Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: 5vXp/WDKM9oa434lZzpFjO/qmAQDELO8++rricqAvao=
Subject key identifier: DD:3B:3C:A8:96:78:4E:CA:FE:E5:2F:48:A8:1A:EF:81:94:40:C8:2D
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 01A158C237F94406FF5A3386ED64706A6734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1AB8
Signing time: Tue 20 Oct 2026 10:01:25 +0000
Manifest this update: Tue 20 Oct 2026 10:01:25 +0000
Manifest next update: Wed 21 Oct 2026 10:01:25 +0000
Files and hashes: 1: BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa (hash: PQRLVCa1vMzlo4kwd2qwNYT39XsjM74Jew0dEax8fpk=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: Exs+481BvyYpIbsPLIVRlOfNA3O5Eq+AkLqX2Yh4Wc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:c2:37:f9:44:06:ff:5a:33:86:ed:64:70:6a:67:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Oct 20 10:01:25 2026 GMT
Not After : Oct 21 10:01:25 2026 GMT
Subject: CN=dd3b3ca896784ecafee52f48a81aef819440c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:33:f8:b4:ec:fc:a4:23:f7:10:d9:2b:ea:
6d:ad:70:77:b2:0a:ed:af:35:75:fd:2c:09:76:53:
fc:33:d8:6a:cf:fe:ad:ca:5c:ee:6b:45:f0:b6:f2:
61:1b:22:84:5a:c5:ac:c2:cc:db:7a:2d:67:6d:00:
33:c5:7c:e0:50:da:ae:2a:e0:5b:b4:ab:4c:58:17:
4e:06:44:cc:4e:bc:6c:a6:77:ee:99:3c:ea:6c:19:
3e:0b:59:c7:5d:5a:12:26:40:dc:62:e3:01:b3:72:
55:03:74:32:82:45:3e:4a:af:3c:33:56:d2:87:a7:
ff:71:8a:6f:99:2d:d9:90:98:81:3b:42:a6:53:ea:
4d:a5:88:49:c7:0b:98:6e:43:b3:fe:dc:30:d9:ce:
18:2a:5d:ef:17:49:7c:1b:fb:a6:6f:1d:6c:9e:22:
b4:6a:75:d6:a7:80:ca:44:85:f6:b8:d3:80:9d:14:
07:b9:ac:90:59:6a:ce:9d:04:6d:6a:7c:4c:15:72:
59:9c:91:3a:3c:33:b4:eb:35:56:41:ea:e1:c8:ab:
94:1f:b6:8b:9a:a2:54:d3:e6:84:87:82:e5:84:af:
ae:e0:d5:42:b6:51:c5:70:52:3a:b4:39:de:6a:6c:
dc:5d:6a:b2:7c:63:b1:6a:d2:a7:02:35:11:dc:cc:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:3C:A8:96:78:4E:CA:FE:E5:2F:48:A8:1A:EF:81:94:40:C8:2D
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:eb:40:31:b4:4e:a5:a8:83:35:58:30:72:17:5f:ce:3b:
85:9d:10:ba:58:bf:0d:27:f1:d6:8c:95:07:1a:f6:9d:22:02:
82:c9:b3:0c:11:98:7c:a0:20:ff:e5:91:70:d2:77:d9:6f:9b:
6d:de:ad:80:ee:e9:34:dc:c7:d3:d5:ff:9e:80:53:e4:96:9b:
a5:de:ef:ab:e8:46:f8:6e:1c:95:da:13:f5:26:33:4e:f4:49:
55:0e:f0:2c:96:d5:75:18:d7:e8:c9:46:41:d7:65:2f:85:66:
f4:e0:14:bb:b2:1f:0f:03:e7:27:fa:3e:b3:4b:37:a9:15:8d:
c6:b9:1e:e9:84:f7:9b:d4:23:1a:92:18:d8:74:33:f8:6c:15:
13:17:53:90:09:62:03:05:c0:4d:a8:45:e6:6c:ae:91:51:ab:
cc:38:7c:f5:bd:95:cf:dd:a2:8c:0e:e1:6f:8b:cf:3b:98:e7:
05:28:08:a5:9d:32:3b:46:ee:6c:38:71:02:55:d1:14:f0:c3:
31:ab:a0:c1:57:56:5c:d9:71:53:c5:31:a6:1f:cb:60:51:59:
35:1c:ee:e6:1e:7e:41:ba:74:60:bb:59:23:96:08:c6:02:5d:
49:d5:78:cb:51:aa:00:e6:55:e5:4f:bf:f7:9a:89:28:33:89:
4b:f4:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:10:32 2026 by rpki-client