Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
File: f76kKjzOSLi-F9qZN51XHnNpCzg.mft (raw, json)
Hash identifier: OkokmdahLHISxL/V4lS8WGS4RNIEfb/k95ZYImMjDXY=
Subject key identifier: D7:36:42:B6:F0:CD:24:09:66:F1:F8:71:DB:E1:AE:B4:4F:61:5A:5C
Authority key identifier: 7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
Certificate issuer: /CN=7fbea42a3cce48b8be17da99379d571e73690b38
Certificate serial: 01A18B65450B4877A83F4CE908AC451FF728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
Manifest number: 0C
Signing time: Fri 30 Oct 2026 06:00:32 +0000
Manifest this update: Fri 30 Oct 2026 06:00:32 +0000
Manifest next update: Sat 31 Oct 2026 06:00:32 +0000
Files and hashes: 1: TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa (hash: vdDuBpHduQahc3PKMIxcchCSqY/670u9m9pvbt17bp4=)
2: f76kKjzOSLi-F9qZN51XHnNpCzg.crl (hash: 6m9CKRe5pz0TpPX8QSGCQQYlB7QSLgiSjX7gMj2FnUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:45:0b:48:77:a8:3f:4c:e9:08:ac:45:1f:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fbea42a3cce48b8be17da99379d571e73690b38
Validity
Not Before: Oct 30 06:00:32 2026 GMT
Not After : Oct 31 06:00:32 2026 GMT
Subject: CN=d73642b6f0cd240966f1f871dbe1aeb44f615a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:30:87:d0:2b:ed:f6:7f:f2:2a:91:dd:61:
a7:74:23:8e:b4:eb:48:dd:6b:30:b4:ed:51:92:19:
3a:38:1b:8b:fd:07:6f:5e:28:ab:7c:e4:49:5c:3a:
ee:f3:29:56:f3:3e:98:4a:63:a0:d8:13:21:2c:0a:
ff:bb:26:2b:05:22:ef:f2:a3:6f:61:34:9d:76:6c:
67:7d:b9:3b:98:69:71:17:ce:11:4b:b6:43:c9:e9:
c8:0b:dc:2c:ba:c8:97:60:2c:de:3e:5e:1e:b3:a0:
a4:00:af:87:df:c6:ef:ca:2a:ab:04:b5:f0:aa:1b:
6e:6a:f5:82:54:fc:af:d8:bd:32:27:d3:d6:c5:f8:
d2:cf:12:03:fb:c0:fe:8e:ce:d7:1b:67:33:75:f4:
4c:d4:86:a7:c2:4d:b8:c8:77:2b:45:7c:30:cd:fc:
57:e4:ce:51:cc:f6:af:cc:bf:32:df:ab:63:c9:48:
f1:31:a1:4b:b7:5b:e0:41:96:ad:22:b0:9a:cd:6d:
9e:70:87:2f:03:26:cd:b7:e9:48:fe:ca:e9:8d:d9:
82:a8:80:57:03:4d:66:8e:d7:a8:54:e3:52:f9:40:
54:af:f3:c4:13:f1:4b:33:f9:87:81:ff:61:f4:d8:
46:37:08:f8:f6:25:6d:77:4b:3c:00:b5:d7:f5:db:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:42:B6:F0:CD:24:09:66:F1:F8:71:DB:E1:AE:B4:4F:61:5A:5C
X509v3 Authority Key Identifier:
keyid:7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:6e:5a:63:2c:15:58:05:88:ea:5a:1d:10:b3:51:09:35:
7a:87:8e:f8:df:9a:d4:43:68:25:3f:88:8d:3c:28:20:50:7d:
a8:f5:c5:db:4e:d4:83:21:5f:aa:f3:2f:9c:70:7f:b3:19:37:
7a:f4:77:e5:27:da:8a:fc:b6:79:1a:62:2d:27:44:b7:87:3c:
58:b7:97:67:0c:53:f1:4b:25:67:04:af:7e:87:ec:7d:7f:51:
f8:ab:98:c4:5c:f4:85:fa:22:15:ac:d1:4a:a1:35:f9:b5:a8:
01:a1:c7:f5:77:9f:97:c3:6e:4d:de:ea:4d:95:3f:3a:d3:35:
ca:3e:1c:28:f9:a5:e1:e1:e9:8a:65:ca:cf:75:2d:f4:14:87:
0c:ca:9b:11:38:35:77:00:9e:ca:40:3e:6e:71:67:12:35:b2:
74:e6:fd:8e:92:78:e6:21:da:de:32:89:86:a5:3c:d6:7b:91:
4e:b0:64:6b:7e:2f:78:17:2c:81:da:a7:f4:76:1e:86:24:b8:
d8:93:02:70:b0:cb:d3:df:73:3e:eb:8c:ae:af:7d:b6:b5:47:
08:5a:4a:2d:13:0d:92:87:93:e5:2d:36:c7:df:ad:36:65:c3:
5f:fd:57:41:8e:74:6a:9a:87:90:c8:27:6d:68:fc:c2:93:ae:
61:b7:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:00:25 2026 by rpki-client