9:ad:96:17:98:17:8f:43:62:4a:78:
c1:05:43:bb:a0:14:b9:00:02:ab:15:27:85:61:6d:
7a:d3:fb:25:8f:90:31:46:76:e7:4d:af:c6:c4:f0:
60:77:8d:00:f0:eb:a5:bd:ab:a6:ed:b7:0e:83:8c:
e2:91:0b:71:ca:bd:d3:36:0b:90:ab:95:f8:9f:43:
34:70:f3:fc:9f:5f:62:28:71:18:a4:86:d6:8a:3b:
fe:12:11:a5:c7:de:38:05:3d:9b:e7:ba:31:64:83:
1f:f4:24:14:12:de:bf:e5:ab:15:2c:4c:5e:c8:63:
44:bb:6a:fd:48:1d:72:98:2b:6e:df:f8:f3:5f:5a:
48:c0:28:b4:8b:05:44:21:6a:19:d9:79:8d:37:85:
34:83:41:39:9b:c7:58:ed:bc:1b:f0:88:1c:72:09:
d8:eb:d4:33:10:36:93:a5:60:95:da:7d:87:0a:3e:
8a:84:67:57:d9:64:2b:d5:dd:4f:23:4b:c6:b9:2d:
b0:07:dc:ed:d7:89:81:34:a4:cc:68:df:be:91:39:
2a:1d:f5:d7:12:7c:07:bf:b4:91:3a:d1:b7:19:c3:
bc:44:e6:cb:c1:91:a2:e7:27:b8:80:67:56:25:1c:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:EE:C3:D2:80:E5:91:32:6D:3E:EB:A5:11:5F:D1:7E:23:EE:25
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:93:94:61:a1:1d:e4:77:a3:ca:20:18:82:fc:a6:50:52:08:
00:a1:16:31:1a:67:40:08:62:9b:d2:cf:38:97:10:3f:4b:41:
f9:0c:6a:6c:b3:80:12:2c:31:fa:6a:94:6c:78:d1:64:a1:fc:
cf:9f:de:71:ad:1e:bd:78:e6:4e:d7:f4:51:ce:5b:b2:22:09:
19:91:44:59:6c:d6:4a:31:f4:62:94:98:79:a4:8b:0e:ec:25:
5e:23:af:d5:86:df:d0:f6:57:d0:a7:39:a8:9c:62:e3:87:fd:
6d:66:bc:bb:6b:93:eb:c2:f7:e8:ac:b3:e2:fd:f2:52:99:eb:
ef:da:a2:28:b9:a6:e3:0b:9d:b8:3a:93:3b:fd:84:a9:08:3b:
09:65:8d:24:38:b5:64:33:f1:16:a6:e5:97:74:0d:19:b4:af:
b5:8d:bc:2e:17:c9:20:d8:3c:f2:41:4d:68:92:33:3d:aa:8c:
23:76:df:de:11:c2:94:81:e2:ed:8a:b4:14:4c:3d:49:bb:1a:
6a:c4:9f:a3:33:30:47:21:b0:2e:8f:f4:92:84:e0:f8:28:cb:
d2:c2:17:2d:04:82:25:bb:4a:08:cb:8f:d6:48:8f:0a:f5:0c:
02:41:63:d3:5c:3b:27:4a:0c:aa:44:ca:12:e6:de:aa:5a:74:
f9:ef:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:34:53 2026 by rpki-client