Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: z5esSBZsAfuDD7a+QuDu/EEdzWVqjX7GiaHGJaYI1bI=
Subject key identifier: 89:46:B1:B4:8D:58:61:A6:1E:97:CA:87:FB:9F:B0:C6:68:84:72:AC
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 01A175F092C6A90C480E8B0193CB88C6E8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 1897
Signing time: Mon 26 Oct 2026 02:01:02 +0000
Manifest this update: Mon 26 Oct 2026 02:01:02 +0000
Manifest next update: Tue 27 Oct 2026 02:01:02 +0000
Files and hashes: 1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: TLRJLLHxfGupLE5G+ZD7uXgPicpWA+lQS/ahBJGEjQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:92:c6:a9:0c:48:0e:8b:01:93:cb:88:c6:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Oct 26 02:01:02 2026 GMT
Not After : Oct 27 02:01:02 2026 GMT
Subject: CN=8946b1b48d5861a61e97ca87fb9fb0c6688472ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:e4:af:3e:a7:0f:34:d1:51:1a:c8:d0:1f:
61:f6:61:aa:0d:70:50:0c:a2:d3:81:b5:9d:97:3f:
67:69:e4:d5:ec:7e:08:c5:c0:ad:fe:82:13:4d:6d:
74:ce:6e:d6:1b:8f:c7:53:cf:32:c3:2b:4c:0c:87:
ea:45:16:b7:53:64:3e:89:d8:d6:cd:a2:92:1d:c1:
8b:32:e7:14:d0:0a:f1:f5:36:c6:1e:66:29:1f:11:
a2:a8:59:0d:a2:f8:1e:81:f1:e5:1b:9d:73:87:c6:
24:4e:07:cd:a5:9d:52:dc:53:22:8a:ab:19:59:eb:
53:c7:eb:b6:ab:11:1c:ea:56:21:80:af:3c:eb:d9:
27:d0:76:00:b3:dc:4f:54:71:2a:e7:df:b8:f6:f9:
a5:7f:42:03:02:e3:1c:91:fc:3c:de:37:55:1c:43:
ab:65:ca:a2:64:b0:03:a1:1d:d6:97:52:be:94:40:
5c:f5:92:55:44:8e:c6:29:eb:f6:94:1b:9d:02:93:
fc:b0:97:87:f7:21:28:40:9c:42:81:d4:76:14:63:
9c:c9:d2:e5:1e:90:fb:98:a4:46:f7:eb:65:3c:42:
be:2f:97:82:b7:38:4c:51:35:f6:51:fb:71:2a:6e:
28:77:29:c8:32:27:95:92:8a:3d:ae:77:d6:62:fe:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:46:B1:B4:8D:58:61:A6:1E:97:CA:87:FB:9F:B0:C6:68:84:72:AC
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0b:b1:3d:6d:0f:1d:4e:6c:0a:e2:7b:29:b2:67:d5:a1:3b:
47:86:b4:5c:3c:52:40:f5:85:19:ea:38:50:da:15:54:8b:01:
2a:b9:7d:f7:e6:db:00:6f:14:ac:9a:6c:9f:45:b0:41:dc:c9:
d3:df:b4:6b:ee:98:7d:f6:2a:7f:16:46:66:5e:cf:5c:4e:9f:
c4:4f:2e:5a:9a:c2:e1:15:e4:2e:a3:fe:ac:9d:9b:98:e4:eb:
b3:47:de:b9:52:79:fd:40:11:1c:7a:85:63:1f:e2:18:ad:d7:
aa:8e:4d:91:8b:8a:2c:f5:fc:b5:36:50:61:da:65:40:50:a5:
ab:49:59:8f:24:d1:12:10:4e:91:36:84:74:3b:dd:30:dc:5c:
02:f1:d3:f9:22:b9:32:3c:d4:7f:88:79:41:bf:ef:21:0e:a2:
f4:ab:e9:ed:7e:4f:52:8e:47:0d:6a:26:5e:df:e0:a5:ef:66:
72:b1:23:03:fd:f7:d2:5d:4e:39:ca:47:ff:91:67:8e:dd:f4:
3f:f6:9d:66:7a:7f:f5:f4:a1:04:87:48:e9:bd:0c:1a:fc:b9:
af:f5:02:e6:ed:49:ea:29:61:be:20:32:48:46:4f:4a:c6:7e:
69:50:c0:a3:99:bd:20:c3:a2:d3:5f:13:b1:7a:b4:b0:33:c2:
a5:60:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:56:38 2026 by rpki-client