Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File: fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier: CPPdLm/0ToSbu8jBHiDUJsA2f5kY3rBAGF+2i1G1MbQ=
Subject key identifier: E4:5A:2D:05:74:40:53:18:AC:9B:18:91:3E:79:13:66:DD:9B:DA:FE
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer: /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial: 01A1998EE29598066A4B7F47B63978D5D15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number: 0229
Signing time: Mon 02 Nov 2026 00:00:40 +0000
Manifest this update: Mon 02 Nov 2026 00:00:40 +0000
Manifest next update: Tue 03 Nov 2026 00:00:40 +0000
Files and hashes: 1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: pYvG1gtfXcsSxMfNCc5etndDvm7XTdDKq95gdmJ4TYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:8e:e2:95:98:06:6a:4b:7f:47:b6:39:78:d5:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Validity
Not Before: Nov 2 00:00:40 2026 GMT
Not After : Nov 3 00:00:40 2026 GMT
Subject: CN=e45a2d0574405318ac9b18913e791366dd9bdafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:41:52:79:12:bf:9e:25:78:0f:42:ea:02:
a5:6a:6f:22:e0:dc:c7:c9:c7:ef:99:a8:d7:39:4e:
93:91:d4:4c:4b:93:2e:ee:fa:a5:f0:f9:1b:f2:26:
8c:4f:0a:15:0d:9f:90:6c:38:de:bc:92:62:7e:68:
6b:b1:4b:84:4e:74:22:44:df:59:3a:88:1e:a2:44:
26:69:52:3d:09:59:a1:86:a3:4d:a9:44:ef:e4:32:
e8:a0:68:19:a2:9e:91:23:4c:1c:1e:90:63:5a:d0:
5c:df:9e:89:57:6d:94:71:b9:1c:6c:f5:5b:4d:08:
f9:1c:a8:7b:5a:cb:d7:14:03:fc:69:5c:d9:33:d4:
87:3a:7d:b6:ac:34:ed:b1:f5:d5:cc:39:d0:6a:4b:
92:ab:f8:19:e5:d7:fb:41:3f:9a:d3:95:b8:68:46:
2c:fc:16:75:aa:ca:01:84:b1:88:a1:1b:30:22:20:
b2:cc:fc:23:7a:4d:2f:e8:66:30:c6:36:14:05:01:
e3:c5:09:d4:56:8c:4e:58:19:53:94:7e:e3:26:97:
a2:ff:e1:66:34:9f:09:eb:e6:d8:dd:25:41:e6:63:
cf:1a:e8:24:4f:0a:0c:9a:93:ec:c6:7c:a3:77:41:
eb:ea:de:38:21:5d:8b:1d:98:c0:f7:4d:e1:ee:50:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:2D:05:74:40:53:18:AC:9B:18:91:3E:79:13:66:DD:9B:DA:FE
X509v3 Authority Key Identifier:
keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:42:db:ac:68:69:51:12:1b:4f:5c:fe:61:7c:8c:05:36:92:
1e:4e:33:e2:3a:16:02:f8:c3:71:37:49:6a:35:1c:2b:c5:90:
23:cf:4f:a0:34:46:b8:24:e7:0f:54:af:b6:bb:5d:c6:2e:0e:
56:ce:eb:c4:f4:db:df:52:3b:94:e1:48:83:58:de:ec:82:2c:
c9:fa:e6:45:6f:70:6b:04:d4:bd:5e:92:ee:b0:f2:2b:94:c6:
c1:25:f1:b2:45:b4:76:36:19:b8:05:b1:91:77:34:62:b2:85:
25:8b:45:33:27:56:65:86:7a:53:fb:45:15:a1:f6:a6:3f:8d:
78:b4:ad:4a:ac:0a:71:9e:4e:73:54:71:90:11:c4:90:63:ce:
1a:87:95:98:0e:21:03:03:4f:4c:62:76:1d:02:6d:ed:f9:af:
00:23:e5:5e:8f:79:5b:93:65:42:e4:dd:b1:59:f0:94:3f:16:
c5:ee:c1:ff:2b:b6:5e:87:c5:36:8e:fc:66:06:47:e3:b0:e1:
a8:97:22:16:df:50:04:a0:8a:25:17:70:cf:2b:02:44:ad:38:
96:05:f3:a3:37:c4:0a:bb:bc:3d:9c:c5:19:c3:08:0a:d8:a4:
fb:28:2e:89:77:62:96:b0:c2:14:9f:c7:10:65:fb:1c:b4:66:
f9:0b:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:58:09 2026 by rpki-client