Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: vFNpc9HcCvRhMDEogRoaqb8IWZztrtCRAMXj8rT3NLk=
Subject key identifier: A8:3C:AA:EB:6B:70:C0:70:15:1D:89:0F:7C:45:C5:E8:F7:7B:FF:71
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01A08D570487B51AB7EF0AC9373034AE6541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 22:01:25 +0000
Manifest this update: Thu 10 Sep 2026 22:01:25 +0000
Manifest next update: Fri 11 Sep 2026 22:01:25 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: uQ+TVH4T7jAN88IcucOPA7BRukPK+c3BP5IhI0/ka1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:04:87:b5:1a:b7:ef:0a:c9:37:30:34:ae:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Sep 10 22:01:25 2026 GMT
Not After : Sep 11 22:01:25 2026 GMT
Subject: CN=a83caaeb6b70c070151d890f7c45c5e8f77bff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:73:16:d3:4c:0c:f2:9c:9e:7c:58:1f:c5:
96:47:e5:ae:12:30:a5:02:4c:aa:ab:2e:d3:49:8e:
ab:40:32:b1:10:22:bd:34:77:2b:46:de:7c:10:6a:
be:fd:a2:1f:42:89:23:70:a5:80:af:96:16:0e:87:
67:72:ce:db:28:74:9b:20:8c:b9:8d:bf:83:06:7b:
5c:3d:65:fe:25:94:66:02:5a:2b:30:c2:ca:79:ea:
ba:60:89:a8:5d:91:ae:b7:c3:8a:d6:f9:c4:f2:be:
99:95:5c:f7:0c:51:97:f4:4e:ba:71:61:1c:bd:5f:
30:35:d7:05:7d:e3:d3:89:0d:b4:30:7d:89:a7:70:
40:95:0d:89:ae:64:0e:2d:9d:57:3a:0c:69:c7:9c:
f8:9f:4f:a3:c9:04:6b:66:72:28:0d:f2:43:04:c9:
24:ab:b9:f6:b2:ec:fe:fc:2c:6b:b2:d8:c8:81:e9:
6a:54:84:77:16:b3:80:65:e2:8d:2f:7e:17:2a:45:
87:dd:e5:bb:ab:29:c8:1f:e7:51:54:97:1d:99:28:
9b:8b:48:c2:34:2d:03:88:b6:63:e4:95:59:ec:ee:
0f:2f:8c:2d:18:af:b4:33:32:60:f5:a4:74:57:f2:
94:de:b6:b3:17:3a:b5:7c:36:ba:74:e8:0e:e4:b5:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:AA:EB:6B:70:C0:70:15:1D:89:0F:7C:45:C5:E8:F7:7B:FF:71
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c5:ae:30:1d:27:23:ad:06:3b:c0:30:72:36:b0:91:b2:df:
59:0b:4a:86:4a:46:33:34:46:b5:77:13:37:2f:9e:0e:8e:6c:
0b:3b:ac:3a:ae:a1:9a:5c:8c:f3:ff:8e:40:98:e7:83:e9:83:
87:68:a9:51:10:0c:ed:ab:13:81:ca:a7:ff:dc:4a:65:bd:d7:
ca:7d:98:30:cc:19:8f:c4:8b:68:e7:3c:b9:aa:06:56:8d:84:
a1:ad:be:be:71:7d:cd:d4:b6:80:49:b2:cc:55:6c:a1:3f:8e:
c0:e5:a7:04:db:20:8b:d6:a4:fa:8d:57:ba:c7:9e:c5:8c:7e:
52:66:54:f0:43:ea:42:bb:a3:ab:73:75:c5:47:8b:be:c3:d1:
07:f8:1c:c4:52:62:f5:2e:12:bd:f8:94:2c:54:57:60:24:45:
6d:44:4e:c6:e4:ee:a4:e3:0f:8a:32:38:80:49:61:3d:92:ed:
32:1c:5f:a6:73:fa:bc:54:3b:42:10:67:13:a5:21:e4:84:96:
93:cf:8f:6b:7e:7b:0d:f3:a4:c7:26:cc:7a:3e:e4:47:71:80:
1b:07:b0:9d:e4:d8:69:cc:8c:f2:43:9f:44:87:cd:9a:90:28:
bc:c9:24:da:1f:c4:5b:b3:ef:5e:0a:fb:84:82:0e:5d:dd:19:
43:fe:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:59 2026 by rpki-client