Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: q8Bq1I5CJPzFtLvGtidiSaIW7VL97WK8wNIjiVm4nII=
Subject key identifier: 12:F8:E4:DB:FC:E5:1E:8A:19:1E:A4:E4:90:25:9E:6A:75:F8:D9:E8
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 01A10DA78774C4F4DC2647876FFCABDF68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 087E
Signing time: Mon 05 Oct 2026 20:00:45 +0000
Manifest this update: Mon 05 Oct 2026 20:00:45 +0000
Manifest next update: Tue 06 Oct 2026 20:00:45 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: JBUJFUu+MrqQ0riRqftQraQINyZCrPo/r/Ioq+lqpq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a7:87:74:c4:f4:dc:26:47:87:6f:fc:ab:df:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Oct 5 20:00:45 2026 GMT
Not After : Oct 6 20:00:45 2026 GMT
Subject: CN=12f8e4dbfce51e8a191ea4e490259e6a75f8d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:34:a3:d0:00:e4:82:26:fb:f9:c9:17:42:
92:2c:9b:b2:76:f2:d0:c5:ae:0b:3b:b7:9e:4f:14:
16:0c:2a:af:89:d4:92:6c:7b:8f:46:a2:38:55:ab:
e1:19:b1:7c:68:c8:91:1c:55:fb:0b:f1:3f:9a:3f:
d5:a9:d1:34:86:f5:be:1a:e9:d1:e6:18:26:6d:68:
2b:1c:49:b6:19:c0:c7:bd:2a:34:06:f5:eb:16:f9:
6b:bb:34:d0:80:a2:f8:48:93:4c:b6:ce:f4:94:65:
86:71:11:b8:eb:2c:69:cd:fb:34:27:a5:38:35:d3:
67:bf:4d:6b:0a:04:ac:86:aa:4c:06:6e:c0:4b:f2:
0c:db:a9:28:92:dc:68:ad:26:1e:bb:83:b1:22:ed:
d3:88:9b:e7:ce:66:12:1d:8f:a9:9c:e9:18:a7:c6:
ae:94:be:0b:32:95:8e:1f:da:38:df:b3:df:be:9e:
54:dc:f8:b6:8d:76:42:e3:27:c6:20:b5:9f:c2:54:
45:fd:7d:f4:07:06:f5:59:5a:d8:41:5f:cc:86:33:
5e:d0:40:dd:81:a3:92:2e:a4:b8:19:79:36:10:d2:
7a:81:91:98:a4:dc:38:86:14:7b:a5:95:91:7a:a7:
11:eb:9a:58:4c:b9:4e:3d:11:8e:5a:f9:8d:16:a8:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:E4:DB:FC:E5:1E:8A:19:1E:A4:E4:90:25:9E:6A:75:F8:D9:E8
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:b1:78:04:02:5e:9e:10:26:1a:bc:9c:45:be:ed:37:e1:
3f:67:7b:13:31:a8:ca:c6:67:c8:89:c6:4a:56:d8:0d:ca:ec:
02:d6:77:b4:06:07:11:ca:e7:4c:56:d9:31:7f:15:26:fd:37:
ad:b9:ee:08:fb:1a:89:10:7b:8f:b3:dd:97:1a:cb:1c:dc:69:
ec:46:3e:6c:35:e3:c0:40:84:8e:bc:ff:54:72:41:ae:c5:a4:
74:7e:cc:a3:0f:80:10:c6:4f:58:bd:bf:1d:61:f6:e0:93:3e:
01:6c:74:49:59:e0:e2:ee:c0:5a:99:98:a1:d6:09:dd:f7:a8:
01:d6:cd:62:bf:0e:95:8a:ab:d3:86:57:59:b4:fd:7d:1d:85:
b3:0f:dd:f3:8c:80:bf:c7:80:70:06:e3:79:2d:8b:ad:64:c9:
52:74:f7:ae:f5:66:67:13:b0:cd:22:4f:c6:aa:64:a8:4b:4f:
91:03:0d:e5:36:a3:ff:80:06:5e:0c:9c:ed:66:f5:af:8b:72:
56:79:44:61:45:fc:0f:aa:24:5a:65:14:35:9b:d9:38:43:5b:
ae:e0:e4:69:6b:14:b2:41:45:a1:b2:67:da:8c:ef:24:b9:45:
e1:3d:c4:7c:c0:6e:70:06:ae:86:09:27:63:5c:1b:e6:58:c8:
0c:ef:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:41:38 2026 by rpki-client