Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: VouyGL3DkPZhv3jzeilQ5q0m0Q8Dtrg+PM12+YJFV5c=
Subject key identifier: 2C:DC:35:3A:E6:C7:89:4A:91:65:15:A3:1C:8B:C4:97:B5:27:75:86
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01A17F2A8B870527AEDD699469DB8B34470A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0A72
Signing time: Tue 27 Oct 2026 21:00:56 +0000
Manifest this update: Tue 27 Oct 2026 21:00:56 +0000
Manifest next update: Wed 28 Oct 2026 21:00:56 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: B48L1fiKlgyPuDn1hqo5+Q/J6yw6kmLUPivXwWNFKZM=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:8b:87:05:27:ae:dd:69:94:69:db:8b:34:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Oct 27 21:00:56 2026 GMT
Not After : Oct 28 21:00:56 2026 GMT
Subject: CN=2cdc353ae6c7894a916515a31c8bc497b5277586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:61:b2:a5:1b:67:21:eb:24:bd:f3:56:31:
77:a6:3c:2b:9a:7c:95:6a:c1:7e:4d:8c:ea:3c:65:
b5:a1:e8:a4:41:b4:44:fe:03:14:84:96:2b:bc:d5:
72:6a:cb:7b:71:c7:43:ff:26:c1:64:97:2f:6c:90:
63:d1:7c:41:9f:6b:f1:8f:79:17:92:54:2f:db:e9:
9d:31:27:8e:8c:4e:1f:51:46:38:66:e6:aa:f9:c7:
14:d5:bd:94:be:5c:44:87:27:f0:f9:26:79:d6:9c:
4b:51:53:d7:d8:f2:b3:9b:8f:39:88:18:c8:1b:9f:
4e:e9:d9:2b:7e:23:fd:9c:48:74:0e:d6:bb:90:d4:
08:2c:1c:eb:63:37:09:a9:e9:78:1e:bc:36:45:e7:
17:59:3c:eb:13:84:4e:eb:bb:b1:24:c5:57:a4:6f:
f5:04:9f:d2:53:0d:7f:ae:65:cf:45:8f:b4:54:82:
70:ef:45:20:17:f4:b8:b9:a0:b9:c2:70:09:64:a6:
d0:01:f7:c4:98:6d:7b:56:fd:df:db:99:7a:e7:21:
0c:d9:89:d4:6b:e9:75:fc:5f:b7:cf:0c:f1:61:6c:
92:50:c3:a7:fd:41:e1:c2:ad:f6:c4:04:ec:40:1c:
b8:e1:9d:6a:dc:f8:60:a2:8b:de:8c:15:0f:3c:b8:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:35:3A:E6:C7:89:4A:91:65:15:A3:1C:8B:C4:97:B5:27:75:86
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:d2:e5:3e:a2:e2:88:36:89:00:0d:59:04:07:8b:48:05:
4a:20:e9:08:82:76:a4:91:6f:f0:1b:eb:27:d9:0d:aa:48:81:
a9:4c:3a:77:41:78:3e:b7:02:42:4e:a2:af:79:16:73:a0:7b:
95:93:b9:24:d0:e9:bb:f2:1a:70:0c:3d:2b:13:34:43:64:4d:
0a:6f:9c:35:26:32:19:ad:96:95:7e:38:76:7a:fb:c4:62:c5:
e3:b2:36:45:63:9c:19:48:f4:de:96:4b:16:07:d2:d6:23:ea:
7e:bc:8c:dc:69:5e:c1:97:ef:3b:ee:7d:e2:b3:be:32:ff:dd:
0c:b3:a4:b1:8f:13:98:d9:79:ae:75:8d:39:f2:85:a0:62:69:
fe:5c:0d:68:4f:55:c2:86:30:b5:87:b5:3f:c0:1b:79:04:01:
0f:c7:09:8a:34:a8:49:91:56:01:3f:50:d0:73:78:de:97:a3:
16:d6:02:04:c9:bd:7f:05:c9:48:79:a4:51:8f:2b:37:51:52:
7c:b3:74:d9:24:71:b5:c5:39:50:17:38:e4:08:7b:4e:f4:46:
1a:01:5e:f4:43:68:e9:7b:4c:00:c9:6a:7e:32:ec:3d:2f:b4:
be:3e:35:ae:c5:ba:e3:22:91:27:60:8e:3a:96:ae:91:c5:04:
8c:fe:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:29:49 2026 by rpki-client