Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: NI0T85i0xTcwAuS6m7Z+OwxhNsZZWJjYJxoFfKONd3I=
Subject key identifier: FB:E5:F6:D2:F3:C3:6F:E3:B2:AB:69:72:B5:DE:5E:62:E7:22:96:43
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01A179CC97909AFB48283C9285CFFFF5B976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0F35
Signing time: Mon 26 Oct 2026 20:00:13 +0000
Manifest this update: Mon 26 Oct 2026 20:00:13 +0000
Manifest next update: Tue 27 Oct 2026 20:00:13 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: IdxKbEsxtnVS1BuFZ2MDN45EGHwf1uWJqxHLvDXhU4c=)
4: oJvITbepfzrc6o9BZXmQMi0rT08.roa (hash: s+wcpOjEeCx+BjpAw8N3cqojgGpwUPNtyJb5e2nTcLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:97:90:9a:fb:48:28:3c:92:85:cf:ff:f5:b9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Oct 26 20:00:13 2026 GMT
Not After : Oct 27 20:00:13 2026 GMT
Subject: CN=fbe5f6d2f3c36fe3b2ab6972b5de5e62e7229643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:47:7b:3f:c1:22:33:43:55:6b:76:cd:72:
fd:bc:4e:7f:74:5a:e4:f9:f3:ca:63:55:cc:70:f4:
9a:71:0c:c7:c8:8a:8e:65:6a:81:7a:88:07:a0:02:
85:18:d1:e3:d9:75:18:7f:f6:63:24:a7:aa:80:4b:
d3:0a:48:20:a8:4f:9f:8c:f4:f3:95:6d:d7:80:6a:
de:9c:a4:1e:7e:4b:e1:cd:bb:09:cd:07:35:a1:d7:
84:fa:c6:7a:47:dd:05:39:f6:8d:2d:aa:2d:4d:c4:
7a:0e:32:71:04:55:aa:e7:2b:3c:df:e5:ae:2e:32:
41:06:12:b3:ac:5e:bd:d9:16:0d:30:69:e1:b1:d6:
21:53:89:ca:b2:93:86:ca:2a:c9:ed:47:fc:ea:e1:
f3:da:ea:63:cf:81:96:ba:72:83:61:61:c0:b1:d0:
0d:7b:c6:64:9d:46:1b:67:42:58:eb:e0:62:55:bc:
76:34:74:05:4f:9b:5d:84:a9:13:6e:2f:01:e3:da:
af:91:e0:01:fc:ce:88:8c:26:d6:06:7c:90:54:25:
10:da:63:13:b5:25:a9:46:0a:9b:c0:eb:6b:f1:c9:
64:78:c1:ff:e8:bb:90:69:3b:34:1f:12:9a:33:65:
76:b9:d1:a6:84:82:e7:2e:61:d3:53:77:e6:14:d3:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:F6:D2:F3:C3:6F:E3:B2:AB:69:72:B5:DE:5E:62:E7:22:96:43
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:b9:c8:22:f5:b4:95:53:6c:57:bc:22:6e:b9:ab:f2:ca:
74:3b:f3:d8:a7:14:7a:1f:dd:86:be:86:f0:9b:d7:c5:b3:8a:
29:8a:d1:12:03:91:e2:26:5b:46:bc:81:b6:02:9b:25:86:4f:
35:c8:e1:e2:93:10:8a:ce:4d:95:db:80:68:af:a9:13:e2:fe:
fe:67:59:dc:8a:81:b6:bc:53:3c:bd:46:9b:12:e2:fd:0f:41:
b3:0b:40:14:36:7f:43:db:37:13:b8:ce:33:b9:5d:71:96:a6:
53:98:85:b2:7b:10:db:1c:0d:a9:4b:81:69:a5:06:1f:4f:67:
f6:e0:d5:fc:5f:02:71:b9:4c:fd:02:31:a7:64:87:2d:75:e4:
03:d7:80:f6:9f:42:cc:5e:60:95:28:32:34:36:5d:60:a2:3d:
36:dc:58:5e:83:75:74:10:a3:a3:5a:04:27:33:2f:e5:4f:f7:
87:5c:e0:e6:c4:bd:64:da:78:5b:3e:a5:ce:70:d4:b8:7b:54:
c8:59:d4:46:31:5e:c2:12:23:b4:2f:04:40:17:66:b6:81:09:
d3:5d:90:e4:ea:0b:8a:b8:36:c6:da:94:fb:20:ce:c1:45:62:
7b:59:99:21:26:ee:16:50:99:df:eb:f1:b2:23:58:ed:4d:32:
10:0d:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:03 2026 by rpki-client