Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: dp44cpt4BRUnl6ha/9Vm3DCKD0Z+ZntEqnckGDKz/PI=
Subject key identifier: 8A:01:86:DA:48:F3:1C:40:1B:69:BD:C8:21:E8:95:07:77:15:5C:B1
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01A1182AB6D777097E3EBC37B9F8A0B70F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1A9C
Signing time: Wed 07 Oct 2026 21:00:14 +0000
Manifest this update: Wed 07 Oct 2026 21:00:14 +0000
Manifest next update: Thu 08 Oct 2026 21:00:14 +0000
Files and hashes: 1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: Nvhqyu9LuDIbyNtH/KKcx/LFsdFxlYqVe5665/i7AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2a:b6:d7:77:09:7e:3e:bc:37:b9:f8:a0:b7:0f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Oct 7 21:00:14 2026 GMT
Not After : Oct 8 21:00:14 2026 GMT
Subject: CN=8a0186da48f31c401b69bdc821e8950777155cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:f9:76:92:1b:8e:70:1d:60:72:e2:fb:37:
e8:79:87:05:81:64:cd:1f:b6:c6:50:57:27:33:90:
ee:89:4e:36:91:52:95:58:03:78:e9:36:97:50:65:
01:d1:d3:1b:8e:b7:ea:36:e6:08:35:d5:36:43:81:
f8:4d:2a:04:6e:09:ec:ca:e7:3f:e0:24:8c:99:e1:
65:a0:63:48:33:94:bb:15:5d:ee:77:b9:0e:05:d8:
79:9f:c1:e4:b5:40:ab:c0:1d:cc:50:1d:76:c9:04:
45:92:af:62:a8:39:69:f7:4c:39:9c:ba:12:b4:11:
1e:79:46:0c:55:68:8e:63:b8:08:92:9c:7f:62:63:
0c:2d:69:f9:a4:88:1a:86:fa:4a:cc:ae:47:8a:c4:
1a:e9:2e:0e:17:92:6f:1a:82:fa:8b:1f:2e:35:46:
2b:82:5c:cb:61:c8:df:21:6a:fd:ed:cd:f8:29:54:
95:bb:31:1f:49:b3:73:0c:a1:bd:d4:2d:96:d6:f4:
5b:4b:58:3c:38:37:db:54:02:20:bb:34:fe:fd:2d:
55:03:c1:2c:81:13:da:47:54:34:68:5f:76:3c:f4:
17:03:df:d5:95:70:d0:2e:f4:86:dd:5d:20:76:8d:
fc:21:a5:2d:b1:9d:34:84:15:82:64:5c:bb:7e:3b:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:86:DA:48:F3:1C:40:1B:69:BD:C8:21:E8:95:07:77:15:5C:B1
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:30:62:3c:7d:93:72:f8:f6:29:54:02:d4:cb:18:03:aa:e1:
e6:97:30:42:68:17:05:a5:4c:cf:6e:1f:c8:89:f0:2c:c4:b9:
6d:1d:a1:d4:b1:a8:5b:16:08:ad:6d:35:fc:2a:c6:cf:e5:ca:
36:b5:76:8d:86:0f:25:8a:f9:23:c6:a9:9f:ef:9e:7d:65:59:
b3:fb:c2:25:14:ea:a4:e5:8e:ae:e6:8d:53:87:cb:4f:b7:54:
24:d0:89:8b:39:b4:19:68:7a:c7:d3:28:9c:69:03:d7:ba:60:
ef:32:e4:23:7e:c9:f1:a4:79:a4:7b:5c:c0:25:29:1c:c6:46:
c4:f9:e9:bb:36:24:87:0c:e2:d8:ad:af:cd:10:8a:f7:8b:07:
1f:14:36:aa:b6:00:ba:c6:b2:31:d9:3f:b1:50:d6:60:65:4b:
24:5d:ca:fc:ed:4a:4b:30:72:ea:e8:1e:2a:92:d9:c4:a2:f2:
df:fc:66:ac:89:48:cf:da:75:13:6d:8f:54:6c:be:22:9c:51:
e3:79:6e:60:ce:d4:e8:3d:fb:ca:e7:24:66:5e:c5:e1:42:d9:
4d:34:ad:10:21:24:be:77:f3:ab:49:da:a5:0a:c1:aa:e0:56:
29:91:70:be:3d:96:f3:0a:60:bc:4e:2d:18:49:e2:47:b5:96:
87:4b:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:25:59 2026 by rpki-client