Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: m9r7v2W+ZFUKzjpQRMgbGiLY9QBKlEWOr/V2CCSOmIg=
Subject key identifier: FF:56:D3:F6:C7:D9:92:5E:3C:46:2E:EF:2F:33:A6:7A:FC:2E:CA:5A
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01A17A72435ECB1F5985EA875626CD85EBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0A6E
Signing time: Mon 26 Oct 2026 23:01:11 +0000
Manifest this update: Mon 26 Oct 2026 23:01:11 +0000
Manifest next update: Tue 27 Oct 2026 23:01:11 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: Y+wL+LhVo54EU3LiXdieqdDTfKR50bBUKdcmdzJJpQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:72:43:5e:cb:1f:59:85:ea:87:56:26:cd:85:eb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Oct 26 23:01:11 2026 GMT
Not After : Oct 27 23:01:11 2026 GMT
Subject: CN=ff56d3f6c7d9925e3c462eef2f33a67afc2eca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:dc:af:ee:35:0a:6b:05:dd:a0:bc:0d:77:
06:54:dc:7b:f2:4f:94:a8:d1:8f:ac:67:51:ab:85:
dd:1a:76:f9:7e:ed:b4:ba:97:94:0d:f7:70:21:d0:
0a:86:fd:6e:5c:9f:b7:93:ce:f3:d6:4b:79:f4:52:
5b:f8:32:e6:07:ce:11:92:62:b0:5f:e4:85:b5:ce:
1c:d1:d5:55:72:8b:19:5d:33:55:d3:55:68:50:d1:
be:6d:6d:7e:c3:2f:1f:67:35:b1:25:3c:09:86:75:
69:6a:d5:5f:a1:c5:85:c5:3b:c3:6c:f8:44:6c:cd:
92:68:4e:bc:0d:d9:e5:95:55:a1:72:a9:1c:98:8c:
12:ae:d8:bf:f1:de:ad:3a:63:ee:cc:bb:0c:8b:97:
d6:8b:34:37:f8:f8:5c:06:dc:71:a7:85:a9:65:fc:
3d:fa:9f:b5:d4:3a:0b:36:38:8d:2d:50:d0:ea:5d:
e0:3f:41:32:ae:72:d9:63:5c:a8:0c:44:b0:04:b5:
4c:a1:a4:28:16:4b:60:43:5f:f9:b7:ac:fa:89:73:
97:fd:90:78:70:d2:5f:8d:15:20:ac:88:33:7c:fb:
a9:ea:75:65:5e:62:66:83:8e:ef:05:71:f1:25:71:
a6:b7:8c:3a:a6:5e:c8:4d:c9:e4:74:ca:75:23:96:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:D3:F6:C7:D9:92:5E:3C:46:2E:EF:2F:33:A6:7A:FC:2E:CA:5A
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:0d:fb:a5:74:2c:cf:04:c7:16:15:1d:85:b4:c7:08:65:
08:b6:87:e9:b1:96:eb:69:3e:43:41:be:13:5d:a2:08:7d:2a:
da:6e:cc:c7:09:0d:91:5d:38:bb:5a:38:07:37:4f:f0:f4:eb:
7f:e4:06:84:5c:99:fb:1d:2c:21:ee:1b:f9:f5:71:17:b8:12:
34:a6:a5:b2:47:99:ae:c1:4b:4e:47:fc:a1:df:c6:85:51:11:
87:b6:14:c2:fb:b6:41:15:39:61:b5:13:5a:eb:24:52:95:60:
20:db:bd:dd:9c:85:a1:e3:4c:26:5d:87:3f:6d:7b:e7:ad:75:
ee:81:18:a7:21:6a:fd:8b:ed:0b:2e:af:b3:e4:a7:92:02:eb:
db:4b:32:75:f8:31:b3:40:48:73:01:db:a1:6d:39:17:18:da:
f5:dd:a1:51:c0:7b:3e:a5:17:74:b3:f5:10:38:ef:b3:7b:1e:
bf:97:17:6f:88:e6:04:52:74:71:30:ee:0f:24:46:46:93:80:
e6:07:4f:42:d1:60:c3:f8:3c:10:38:7f:06:d9:2c:39:b6:60:
8e:54:2c:f8:e8:ad:ad:ec:f5:71:ea:e1:86:cf:9a:5d:06:11:
73:be:8e:1c:9e:3e:7f:f2:6e:d4:f8:13:73:9f:09:0f:7b:14:
26:26:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:57 2026 by rpki-client