Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: GTX0wIcFXg8wYsIO7ZXWQciITDCHEEgKOjOXfMiF6Vc=
Subject key identifier: C2:53:2F:63:48:B6:50:16:56:ED:8B:87:CE:1C:FF:52:F1:F0:CE:D0
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01A1769506975753DB2DD34C2C58A20CD19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0A6C
Signing time: Mon 26 Oct 2026 05:00:40 +0000
Manifest this update: Mon 26 Oct 2026 05:00:40 +0000
Manifest next update: Tue 27 Oct 2026 05:00:40 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: 8Tn9r540ZCYWfmsb86jJfyRtVXRTnOPmaMyehw/torI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:06:97:57:53:db:2d:d3:4c:2c:58:a2:0c:d1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Oct 26 05:00:40 2026 GMT
Not After : Oct 27 05:00:40 2026 GMT
Subject: CN=c2532f6348b6501656ed8b87ce1cff52f1f0ced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:cb:0b:15:18:58:17:c0:8d:ca:7e:78:cf:
74:c8:14:cd:64:f6:a1:16:b4:d1:4f:e1:b3:54:70:
23:c9:b8:5d:0e:d6:05:1c:d5:14:27:bf:d6:9a:31:
82:a4:f7:5b:0d:e0:66:41:b2:71:56:9c:f8:79:6e:
70:94:c6:11:40:1c:d2:eb:72:8f:67:e2:8e:a1:01:
e5:85:ec:c9:96:36:2f:8f:c9:23:93:4e:cd:04:86:
90:c1:ce:a3:25:28:5c:d5:8c:f9:0b:37:a8:99:2a:
4c:72:66:5c:5d:9d:a1:e4:21:5c:22:b5:3a:ec:fb:
ad:d5:c3:c9:b9:83:bc:77:7a:88:f0:2a:b5:94:71:
bc:87:54:bd:b1:e9:dd:2b:c8:af:5a:59:1c:42:cf:
4e:71:5e:23:51:6a:3e:5f:54:13:1f:58:a2:a9:74:
ad:4f:7a:17:a8:14:42:02:1b:8e:50:2a:6f:ce:17:
0f:fd:f7:7d:b5:4e:00:be:ce:d8:d6:21:ce:d0:78:
fe:af:b2:cf:8a:e7:f2:d5:5d:07:b1:e9:09:b9:8f:
09:4f:30:58:9e:15:67:fc:ef:bc:fc:fd:56:64:26:
be:ea:76:b3:cf:0f:0f:f8:d2:10:f6:d5:4d:66:c4:
1c:67:f8:6c:4e:7c:80:d4:af:b9:91:a5:8b:26:f2:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:2F:63:48:B6:50:16:56:ED:8B:87:CE:1C:FF:52:F1:F0:CE:D0
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:57:db:04:15:87:d3:72:a0:f9:da:2d:93:c8:18:61:9e:
bd:5a:d5:9e:34:04:ac:e7:9c:aa:2d:6e:c1:28:75:a1:b6:df:
e5:49:52:8c:6f:9e:46:12:7d:ea:c8:a3:92:a3:e5:e5:56:a8:
ff:91:1d:00:e0:99:36:ee:03:70:6c:f3:26:be:a2:18:60:08:
b6:6a:f1:0f:47:a5:15:9b:7a:17:a2:98:bf:77:59:06:b4:79:
44:c8:1d:e2:14:33:a4:d7:18:ce:a8:72:ab:eb:46:1d:e5:bc:
1e:6a:05:cc:74:94:58:f9:d9:8d:ec:8c:ed:60:86:f5:bf:b1:
52:96:4f:5f:2f:7f:32:52:09:3e:b1:98:78:1b:fb:48:aa:03:
8c:8d:e3:21:3e:0b:16:e7:4a:b9:1a:b0:94:98:11:61:33:e9:
67:8b:b9:59:6e:46:cd:92:ac:34:27:4c:3e:7a:9e:4a:50:7b:
f1:db:26:ca:c8:f9:3f:ad:75:1e:d8:69:5d:76:18:cb:87:b5:
8b:17:f0:3b:c0:52:57:c2:8a:15:33:6f:4f:1a:36:51:0c:0a:
85:92:2b:3b:f4:f6:68:66:e8:e2:2e:be:2d:14:d1:39:1e:c1:
d2:16:38:3e:6b:20:0c:e7:95:7f:8f:cc:12:33:ca:c7:e0:15:
7c:40:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:40:49 2026 by rpki-client