
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: WPYSkhtrP4T9YOsbao0mHrwqrStJ3z9ymlGy7te6zSs=
Subject key identifier: 8C:33:E8:15:D3:9E:6B:BA:52:65:DA:22:5B:D9:62:1B:82:7C:A4:5A
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 01A1878935FD7C6F5E2203F0886A6788E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 1588
Signing time: Thu 29 Oct 2026 12:01:18 +0000
Manifest this update: Thu 29 Oct 2026 12:01:18 +0000
Manifest next update: Fri 30 Oct 2026 12:01:18 +0000
Files and hashes: 1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
4: hkG-YGBM-MbzznRrpltgpHNZPLM.roa (hash: wRqq2PIQvkMZTX1tGRuU+U8jnKVNokqysUNErDHlJPM=)
5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: kjnwJlRzte0lDl1uwWzWtL31AqF7YGH1iDLd4TuZmZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:35:fd:7c:6f:5e:22:03:f0:88:6a:67:88:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Oct 29 12:01:18 2026 GMT
Not After : Oct 30 12:01:18 2026 GMT
Subject: CN=8c33e815d39e6bba5265da225bd9621b827ca45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:75:e4:ab:e2:8f:43:82:47:52:a7:62:55:
2d:6d:38:5a:2f:eb:7d:2a:01:86:f1:dc:a4:bf:9e:
10:e4:7e:cd:a1:8b:9c:29:ba:dd:7d:26:c7:1f:ca:
31:73:19:26:20:6c:00:ca:e9:5f:ec:6c:ff:d3:94:
27:cb:8e:b7:f7:ee:08:be:10:b8:41:f6:b5:e1:fc:
b8:01:3c:83:a7:43:4b:22:b7:75:e3:b4:47:55:8b:
b8:b5:e7:ce:fe:a5:04:b2:9b:9b:d9:05:73:85:c3:
6f:a0:07:e2:8d:7b:9d:aa:1e:2a:0e:bb:32:40:5b:
70:a7:4f:d3:d1:a9:24:39:e5:5d:43:85:c3:60:a4:
b9:d0:6e:0b:2a:46:93:13:42:59:7c:23:bb:33:8b:
a3:25:f5:c4:b6:b9:db:6d:35:d4:8b:1e:1a:1a:0b:
0b:61:62:3d:c2:2a:eb:46:3f:0f:d6:59:44:8d:dd:
57:4b:03:cd:3a:a8:50:b4:74:e2:c8:0f:0c:f0:1a:
0e:b1:5a:20:fc:b3:b3:95:00:13:27:09:9e:67:f3:
02:a1:92:84:3b:c6:e2:96:40:76:72:00:d6:4a:5c:
69:f6:32:38:34:3a:92:27:e4:10:07:55:8d:5a:e0:
34:75:bf:ed:dc:f9:be:42:fe:81:b1:77:00:5c:e1:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:E8:15:D3:9E:6B:BA:52:65:DA:22:5B:D9:62:1B:82:7C:A4:5A
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:b1:0d:d2:3d:4c:19:58:1a:e9:cc:f2:85:98:28:dc:1e:
7c:59:c3:ce:6d:2d:e5:d3:c7:1f:b0:a3:aa:14:8f:a2:f9:78:
f0:a8:fc:21:ec:94:2d:db:f2:63:42:ac:1c:df:76:93:89:5c:
a3:fa:ef:d4:b6:eb:b9:1f:2f:cc:7e:f4:67:53:1f:3c:f6:59:
44:01:c1:a7:60:7a:38:1e:49:21:d3:20:5e:05:fa:06:33:a3:
aa:3c:9a:07:ef:d0:44:57:5a:60:ff:a8:e9:fc:2b:e5:f7:06:
89:55:1b:f7:68:b3:77:9a:38:3c:97:95:de:74:d7:9e:95:45:
7b:f0:bd:e1:de:cc:18:3d:63:ef:23:13:0b:04:81:6d:15:66:
f6:7b:7d:2e:ee:9b:ed:2b:64:b1:fc:47:da:10:dc:7f:10:ba:
0c:7f:d4:97:b8:bd:fd:64:18:8c:9c:15:b0:3b:b8:9b:86:db:
78:cb:6d:c1:7e:c9:06:1f:05:d1:c5:4b:ca:db:35:cf:60:14:
87:e5:54:48:27:a6:0a:c0:9e:20:2d:f7:0c:f0:38:af:2f:f1:
8c:47:75:37:0b:d4:06:11:ef:06:de:6d:d9:dd:8b:3c:78:cf:
d2:b0:e5:be:64:29:dd:91:7a:07:a3:22:4f:89:a4:a4:1b:d9:
21:c3:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:14 2026 by rpki-client