Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: sD5SN21Xek0eZ0wcfgQ3RiGlu+uR1XBJ8irv1NwpqeE=
Subject key identifier: 99:35:50:D1:DD:7F:FF:49:99:23:96:06:D6:C3:12:F7:FD:86:CC:FD
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01A11C07CED693934522AC0ABA1A5B48BACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1A9E
Signing time: Thu 08 Oct 2026 15:00:35 +0000
Manifest this update: Thu 08 Oct 2026 15:00:35 +0000
Manifest next update: Fri 09 Oct 2026 15:00:35 +0000
Files and hashes: 1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: vZN9uYXmX9toXV0eOkcb60Ag0ITSzbWqVKuOa56qqTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:ce:d6:93:93:45:22:ac:0a:ba:1a:5b:48:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Oct 8 15:00:35 2026 GMT
Not After : Oct 9 15:00:35 2026 GMT
Subject: CN=993550d1dd7fff4999239606d6c312f7fd86ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:96:b0:07:b2:9f:80:af:b2:f5:ee:96:3b:
0e:31:e8:53:09:c8:7d:48:d6:ff:9a:4d:a2:3f:95:
31:c9:d9:e8:67:9d:22:c2:ce:d2:fd:a5:24:3b:cc:
5b:87:77:23:4f:82:14:ed:78:8e:a1:13:dd:85:0e:
05:ac:f4:99:dc:1e:a5:27:33:4d:b3:f0:8b:55:a5:
41:fe:73:b3:8d:68:4a:ca:60:1f:43:2b:aa:9a:a2:
d2:bf:fe:a8:7d:81:a0:ec:4e:cc:95:af:10:90:f9:
94:75:77:76:14:f4:b8:77:b6:59:c4:56:1b:d8:13:
f7:8f:a1:8d:3d:cd:15:3e:39:51:ef:55:f7:56:4b:
4b:23:29:6c:5f:9a:6e:6a:f5:5d:11:80:12:5f:86:
9a:04:8f:07:4f:45:a7:53:c8:db:97:c7:3d:26:4b:
73:3e:07:ae:b9:61:8a:a5:fd:e1:55:2b:04:40:09:
0a:e5:89:7d:30:39:06:28:05:10:ba:1d:64:f9:ca:
45:3f:23:d1:be:6c:a0:0a:ca:8c:d4:8c:f4:60:1e:
48:d2:53:27:02:77:cf:62:5e:ad:a5:36:73:89:f6:
da:57:80:8f:bb:6a:df:8e:87:de:06:42:4e:7f:de:
75:cd:ba:2e:fb:f5:c3:ca:f3:cd:40:55:3d:0b:ac:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:50:D1:DD:7F:FF:49:99:23:96:06:D6:C3:12:F7:FD:86:CC:FD
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:43:2f:4c:8d:12:f2:8a:23:cb:23:9f:ba:73:31:d5:0d:83:
5c:46:f5:53:28:d8:52:10:8d:69:45:92:aa:83:45:fb:a5:b9:
5b:67:33:83:f4:df:12:38:28:a5:ea:64:ec:4a:8b:63:31:d4:
ae:a7:5d:a4:ef:a7:08:f6:74:ce:e9:d8:42:b6:17:2f:a1:09:
a6:20:15:b7:43:56:08:5c:a4:fa:1a:c7:cd:ba:5f:c7:cf:2a:
2a:42:21:9f:1c:b5:71:c0:a7:4f:c8:3e:aa:bb:5f:b1:9c:a0:
34:95:4d:f4:8f:f2:56:d8:af:85:72:45:8b:91:71:ae:39:31:
61:f6:27:93:0d:5a:4f:e1:0a:4e:ed:9b:3d:7f:c1:99:58:ba:
4e:c0:20:85:b1:b4:55:7f:4f:84:84:28:27:17:f7:8a:b2:50:
ce:a8:cc:82:2b:30:2e:57:9c:50:ba:c7:b8:f7:df:73:37:cf:
b2:c5:5e:0a:ba:b0:1e:13:ec:c6:27:26:c3:55:fe:dd:c6:5f:
83:9d:02:d5:d2:4b:4f:b7:d9:66:96:fb:4a:b5:cc:26:cb:75:
8e:b0:75:dc:44:7d:1d:1f:74:bc:c5:ab:5b:58:fa:0b:cf:85:
24:b0:18:8d:df:b3:98:93:ff:85:17:40:ac:30:5f:2f:f3:fe:
86:43:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:24:15 2026 by rpki-client