Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: k5tdl0Bk/GjkkU/fKa3D+W1uXmYRkhJrlB/Dik2V5HM=
Subject key identifier: B8:CD:3D:AC:45:6E:D2:64:04:5B:DC:1B:0F:5F:56:29:09:23:44:16
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019E57EDC4C877BEC39CD2AC64BD0C1A23A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 1086
Signing time: Sun 24 May 2026 03:01:00 +0000
Manifest this update: Sun 24 May 2026 03:01:00 +0000
Manifest next update: Mon 25 May 2026 03:01:00 +0000
Files and hashes: 1: 4lh6zuN-Tq_BcgExhVd8NBQchD4.roa (hash: P5LL4+rUzqUyR015fjGrIwNYgLO0xwDg5m3oq2ToJRo=)
2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: lmOAnC5xV1r5eOCOkSceV96fW2FjgBN1ocOMKoPR3Lg=)
3: gEJvFR8PsrUne5oELsB0PV7jSGU.roa (hash: mpcorMON4i4mafITifxuEzyDa+A1SVT5nIbq/8eGhJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:ed:c4:c8:77:be:c3:9c:d2:ac:64:bd:0c:1a:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: May 24 03:01:00 2026 GMT
Not After : May 25 03:01:00 2026 GMT
Subject: CN=b8cd3dac456ed264045bdc1b0f5f562909234416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:50:05:8b:5a:b2:10:a7:a6:0b:a1:e4:c5:
dc:50:3f:54:57:ac:d3:02:f4:29:f7:a9:bf:ce:20:
41:49:de:86:73:3a:e1:e4:b9:b1:43:6e:a7:59:df:
dc:b9:16:b8:33:00:e0:eb:25:58:cf:f6:52:df:bf:
28:52:08:d0:00:6e:f3:33:b7:b6:7f:65:ae:f3:da:
26:88:21:e8:45:74:af:4a:e0:76:be:1c:fb:14:47:
aa:3c:62:49:6a:ce:81:2c:cb:07:87:ed:29:d0:f4:
5f:0e:ff:e8:0d:33:16:fc:7e:c0:97:ad:09:25:b0:
49:d8:94:d1:50:1d:7a:29:75:b3:c1:2a:a3:9e:36:
1a:66:05:5b:9a:5c:7a:4e:5b:fc:a4:de:8d:9b:32:
58:47:df:80:cc:0a:84:a0:34:d5:a1:6c:ec:78:63:
5a:f1:38:29:63:9a:d2:4a:f5:2a:8f:2c:c6:4e:6d:
4f:4a:0c:cc:69:61:38:37:7f:8b:4c:7c:3d:a3:a0:
1b:62:ff:fc:b2:a1:f0:eb:e7:00:56:a8:1d:b0:98:
64:0a:70:eb:4e:7e:ba:de:73:f5:12:d2:e7:90:23:
34:76:4f:ec:5c:fc:5a:f9:0c:8e:c3:22:3f:b6:ee:
bf:4b:80:8a:8f:13:a5:58:14:68:72:88:5e:1d:65:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:3D:AC:45:6E:D2:64:04:5B:DC:1B:0F:5F:56:29:09:23:44:16
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b4:ba:f9:d0:95:73:6a:08:06:f1:64:6c:2f:e2:ce:c7:66:
36:1e:90:0d:92:99:ac:46:51:93:a3:92:86:98:2b:1e:17:c0:
f1:0e:75:fe:c9:06:d6:16:8a:c9:46:79:4f:88:4f:1b:31:7d:
3f:46:c3:31:0c:ec:40:e2:41:5c:10:c4:af:21:47:ec:29:dd:
36:27:27:85:ef:77:c6:6e:2c:6f:a6:3d:42:ef:ca:a3:9f:54:
41:43:53:6c:67:35:d2:ba:ea:5e:77:97:86:36:c2:0f:28:f0:
bf:47:6b:66:8f:1f:cb:59:ac:15:0f:f6:bd:89:dc:aa:90:8e:
18:11:8d:60:53:2d:0e:38:9e:05:85:26:53:ff:5c:c8:e0:f5:
41:f4:6c:ec:44:cc:a0:95:d3:5c:90:c3:28:7c:2e:ee:db:0c:
a4:30:b9:3d:e5:5e:0e:e9:71:7f:02:64:07:cf:5a:ee:32:38:
45:0b:e1:2a:4d:24:b7:fa:2d:4b:03:82:f2:98:7d:77:15:03:
6d:81:37:32:3b:82:5c:ee:73:9d:0d:a6:4c:64:3e:fa:a7:1b:
f2:46:f3:e6:5f:4b:64:12:fd:61:db:a6:b8:b8:a7:3d:79:47:
83:4b:18:8c:1b:86:18:81:8f:18:d9:5d:7a:28:1e:4d:01:a2:
b2:ff:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:06 2026 by rpki-client