Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: VwchcYN6lnKv/XvL6yAi8UVh3imKGOAzD+/3R9vDHKQ=
Subject key identifier: 5B:41:1F:C9:9F:C1:24:D9:8C:69:5D:5D:52:8C:EE:BC:ED:33:34:51
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 01A16D5B85D5BB14610A27A325DC072A2C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 0682
Signing time: Sat 24 Oct 2026 10:01:16 +0000
Manifest this update: Sat 24 Oct 2026 10:01:16 +0000
Manifest next update: Sun 25 Oct 2026 10:01:16 +0000
Files and hashes: 1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: W2beiPsyBZCDx2GIeEHcCmCeKnI4ucny7mFc7GRJ1Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:85:d5:bb:14:61:0a:27:a3:25:dc:07:2a:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Oct 24 10:01:16 2026 GMT
Not After : Oct 25 10:01:16 2026 GMT
Subject: CN=5b411fc99fc124d98c695d5d528ceebced333451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:1b:88:ee:d0:ea:cb:62:5e:1c:ff:85:45:
35:2a:80:a8:7d:52:0f:79:22:c7:17:95:8d:31:e9:
7f:82:e1:7a:a0:d8:10:b5:ce:18:7f:eb:a7:1c:8f:
d4:f0:1c:19:47:3c:a7:a5:43:bd:bf:ca:38:43:4c:
1b:49:97:d0:2c:6a:b6:40:e4:f6:d0:03:34:88:80:
25:6f:e2:16:eb:5a:53:d6:62:d9:b6:63:79:5a:c3:
bc:b8:25:5b:f9:e9:51:42:a4:26:88:4a:8b:34:db:
0a:bb:1b:ad:cf:3e:67:28:a3:1c:ef:e2:ab:8d:47:
8a:19:7c:c1:8c:f6:6b:4d:3f:9b:91:46:fc:c5:67:
ca:08:0e:cc:c8:5a:b3:62:77:2a:f8:17:ce:7b:e3:
be:83:3e:58:b2:67:a8:f5:65:1b:e1:13:2b:1f:84:
bb:4a:25:f9:71:ab:f8:05:ed:16:c0:fd:e8:04:f4:
11:4f:6d:d6:9f:fc:83:94:94:40:81:42:48:9f:d1:
14:7f:34:d8:c3:3e:3b:bf:a0:56:3e:57:0a:25:d9:
3d:94:af:7b:dc:a6:0f:a1:39:da:0a:35:f1:d7:34:
31:94:82:55:8c:a1:18:1c:15:fe:a2:ab:ea:52:ef:
4a:61:e0:32:8d:e7:19:a5:d0:90:ad:2a:b4:c5:5e:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:1F:C9:9F:C1:24:D9:8C:69:5D:5D:52:8C:EE:BC:ED:33:34:51
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:90:5f:1c:75:09:43:0c:25:be:99:3b:e1:81:3e:25:6b:0f:
d7:6b:64:68:6e:0f:50:51:3c:7b:9f:48:cd:2e:c2:81:df:cb:
34:70:73:3e:9d:11:61:82:88:41:9a:0c:69:a6:e0:69:0a:8c:
6a:ab:85:33:6c:d1:86:30:67:10:7d:23:ae:05:d2:d1:ca:a0:
64:3a:16:62:a5:a6:d3:79:9a:b9:f9:33:ee:ed:55:ba:29:34:
3a:01:d4:37:8c:7e:b1:36:76:a1:56:cf:00:ad:4d:9f:f4:ef:
7e:24:45:54:1d:bb:4a:a5:6b:c7:da:ad:b6:9c:47:58:ec:01:
b1:49:51:55:72:af:1b:4e:5e:16:ec:97:70:ab:23:05:e3:22:
a1:de:b4:0b:41:de:3d:c0:68:2d:a9:91:31:25:35:72:1f:a6:
38:07:03:69:1f:b7:61:fd:72:bb:e6:a4:34:e5:f4:20:2b:01:
2e:17:07:f6:d6:ff:08:d2:d6:65:4b:54:0a:d3:e1:c0:a0:61:
63:31:17:1f:49:c3:c9:71:f2:e7:df:f4:bf:78:27:b6:f4:14:
e8:19:73:d7:26:f5:01:ca:09:a7:21:47:dd:b6:8b:be:a1:3b:
3e:37:7a:f4:d1:29:c4:84:55:01:aa:ff:6f:74:b0:73:cd:f9:
49:33:06:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:54 2026 by rpki-client