Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: dEHiOTV24/mRThLJrnW2t0v6MUYI0jxSL+ierZ61IOk=
Subject key identifier: 84:A1:09:01:2B:15:9C:AF:EC:C4:9C:33:58:7D:B5:6B:FE:82:3E:26
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01A003CB01CC21DB15A7A445D1E538953172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 09AC
Signing time: Sat 15 Aug 2026 05:00:30 +0000
Manifest this update: Sat 15 Aug 2026 05:00:30 +0000
Manifest next update: Sun 16 Aug 2026 05:00:30 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: A8NjyU+cuA3R4DHquoX3IOyW4WbM2rGwBSYJEP82bSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:01:cc:21:db:15:a7:a4:45:d1:e5:38:95:31:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Aug 15 05:00:30 2026 GMT
Not After : Aug 16 05:00:30 2026 GMT
Subject: CN=84a109012b159cafecc49c33587db56bfe823e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:64:79:79:15:f1:3e:e2:cf:2a:83:da:98:
a7:47:66:bc:76:cc:c6:d5:8f:24:88:80:f1:bf:b0:
f5:a0:26:a3:55:a2:d8:d7:63:a9:ab:51:86:76:6f:
87:db:c9:d2:60:38:6e:99:04:74:54:3b:5e:12:35:
53:cc:d7:56:6d:d7:b9:76:eb:fb:e2:a4:a2:d9:f0:
6d:0a:ec:66:90:a0:b9:46:34:95:73:c7:37:c6:60:
fe:96:d7:ad:fb:cd:46:8c:ae:44:13:36:1d:53:77:
e9:00:a9:87:a3:c5:ee:f1:c9:4b:f3:10:0d:38:63:
74:cc:30:d4:dc:75:dc:ef:05:7c:54:a9:3a:fd:57:
12:0d:89:27:5b:f1:71:73:e7:8e:35:dc:00:72:18:
1c:0d:67:c8:4f:45:c1:64:a3:8b:2e:00:37:02:3d:
52:46:e5:f7:5e:21:4e:5c:2b:16:99:95:be:fc:8b:
5d:1c:44:58:fa:06:98:20:9a:2f:bf:ec:63:b0:2b:
b4:07:a9:9f:c0:31:36:03:5c:e5:84:94:dc:15:a8:
46:67:70:2a:dd:d5:67:12:be:ba:51:36:c5:04:5d:
23:fc:3e:54:ab:75:08:0d:ca:64:59:8b:07:96:5a:
b3:66:0d:2d:6d:60:76:dd:e3:0d:d6:85:70:25:b0:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:09:01:2B:15:9C:AF:EC:C4:9C:33:58:7D:B5:6B:FE:82:3E:26
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:00:f0:26:c4:e7:7d:39:37:a1:8b:32:63:72:fd:ba:04:
61:f6:b7:e2:ee:6c:94:66:f3:15:d3:21:8d:1e:3c:13:85:b3:
0f:ad:68:b8:77:70:72:a0:73:af:59:4a:7a:61:60:3e:6d:db:
c5:3d:3b:15:f7:4f:fd:52:3b:f2:df:22:66:d2:17:93:c8:d7:
45:97:f2:6f:0e:2c:4f:11:45:98:0e:47:7b:ab:11:6b:d9:b3:
c9:e8:14:78:4e:d1:63:00:8d:5e:45:11:ef:ee:25:77:48:0c:
7b:24:15:56:82:db:98:bf:4e:16:58:af:f6:ab:d9:cb:cc:9f:
72:90:d5:49:7a:a8:76:d6:e9:a0:22:54:58:e8:3d:bb:1b:96:
47:8c:09:53:33:16:60:7c:47:02:97:31:09:f9:51:05:25:71:
f4:a0:88:88:4d:c1:31:bf:1b:c2:83:ce:ff:4a:8a:97:c5:bf:
fc:fd:ae:b2:09:ab:47:43:c0:d9:50:21:dd:1e:89:16:72:df:
19:27:6f:46:a9:1a:c6:b8:db:7c:af:d5:a0:fa:4a:9c:8f:8c:
f2:04:52:20:2d:78:b2:61:1c:86:bf:d0:e2:99:44:6c:4c:5a:
98:ce:4f:e4:3e:c3:96:08:4d:95:2c:f7:b0:ad:c2:06:8a:4f:
04:b8:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:30 2026 by rpki-client