Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: 5xpIpF8qJ3zaP6t1Lp7JoLHfkxMPszgnGOAm2Bbn+2w=
Subject key identifier: C4:1A:E3:F5:5D:F1:B2:94:CB:3F:E4:A8:F1:1B:97:D8:F9:BC:55:06
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01A1032473383C46E778D4A64B0953E89E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 171A
Signing time: Sat 03 Oct 2026 19:01:22 +0000
Manifest this update: Sat 03 Oct 2026 19:01:22 +0000
Manifest next update: Sun 04 Oct 2026 19:01:22 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: PwsBYkySZXDUIhSMYJtV5/MmvsqKECaI5Fj0vhkxUyk=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:73:38:3c:46:e7:78:d4:a6:4b:09:53:e8:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Oct 3 19:01:22 2026 GMT
Not After : Oct 4 19:01:22 2026 GMT
Subject: CN=c41ae3f55df1b294cb3fe4a8f11b97d8f9bc5506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:91:d5:58:0e:fd:42:e6:0d:49:76:77:a8:
bc:d0:06:9f:57:02:17:b0:10:69:75:7a:ae:03:e1:
8f:2e:27:22:34:71:0c:29:a3:01:19:aa:75:9b:12:
73:3f:37:08:94:88:f5:3b:cd:ec:fd:06:95:f7:c3:
56:80:31:f3:0e:38:ac:c2:25:60:80:fc:bd:63:5e:
27:39:c8:a6:b7:70:84:dd:59:a6:f2:32:c6:ba:69:
21:71:01:8c:aa:a2:1f:dd:81:06:b5:ea:3a:3d:d8:
33:52:b5:e0:43:b6:3d:b9:0c:a6:d7:d0:c0:97:60:
c1:d7:12:0b:89:53:62:41:0c:5b:9e:51:52:f6:79:
22:33:49:b2:3f:30:a3:95:1b:bc:50:f0:f8:28:a4:
51:31:41:0f:04:a3:41:85:69:db:d0:9f:39:b5:9d:
fe:46:3b:c6:24:55:45:58:74:5c:1c:ed:ee:07:73:
dd:ac:38:1d:1f:aa:67:4f:6f:36:9b:89:d7:85:88:
e6:a9:8e:1e:49:2a:f0:f0:43:84:9a:a5:48:d2:55:
f4:d5:4e:fe:4b:8b:32:c2:01:c8:2d:1a:3f:7c:7b:
20:25:74:e0:d1:06:72:62:5f:e8:51:10:e5:93:dd:
e0:ac:a1:57:58:b3:94:8c:81:99:d9:52:66:6e:f7:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:E3:F5:5D:F1:B2:94:CB:3F:E4:A8:F1:1B:97:D8:F9:BC:55:06
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:59:10:46:06:8c:69:4e:d0:d0:3b:3f:87:57:75:92:b5:
3f:c2:78:cb:f1:a9:c9:18:08:c7:38:8e:c2:2c:68:7d:c4:d2:
80:42:46:a6:0f:e6:67:c4:a7:5d:a2:d4:dd:4a:7b:ec:75:9a:
62:67:e5:3c:c4:9d:97:df:af:3d:fe:c8:11:08:8b:87:04:a5:
a9:2a:66:39:7b:f0:52:d3:81:d3:d5:7d:e9:39:8b:09:22:33:
c3:01:07:cd:80:3b:39:cb:cc:15:d3:7a:bf:45:5c:c5:37:ce:
7f:c1:45:a2:4e:91:4c:0a:bc:da:11:c6:e1:0d:1b:18:f7:6c:
67:45:bf:6f:52:f1:44:e1:9d:c8:0b:ee:5b:6d:f4:bf:37:e2:
cd:e5:6e:d6:7b:77:b0:08:7f:96:1f:95:b1:b2:8d:b7:a7:2b:
6a:89:cc:e3:de:ee:5f:00:0d:6c:30:94:8a:91:d8:f2:21:a8:
80:f4:8d:ea:f8:c9:48:d2:04:fc:5b:14:2f:78:87:a4:2a:7d:
64:fb:59:60:c0:35:30:de:c6:bf:8d:88:a7:80:54:5d:5e:85:
3f:7f:e7:37:3a:03:04:13:fb:55:21:4e:03:ba:35:82:b9:84:
05:51:6b:02:d9:b7:b4:d9:0a:d3:06:c8:eb:7f:5a:71:b2:25:
2a:63:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:44:09 2026 by rpki-client