Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
File: FXPG9nseOPvBEuPu_dWM6PGBmhg.mft (raw, json)
Hash identifier: UQNvjKnqB3swHdJFhlhmbRMHC6Fx/IfldcxU0sLSqzQ=
Subject key identifier: 3B:BE:B6:48:B4:E8:6B:EA:19:8B:4E:6E:4C:93:A9:57:56:5E:CE:95
Authority key identifier: 15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
Certificate issuer: /CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Certificate serial: 01A175B99F0A825F251FD89B213EE10163F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
Manifest number: 83
Signing time: Mon 26 Oct 2026 01:01:01 +0000
Manifest this update: Mon 26 Oct 2026 01:01:01 +0000
Manifest next update: Tue 27 Oct 2026 01:01:01 +0000
Files and hashes: 1: 2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa (hash: cwU5pAf2dP5NYzTVspwr70DBPw/O8TM1hJgcxejxVzw=)
2: FXPG9nseOPvBEuPu_dWM6PGBmhg.crl (hash: EaGP35BBCN/mRMfZrUJtyO+2zkf4AedkOfa3cMxDvnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:9f:0a:82:5f:25:1f:d8:9b:21:3e:e1:01:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Validity
Not Before: Oct 26 01:01:01 2026 GMT
Not After : Oct 27 01:01:01 2026 GMT
Subject: CN=3bbeb648b4e86bea198b4e6e4c93a957565ece95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:cc:c7:c6:20:3c:f0:37:2f:bb:9d:19:82:
0e:a8:1e:aa:5f:ce:90:94:2e:bd:6a:a8:fd:99:76:
c9:4e:0b:5f:96:6a:b5:33:1d:36:14:c3:d0:10:c6:
f4:d3:66:5c:e0:29:fe:56:e1:c2:d4:e0:7a:38:75:
ec:cd:64:0b:08:98:b4:57:42:9a:54:d5:23:d8:0a:
d6:7c:bd:ca:6f:48:32:b8:7c:dc:21:47:cd:4e:5d:
5b:78:de:11:d4:37:c6:37:34:68:65:6a:64:7f:62:
eb:73:7e:65:a8:df:da:11:37:4b:99:01:62:3a:3c:
23:92:fb:73:79:77:35:a2:1c:20:97:08:bf:08:97:
4b:0d:a5:9e:5f:9c:22:2c:cb:88:52:fa:3f:39:c7:
d6:fd:0e:f7:f0:29:1e:e7:0f:fe:7c:71:1c:ca:65:
e8:3c:04:9b:33:ff:68:4c:dc:54:32:24:0e:2d:1f:
d5:23:73:42:10:08:4c:77:90:4b:7e:df:99:19:99:
41:01:aa:dd:0d:67:58:64:3d:5a:d5:a8:0b:5f:8e:
27:f1:c0:ae:75:16:8f:db:d3:41:0b:54:40:47:51:
2e:74:f3:25:1f:c2:39:30:ec:d7:95:7c:f5:b9:88:
47:bd:72:d2:e3:cb:e5:44:75:3b:10:e1:d8:d5:cb:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:B6:48:B4:E8:6B:EA:19:8B:4E:6E:4C:93:A9:57:56:5E:CE:95
X509v3 Authority Key Identifier:
keyid:15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:45:43:d7:60:ba:e1:99:e1:1c:0e:49:05:7d:d0:83:7e:ad:
8e:db:3d:7e:48:0a:db:48:0d:04:a0:ad:71:98:b6:22:36:39:
56:d6:4d:f7:ba:0b:71:e1:89:27:2b:b7:ef:d3:d4:7c:f6:19:
b8:5c:39:de:5f:90:11:d6:c6:34:4f:35:69:56:69:69:f2:4c:
2c:36:83:d9:33:54:70:c9:6f:de:e7:07:1c:da:cb:75:a2:33:
28:aa:39:e8:40:6f:5a:93:4f:0f:55:42:41:3e:e8:88:25:31:
e3:c5:39:06:d1:7c:11:58:b1:78:e3:95:e7:a1:b6:73:01:dc:
21:9a:e9:31:94:0e:7f:1b:81:46:92:3c:df:d1:b5:60:3b:8e:
45:f6:7b:c8:f7:f9:0d:3c:ec:a0:4c:87:61:21:9e:48:e3:0c:
07:1e:09:74:63:b6:29:71:75:16:8d:5a:4d:5d:1f:fa:ed:47:
2e:4a:4a:9c:b8:3b:f5:9b:14:07:3f:df:80:1b:a7:92:f6:64:
18:83:77:5e:8b:76:2b:91:aa:ea:be:08:47:c5:9a:8c:6e:08:
ac:19:2d:0e:45:77:02:6b:72:63:cc:10:11:7c:b3:b5:dc:6f:
45:1c:4f:06:cd:06:4c:be:71:e3:a2:a3:b1:b0:47:29:13:97:
95:2a:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:47 2026 by rpki-client