
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: Y5JVcxw6cCfaU7rYe+aGk5rdtaadbO13FJwQBya3kuI=
Subject key identifier: DD:AB:65:B5:DD:ED:28:B2:FB:D0:81:BB:CB:06:BF:5A:83:9D:74:80
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01A18E9D48D3D3D03361CA2BFBD0912DA807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0A7A
Signing time: Fri 30 Oct 2026 21:00:34 +0000
Manifest this update: Fri 30 Oct 2026 21:00:34 +0000
Manifest next update: Sat 31 Oct 2026 21:00:34 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: zNq+//+9PAmuZeUWPk+upjlAt2MJ8110NNMVuUJXaRQ=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:48:d3:d3:d0:33:61:ca:2b:fb:d0:91:2d:a8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Oct 30 21:00:34 2026 GMT
Not After : Oct 31 21:00:34 2026 GMT
Subject: CN=ddab65b5dded28b2fbd081bbcb06bf5a839d7480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:70:f1:21:a5:1c:13:e1:38:bc:26:8e:72:
3c:31:6c:f1:6a:3a:23:c6:55:d3:e8:03:9e:1c:3b:
14:a7:73:d0:74:28:dc:9b:0c:9f:b8:51:93:c0:bb:
8b:d1:0b:c6:a0:d3:e6:98:49:ec:03:51:54:84:ec:
cf:22:ac:38:9e:79:27:50:c7:98:1e:89:06:e4:89:
f8:ff:01:55:4e:7f:24:aa:9b:ff:b6:5f:6a:89:39:
8c:31:4f:9c:60:f2:59:05:15:31:26:05:94:c6:78:
f3:fd:8a:e2:af:3a:aa:e5:0e:e9:45:6d:f6:2f:4a:
a1:13:16:a3:3b:b6:db:ff:20:ff:07:b6:5f:5e:da:
ea:63:e1:bf:78:7b:b4:42:02:9a:ef:c8:85:53:03:
f5:95:48:92:f2:12:f8:63:a1:c2:59:58:73:de:29:
47:44:fa:01:19:79:81:9c:e7:e1:09:b3:4d:e6:1e:
ba:8f:03:b3:38:78:b2:1f:6c:7b:79:20:dd:03:b7:
4a:18:c3:d1:a3:4f:a4:34:09:8f:e6:51:79:a1:c3:
dc:ff:ff:ef:95:02:4d:11:95:f7:05:00:51:a6:a0:
32:46:35:2a:36:7e:0b:78:d7:d6:a1:99:44:ff:2d:
ff:7a:a7:bc:65:4c:f1:d1:6a:63:fc:14:3a:fc:3b:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:65:B5:DD:ED:28:B2:FB:D0:81:BB:CB:06:BF:5A:83:9D:74:80
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:38:6c:a2:1f:cb:c9:d5:4d:d3:d5:96:08:8f:f8:d0:72:
7d:e6:1a:6e:45:79:0f:f1:34:6a:74:1e:02:9b:31:73:a2:f6:
ce:15:a9:e2:43:79:60:19:2e:9e:20:5b:cf:a8:c6:4e:c6:70:
37:84:46:49:f1:42:1d:70:bb:2e:51:37:3c:02:98:24:10:55:
67:e7:25:c2:45:60:b1:a2:e5:5b:6e:f6:62:13:f0:39:86:1a:
21:29:e6:f5:6d:35:c6:fa:53:d9:72:b8:5b:e4:49:ce:c5:44:
e8:cb:03:d0:5f:91:31:73:ba:f0:dd:8d:07:71:dd:73:84:57:
65:44:2f:10:76:0b:9c:05:7d:7e:6a:e3:dc:6c:2d:e9:57:a2:
da:20:dc:1e:ba:7e:ec:4d:27:a9:41:b1:3a:5d:b7:2f:e4:0a:
d4:22:7b:a1:f1:ff:87:48:bd:a2:ed:5d:7d:ac:6c:75:10:07:
d0:62:93:19:b1:7b:67:28:2b:d2:13:e0:cc:56:45:56:c3:bc:
53:a4:63:e1:c2:73:7b:4d:bf:d8:3d:f0:e8:3c:57:b1:24:ee:
63:d1:9f:4f:9b:d4:da:35:11:65:b4:05:5b:df:e2:77:7c:e8:
3a:d1:02:c4:54:d0:4c:4a:50:db:1d:84:c6:79:75:0d:f6:a7:
eb:e2:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:12 2026 by rpki-client