Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: 0KkIUUwUqj5TAcruMq5fB6CzV1MC8YmLfiPe0Przx9Q=
Subject key identifier: FC:31:7A:AE:CA:F7:EE:28:DE:32:28:89:F9:57:46:4A:9B:92:27:83
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 01A1A4EE31413D3178A44F8DAEB03E4B4E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 1AD9
Signing time: Wed 04 Nov 2026 05:00:35 +0000
Manifest this update: Wed 04 Nov 2026 05:00:35 +0000
Manifest next update: Thu 05 Nov 2026 05:00:35 +0000
Files and hashes: 1: 6q90Ylcr_bTouVL-1y_wxNRsyCw.roa (hash: mNmL0Z1TdYTnC1LviNwI9MUlQwclOYrlF6P0bTcPytQ=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: 0by9CaRevWJyZ4rd2PheNo3OtRrdhGti9EpO8y4X/+w=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:ee:31:41:3d:31:78:a4:4f:8d:ae:b0:3e:4b:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Nov 4 05:00:35 2026 GMT
Not After : Nov 5 05:00:35 2026 GMT
Subject: CN=fc317aaecaf7ee28de322889f957464a9b922783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:8e:d6:3b:5c:e7:69:53:9d:9a:8d:e0:32:
c8:3c:eb:08:06:9c:ce:99:72:cb:2a:dd:6a:4e:a0:
f1:b0:88:75:ec:45:25:16:5e:71:8a:16:a3:e6:a2:
5f:61:40:36:cd:43:fc:3d:ca:b4:83:55:18:e6:fa:
f5:8d:16:9d:36:d5:98:94:89:b1:23:d8:ce:39:54:
41:00:71:5a:15:92:62:e9:3f:59:a5:c8:68:c3:7e:
60:23:18:bf:2f:2b:e0:24:2f:65:de:5e:58:bb:62:
ab:5c:c4:a8:ff:c2:12:d8:79:2d:c3:8a:44:c2:f0:
11:eb:11:75:c0:a2:25:1f:8e:3a:8e:c4:81:a1:47:
70:c6:ed:68:03:37:b9:36:f2:c8:c3:b7:db:f8:b7:
dd:3f:3c:64:11:05:15:fa:d7:23:71:d0:f9:3b:90:
4f:be:5b:9a:b6:cb:05:79:01:0b:a8:19:25:b2:f0:
15:3c:cd:f3:15:3f:8c:cb:fe:33:cc:89:82:ce:69:
52:43:46:f2:3b:a7:4a:1b:28:51:cc:af:74:05:47:
99:4e:e6:14:ea:32:36:c4:0b:48:dd:8f:fd:bf:6d:
cb:4f:46:6c:92:32:12:33:6d:85:47:20:48:36:52:
2c:18:dd:ad:a4:ea:85:9d:09:06:7e:fa:b1:c3:7c:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:7A:AE:CA:F7:EE:28:DE:32:28:89:F9:57:46:4A:9B:92:27:83
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:28:56:31:df:2f:80:df:29:3f:a2:b0:09:44:f3:69:25:
35:b0:66:a7:97:ea:af:4f:b7:01:29:2c:a4:3c:11:d3:95:f7:
2b:32:c1:4b:2d:da:9b:c8:8b:b1:4e:a4:ea:84:91:d7:7f:4a:
63:03:18:f7:d1:e1:a6:a6:a2:25:6e:67:43:82:bf:d7:06:f9:
fe:5a:03:b5:e0:f1:3e:79:4f:1d:cf:2a:91:0e:20:f8:ce:f2:
1e:73:ec:38:f9:f5:3b:7a:8d:81:c9:92:01:6e:67:92:b5:88:
c1:e8:c2:e9:fd:31:50:d7:53:98:a4:47:eb:1a:16:5b:63:a9:
3c:fe:15:ff:c8:45:a6:10:c3:85:87:04:8b:bd:fa:d0:01:54:
ea:f1:1c:2f:a0:00:80:b1:95:c0:1e:3f:93:89:e2:d8:91:33:
ab:e4:8d:aa:51:bb:6b:fc:4f:e7:5f:0e:90:e2:33:b1:bf:7d:
bf:bc:b6:31:a1:fe:57:53:64:31:30:42:7b:d8:b9:24:86:21:
61:ff:2f:cf:df:94:8a:82:73:35:83:8e:17:9a:52:f1:54:57:
c1:06:9e:f4:8c:29:06:6d:4b:63:03:45:08:1b:d4:a2:31:6f:
7c:ca:26:ab:29:25:b1:31:b8:19:ab:98:6a:d9:7d:f2:5f:0b:
e1:2b:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:18:09 2026 by rpki-client