Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: g5RlLJ5lrQoMktOvUnB9Vl6Pt7WxERztsZT3vioSTLc=
Subject key identifier: C4:45:C9:B9:0E:01:8F:C3:B2:03:D5:16:68:06:22:6A:FE:D8:5C:FE
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01A18487B47774630F7E0E33DFB3DBE2461F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 22:00:48 +0000
Manifest this update: Wed 28 Oct 2026 22:00:48 +0000
Manifest next update: Thu 29 Oct 2026 22:00:48 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: OdK/GpAFCC63nrYm+rhfTD9tnMnOhd3hWQKlhvHsZvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:87:b4:77:74:63:0f:7e:0e:33:df:b3:db:e2:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Oct 28 22:00:48 2026 GMT
Not After : Oct 29 22:00:48 2026 GMT
Subject: CN=c445c9b90e018fc3b203d5166806226afed85cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:b4:c2:4a:ea:68:f8:c1:8e:b3:c4:d2:0d:
b2:4d:ab:af:ac:17:51:e5:5d:54:36:23:68:03:c2:
58:91:86:37:9d:ab:cd:c8:85:99:a2:56:fc:87:cd:
41:be:0c:24:6a:93:d7:cf:e9:b4:fb:35:7b:17:cd:
9a:c6:6d:4a:ee:28:5f:d5:2d:a3:1f:3e:bd:d6:fa:
ef:5f:6c:cd:ad:17:dd:ca:b3:22:e0:ff:db:10:0a:
9f:cf:21:0a:66:ea:19:df:b1:36:da:79:bb:d2:bd:
11:78:b9:16:f9:79:79:bb:19:34:a8:e2:bf:56:e0:
d2:d4:79:1a:9f:0a:e6:6c:8b:b2:42:05:ea:a0:5f:
52:a9:58:65:51:1e:a8:7b:de:73:29:40:be:6b:3b:
de:6f:e2:1e:96:cc:e3:5e:50:08:72:c6:13:68:89:
91:cf:f7:41:0d:cd:82:f5:e1:7e:6e:63:50:aa:35:
66:d3:ad:8c:d0:28:0b:55:2c:d8:3b:a7:39:6c:de:
dc:e8:0e:73:87:40:63:8e:92:7d:0d:1a:fc:13:11:
2a:a8:fe:2c:7c:9f:7e:75:f4:52:b6:03:3b:3d:da:
85:b6:b7:b8:23:cb:55:0a:c0:c6:b3:e3:be:4c:95:
d8:55:3d:4f:b8:b4:87:ab:9c:fa:6d:8c:e2:6a:f6:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:C9:B9:0E:01:8F:C3:B2:03:D5:16:68:06:22:6A:FE:D8:5C:FE
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c6:33:09:a2:3e:1e:72:0c:3e:f2:c5:2b:c0:ef:03:fe:5b:
7d:a0:bf:6d:c6:d9:1d:a4:31:4b:8e:ba:dd:59:9e:21:5f:45:
0c:4a:ed:8e:38:ec:62:29:41:24:03:81:81:9d:08:81:8b:6d:
db:b0:07:ca:6e:45:c5:53:24:71:ee:62:22:94:38:e8:84:d0:
c4:a3:92:c1:c3:18:3f:e6:1e:5c:e3:1d:6b:b6:c4:61:5e:2b:
54:26:ae:f1:08:f3:51:21:36:e8:b8:01:b7:f3:1b:14:b3:c7:
e1:93:76:22:a9:3a:c8:6f:10:63:c2:f5:c7:c8:5c:62:c3:a0:
f8:3a:ef:cd:c7:38:f8:ec:5c:0d:f4:0c:ab:71:05:e7:8a:2c:
09:3e:2c:2a:2e:3f:42:c9:f2:42:ce:86:44:a3:ef:a9:1d:a9:
4d:5a:47:2b:6f:39:d4:81:42:e5:b7:90:2e:13:c0:cb:04:88:
7c:c5:75:f5:33:04:be:12:93:33:d7:f1:46:15:90:9f:27:33:
7f:27:d6:bb:8d:94:93:3d:8b:1c:f3:1f:6e:24:f1:03:00:22:
e7:b9:3a:60:a2:ab:9e:e2:b7:8f:6a:dc:18:a2:ca:9f:c2:24:
5d:e4:05:c0:41:4f:13:e3:6b:b0:ce:26:07:97:47:b2:82:b3:
ce:ef:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:17 2026 by rpki-client