Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: qDENvYRc2ri9ljV+NBkQgRpOzGQ0wRfHThdrmHPF76E=
Subject key identifier: 95:C4:C1:A9:D2:39:EA:CF:41:92:14:32:7D:39:30:35:7E:56:3F:1D
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 01A0A415E2912B1120DE2FFA42DD2E6E34D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 075C
Signing time: Tue 15 Sep 2026 08:01:32 +0000
Manifest this update: Tue 15 Sep 2026 08:01:32 +0000
Manifest next update: Wed 16 Sep 2026 08:01:32 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: jdmRI+HAv/LfxP7/Ic0Ub8uc1NKm34SyqnV1Yf/o4oQ=)
2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:15:e2:91:2b:11:20:de:2f:fa:42:dd:2e:6e:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Sep 15 08:01:32 2026 GMT
Not After : Sep 16 08:01:32 2026 GMT
Subject: CN=95c4c1a9d239eacf419214327d3930357e563f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:50:e7:79:ca:ca:68:40:2a:f4:78:79:f2:
e8:65:3b:f6:8b:64:8d:7e:d9:6a:5f:66:8f:cc:60:
49:5c:c0:96:45:8f:cf:86:c5:35:be:ba:9e:e1:24:
b3:bb:a3:0f:db:13:43:f4:f0:6b:40:b4:13:28:e1:
18:f9:51:4a:22:fc:a4:ff:38:b9:a1:d6:6a:58:a8:
bf:d6:00:ca:ec:f1:71:0e:ad:d0:35:3f:53:59:f8:
d8:07:89:94:e1:34:9c:4f:b8:aa:13:e5:de:95:b6:
24:a3:47:aa:8f:a9:c4:84:19:23:7d:fb:22:54:c9:
23:b2:a9:86:68:0c:36:67:6e:f4:6d:84:69:1a:3c:
30:d5:f4:8f:4c:6a:88:ae:1d:f8:c7:91:f4:5f:1f:
49:3c:58:66:dc:af:11:5c:e0:76:71:47:8d:7a:8e:
3d:f0:5c:cd:f3:f9:84:8f:e3:85:a6:89:11:02:2a:
63:ba:2c:7d:03:a7:cd:c5:1a:fb:22:3e:29:17:92:
5f:7c:d0:c6:bc:ae:0b:5d:9b:fc:b0:9f:70:52:b8:
df:86:24:6a:dc:5f:06:4c:36:4e:9e:a7:08:5a:82:
4b:4c:fa:b5:95:60:ca:7b:e4:8b:fb:29:d7:e6:17:
96:ce:6c:39:a9:5d:af:30:48:50:ae:e1:b9:57:3a:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:C1:A9:D2:39:EA:CF:41:92:14:32:7D:39:30:35:7E:56:3F:1D
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:64:eb:18:21:b2:3a:f1:f5:f2:7d:5d:a0:08:4c:65:3c:33:
7a:ad:ff:a7:8b:1e:0e:55:f0:ff:41:dd:e8:d4:13:50:d2:a0:
f2:62:52:9a:4d:43:b7:3f:e0:45:4b:ed:93:96:39:f3:36:71:
02:6d:53:da:23:26:4f:44:8d:25:98:3c:d0:4d:8d:e6:03:44:
05:98:71:c7:ea:4b:21:71:5f:34:0d:b2:76:36:3a:d1:78:f3:
37:67:80:e1:93:89:08:cd:6e:be:27:63:2d:4e:de:ab:90:ac:
89:da:41:e2:c4:65:22:3f:5a:c9:d2:c9:dc:cf:50:d6:2c:51:
54:1d:16:7c:ba:75:d1:38:7b:bc:2f:36:41:bd:d3:a1:12:fa:
86:83:77:49:ba:9d:a6:cb:d9:4f:67:ef:b6:2b:a0:10:16:4a:
55:2e:39:86:be:e1:58:33:d6:b0:8c:7e:a5:a0:f7:ad:d1:32:
20:10:5b:b6:d2:c8:9e:5f:a6:3b:9e:09:dc:ea:c3:13:ad:2b:
f3:11:70:17:49:56:30:61:a4:95:33:84:be:7e:c3:40:f7:e3:
16:ac:f1:dc:b5:a1:0e:7e:53:19:9c:43:fb:c2:d5:e0:6e:0a:
27:c3:94:9c:02:d8:e2:26:5d:60:d1:d9:85:c3:05:19:73:cd:
69:65:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:47:54 2026 by rpki-client