
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: T/fwx2YidFqtn2eNjoXXgzmRrqnPbF4sebHLl6l6muc=
Subject key identifier: 2F:8C:AC:A4:87:9F:66:22:3B:AC:EB:68:94:B7:06:F2:0C:55:13:23
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 01A19CC7663EFEB0CA48DFF9E380895D513A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 17A8
Signing time: Mon 02 Nov 2026 15:01:15 +0000
Manifest this update: Mon 02 Nov 2026 15:01:15 +0000
Manifest next update: Tue 03 Nov 2026 15:01:15 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: HTqg8bpXZtPoyW1YoH0HtUC0KHhbJJM6eCQlbsBoROg=)
2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:c7:66:3e:fe:b0:ca:48:df:f9:e3:80:89:5d:51:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Nov 2 15:01:15 2026 GMT
Not After : Nov 3 15:01:15 2026 GMT
Subject: CN=2f8caca4879f66223baceb6894b706f20c551323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:fd:6a:ac:7d:41:39:b1:b3:8f:54:d4:15:
c2:1e:7d:a2:83:2a:6a:b2:1e:96:b2:c0:a8:06:ac:
3c:c5:ad:63:de:cc:ea:32:f1:15:76:c4:a1:6e:9d:
64:02:2d:b2:35:ea:54:12:4a:16:36:f8:c5:a0:0a:
a5:e9:17:ee:c7:07:ce:f9:26:82:46:f8:3f:9e:9f:
ce:41:cd:e6:ef:08:04:95:ac:98:fc:dc:97:ea:ee:
b5:d2:81:8e:8e:e5:68:06:a5:b6:97:5e:8a:78:18:
ab:06:85:e0:03:7b:90:15:ac:51:a3:10:da:58:03:
48:eb:d4:c5:2f:2d:41:e5:a3:40:c8:d9:f2:29:8b:
cd:14:54:dc:c1:57:9a:73:46:4e:d0:d4:2d:3b:ee:
35:74:71:cd:0e:34:ee:64:10:73:ba:b3:6b:d9:d7:
90:b8:db:d0:e5:5f:bf:37:cd:13:05:57:4f:27:5f:
3b:1a:95:55:6a:9a:5c:c4:78:13:79:ab:e8:4c:ef:
42:6e:53:ad:87:07:6a:2b:74:42:39:65:3c:c2:8d:
08:b3:d9:51:08:c2:47:fa:ae:8f:f6:a7:90:1d:0d:
6e:5a:01:45:41:d2:7a:47:77:d0:51:f3:36:27:ae:
31:09:ef:68:dc:f8:3b:3e:04:f7:3d:b4:44:d0:c9:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:AC:A4:87:9F:66:22:3B:AC:EB:68:94:B7:06:F2:0C:55:13:23
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e2:6e:7f:a3:21:d1:a5:34:6c:12:6c:88:d3:87:18:75:6a:
6e:ee:dc:0a:c5:81:e5:c7:47:5f:5f:48:8f:25:fd:4a:29:08:
a3:3b:74:57:f2:d5:0f:2b:46:14:5c:58:b8:91:cf:d8:02:f9:
74:03:d9:41:9c:cf:2d:6c:39:3c:93:0c:7a:3f:b1:c2:e8:bd:
7c:e9:73:c3:c8:2d:b1:1b:df:46:fe:ef:f6:66:40:69:32:1a:
23:82:8a:7c:14:2e:17:03:49:d9:b8:d2:a8:e7:77:36:d0:42:
3c:2a:bb:42:66:ac:be:3e:09:2f:1d:ff:15:b4:6b:81:c2:88:
71:3b:bf:4f:4f:51:4e:d8:8a:57:75:78:74:79:af:46:97:2a:
86:78:8a:d8:c0:2b:7c:c5:f4:ba:e4:ae:79:24:02:ad:7d:ab:
e2:83:ba:54:5f:1c:e0:b6:4e:34:4b:dc:7f:46:86:e4:8f:0c:
35:f2:57:46:fb:77:3b:36:aa:10:54:bf:d3:64:86:03:cb:9d:
c9:71:a6:d6:5a:50:f1:8a:77:a9:1e:bc:f8:7d:59:0d:14:4c:
5d:23:b9:13:30:25:73:c0:16:32:46:9a:08:41:15:ec:7a:da:
e4:58:35:4b:6b:fd:7d:30:79:ec:40:05:22:71:05:40:3b:97:
56:40:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:53:42 2026 by rpki-client