Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: 03BO5Cw5nlrdZp4OeN3YEAjmBpjt4iojG/QBSj4ij2o=
Subject key identifier: A8:01:E3:7A:5F:B6:B7:AA:07:89:6E:F1:9B:00:90:B4:76:F1:39:BB
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01A08BD67A29E608BE6D029B69B9E0F1CD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 09FE
Signing time: Thu 10 Sep 2026 15:01:24 +0000
Manifest this update: Thu 10 Sep 2026 15:01:24 +0000
Manifest next update: Fri 11 Sep 2026 15:01:24 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: sA1te2ir78Gic6iPjRA5bdqk/mNU2V87ORIagMO6Eno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:7a:29:e6:08:be:6d:02:9b:69:b9:e0:f1:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Sep 10 15:01:24 2026 GMT
Not After : Sep 11 15:01:24 2026 GMT
Subject: CN=a801e37a5fb6b7aa07896ef19b0090b476f139bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:7b:d2:6e:85:40:05:4e:09:cc:67:72:39:
f3:e3:05:c0:91:cd:fe:cf:c6:f5:df:ee:33:8d:a5:
77:a2:d4:9c:3c:6c:37:c1:c1:ec:8c:0b:f8:ca:c0:
92:ff:47:57:6f:66:c3:45:e1:f2:98:6d:3c:cf:bb:
aa:1e:45:70:0c:bd:e0:2a:d3:f7:b9:40:04:83:bb:
d8:62:7e:8b:63:17:fb:6c:9d:87:c4:c9:0c:b6:5d:
4c:be:94:84:05:44:c1:22:86:06:7b:6b:de:39:d8:
80:3c:6b:2a:81:a7:ee:bf:7b:02:fc:2a:84:b2:ba:
eb:2c:8e:1e:7f:08:24:3e:1e:b4:6a:60:3c:73:92:
c4:f4:a9:a1:ef:5b:ad:81:bd:09:2a:69:e6:fa:c8:
3f:db:bf:e6:a5:a8:2e:81:56:f5:61:3a:8a:0b:e9:
a7:9e:d4:83:2c:18:63:bb:8d:59:b9:23:66:67:4b:
54:06:c0:8d:74:4a:d1:ca:65:0a:d5:8f:7a:5b:bc:
0d:cc:b7:c5:23:dc:20:ea:1c:33:9b:7f:30:d9:ba:
4d:8a:16:77:6f:fb:1e:4e:d8:67:93:fe:1a:d3:51:
c3:a2:76:c4:60:54:27:06:fe:1f:b5:ad:bd:e3:fb:
e9:fc:ca:67:fd:e5:e1:25:3b:77:a0:a8:dc:36:86:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:E3:7A:5F:B6:B7:AA:07:89:6E:F1:9B:00:90:B4:76:F1:39:BB
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:41:5c:d5:bc:5c:f2:5b:37:6d:9d:c0:40:b3:2f:11:01:
4b:85:af:ae:a5:dc:92:27:67:6e:e7:21:97:c2:07:82:a2:ae:
30:8f:2b:c7:bb:fd:9a:da:61:4e:db:a7:92:4b:45:5e:f0:2d:
92:77:19:35:c6:5b:87:6b:14:09:89:06:07:36:f7:aa:20:29:
67:62:de:5d:4f:1c:8e:88:bc:ca:6d:40:6b:4d:a2:19:b0:cb:
a1:c6:e8:cd:8a:1d:ed:12:32:73:78:2c:60:89:b3:d9:80:bf:
55:e0:7b:b3:e7:4e:3f:10:03:3c:cf:64:88:3a:ef:76:7b:28:
6e:d6:bd:2e:ba:28:50:e3:98:f1:21:55:63:d0:56:2a:ac:19:
8b:1d:f5:a9:b2:08:af:ef:75:1a:18:e5:aa:f6:75:7e:44:f9:
33:0d:b7:9f:01:9d:fa:4e:e9:18:f9:71:51:6e:60:e6:9d:3e:
f5:39:8a:72:b8:2b:c6:62:46:54:5c:85:e4:8c:10:dc:cd:2e:
14:30:79:60:11:51:67:6f:8d:33:ad:b3:f4:0b:73:dd:61:a5:
93:c5:a5:21:76:28:78:72:c3:c4:54:fd:92:fa:5f:0d:68:27:
b3:13:4b:01:d1:80:bb:53:44:04:c5:c1:ec:12:92:30:65:fd:
ec:9e:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:58 2026 by rpki-client