Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 32TQhwQHnEHCAF7B8I0/tRCcjdsTsBKuM6pYs16fC3I=
Subject key identifier: D4:AB:27:67:C9:DC:6A:96:13:66:37:75:69:BB:FB:C2:91:AE:3C:9C
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 01A14E3DDB248A414457F4785C2E39B43B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 1573
Signing time: Sun 18 Oct 2026 09:00:38 +0000
Manifest this update: Sun 18 Oct 2026 09:00:38 +0000
Manifest next update: Mon 19 Oct 2026 09:00:38 +0000
Files and hashes: 1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: 2fLnc/TAtrs1RvmTnEo/eNMwRTEhV8CGQLxvgdBzpq8=)
2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3d:db:24:8a:41:44:57:f4:78:5c:2e:39:b4:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Oct 18 09:00:38 2026 GMT
Not After : Oct 19 09:00:38 2026 GMT
Subject: CN=d4ab2767c9dc6a961366377569bbfbc291ae3c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:1e:51:03:4e:7a:8f:45:8d:bb:fd:0a:88:
e8:3e:45:fa:63:e2:3d:5d:4f:60:ad:84:57:12:85:
41:a7:b3:b9:58:a1:71:84:1f:e2:0c:c9:34:a5:4c:
14:1f:cf:ce:53:a7:6d:56:15:02:a4:d5:f7:d6:f3:
30:6d:f0:73:fc:70:0d:2d:f8:8f:dc:54:5b:64:26:
56:38:b6:89:30:18:6b:b1:7c:36:dc:37:ee:37:2d:
0f:c4:17:c4:64:5a:da:02:1c:77:8f:52:17:51:b8:
e2:4b:b1:22:12:5f:83:35:c4:6f:3d:1b:0d:40:b6:
41:4e:be:f7:e6:bf:13:3e:96:b0:f8:24:15:99:06:
d0:63:d7:50:e5:d2:0d:ba:4c:39:db:6e:14:35:25:
00:89:77:4e:8d:03:48:f2:ad:0c:27:80:6d:df:7a:
1c:07:18:be:9f:88:0b:aa:67:3d:2f:25:e9:e7:e4:
30:4e:89:23:bb:1e:4f:4e:f6:58:61:7d:4e:40:10:
ee:04:66:02:0d:4b:6b:f7:48:d9:e1:a8:ca:e0:55:
fe:8a:e3:e2:5f:29:26:f1:a5:9c:62:d5:99:ff:c7:
9f:68:65:e8:51:9d:19:90:d4:8c:76:8b:ef:97:79:
49:b5:bd:fd:84:80:b2:6f:92:7c:39:c6:ce:e9:f8:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:27:67:C9:DC:6A:96:13:66:37:75:69:BB:FB:C2:91:AE:3C:9C
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:a7:8d:be:9f:27:ad:48:da:26:da:70:67:f8:75:26:79:
fd:1d:9e:c5:11:66:d9:a3:a2:ec:f2:36:9c:9c:52:c9:08:47:
a9:f4:33:5d:bb:b7:0b:8d:c3:11:75:37:01:3b:49:bb:35:7d:
79:f0:cb:08:ac:d3:cf:b0:4d:c8:7a:b7:18:5a:be:7d:22:ac:
c1:99:50:b8:3d:75:06:e4:74:a0:d8:9b:32:9a:a0:8a:40:86:
a5:fb:24:ad:54:21:67:a9:84:b6:1d:5a:94:59:57:61:26:8f:
7f:83:74:51:f6:b0:53:b2:8c:57:4e:55:b0:ac:8e:85:d6:1a:
53:90:89:96:c6:be:b2:9c:f6:3a:4b:95:d2:16:ac:2e:6a:8b:
54:4f:12:ca:c2:9d:4f:0f:ef:3d:94:08:ea:46:9f:10:00:60:
bd:c2:c9:48:d0:6d:a8:e4:c7:b7:44:cc:f7:35:a3:d7:b1:44:
14:50:4e:a7:d5:47:dc:72:a4:e5:2f:2f:da:3a:87:b3:d5:5d:
b9:3c:9f:ae:f6:7a:9f:f7:7e:d4:ea:b3:24:e4:08:63:d3:59:
ef:3e:d7:27:e8:71:f6:2b:39:cb:4a:44:32:58:a5:ad:ab:f3:
67:f3:c4:b3:b6:d5:3c:f9:10:81:fe:c9:0f:a2:6c:5f:4f:3f:
21:c1:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:04:51 2026 by rpki-client