Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: uzGc+SD7+1PqVMArRiWAoZH+DiFvP3MM8rDvYpkum1M=
Subject key identifier: F4:3E:A0:7F:B4:FE:4F:16:74:B6:32:7A:1A:FC:47:87:98:AE:86:CF
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01A17C60A6E3D7B650D4716988FADA7D233C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 0A05
Signing time: Tue 27 Oct 2026 08:01:11 +0000
Manifest this update: Tue 27 Oct 2026 08:01:11 +0000
Manifest next update: Wed 28 Oct 2026 08:01:11 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: lFdG+230c4qc9mK+T5qregAooRVmAjohx3d6LhHqm6g=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:a6:e3:d7:b6:50:d4:71:69:88:fa:da:7d:23:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Oct 27 08:01:11 2026 GMT
Not After : Oct 28 08:01:11 2026 GMT
Subject: CN=f43ea07fb4fe4f1674b6327a1afc478798ae86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:e6:e8:5a:23:7c:73:fd:3b:9f:83:d6:7d:
c0:dd:e4:c9:14:69:ed:7a:8c:26:03:4b:0d:a8:90:
31:97:fb:d8:7a:28:a6:61:53:bf:a8:df:6c:b1:48:
ac:30:e7:52:54:66:af:52:30:75:c0:9e:49:d1:c0:
0b:c1:70:0a:aa:de:f9:01:7c:3a:44:88:32:8f:c1:
2e:63:09:c8:7f:e0:e9:64:99:76:c9:96:31:bb:e4:
52:c1:8f:1d:8f:8b:6a:12:2f:22:73:de:fc:bc:49:
58:d4:5c:34:7d:8b:5f:81:b9:9f:71:7a:f6:c9:f6:
d7:21:84:78:2a:31:e5:47:94:d6:11:08:0c:0d:62:
20:4a:ac:5c:e7:9f:b3:24:10:f6:52:cc:8e:67:e6:
74:d7:b6:48:98:79:88:dc:cd:69:1a:7d:8c:28:a7:
ac:e2:61:5a:da:0a:fc:25:db:85:fd:75:85:77:9d:
09:89:01:64:b1:52:06:32:c5:76:0c:87:86:c5:2b:
91:4c:64:f5:93:98:fe:56:65:76:c8:a4:d2:26:4c:
0b:01:f3:a5:2d:76:24:dc:41:37:1b:be:0f:d0:26:
bb:07:95:cb:9c:1d:d9:3c:66:cc:13:fd:4d:4f:ce:
0c:a0:f7:7a:ba:a4:d0:9e:a9:48:a2:86:9b:18:02:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:A0:7F:B4:FE:4F:16:74:B6:32:7A:1A:FC:47:87:98:AE:86:CF
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:bb:eb:f5:65:da:dd:bd:5e:b0:50:98:a9:e9:bb:98:01:
7a:fb:39:c1:88:31:63:51:f5:8c:3a:4a:b9:af:4c:3a:e6:50:
3f:b1:24:39:8d:bd:bf:af:82:4d:98:25:07:89:93:df:08:d8:
31:96:61:53:c0:b7:5f:93:7c:50:e8:7f:63:8d:71:ad:38:5a:
0d:87:8a:b4:12:2a:62:48:e0:ea:ea:14:84:f2:c2:0e:28:a2:
d7:39:96:45:40:2e:ab:09:da:7f:7a:e2:f5:8d:a2:70:21:bf:
46:61:4b:21:ed:73:ac:8b:58:9f:c1:7c:d9:b3:5a:73:05:ca:
90:86:e9:b6:5a:b0:d3:6c:8e:e3:95:21:61:10:65:1b:60:43:
6f:fc:e8:75:32:c2:cd:2a:b1:da:8d:08:eb:4a:7f:f5:3f:c2:
80:5f:9d:49:40:45:d0:c6:42:67:79:90:80:cf:53:3a:c5:27:
5d:86:6c:b2:4c:94:c8:ee:69:7d:d7:0f:4d:3b:7f:a9:5c:d4:
71:db:ed:29:31:a0:98:6b:5c:d0:10:4b:ba:21:f1:5e:83:f2:
0e:50:3f:a6:26:97:52:ea:c7:ae:af:5b:1b:d9:b2:17:24:dd:
cb:ac:1c:bc:f5:70:29:e9:60:f4:d7:df:94:03:bc:79:ca:61:
f1:0c:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:23:42 2026 by rpki-client