Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: 7WBn31lyPVEwnOB62vqVdkx98z5mvxxzDO+bA9w6dwY=
Subject key identifier: EB:10:E3:60:4E:ED:E5:FF:E6:EF:39:25:4E:DE:DC:DC:9A:59:52:D7
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 01A185639AD551B18F4CB3DE014F6FF9310B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1A5E
Signing time: Thu 29 Oct 2026 02:00:59 +0000
Manifest this update: Thu 29 Oct 2026 02:00:59 +0000
Manifest next update: Fri 30 Oct 2026 02:00:59 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: cv0HGKczjqnC6MNRZdbczBmDnq1TncmtjZHaZDeWdXw=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:9a:d5:51:b1:8f:4c:b3:de:01:4f:6f:f9:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Oct 29 02:00:59 2026 GMT
Not After : Oct 30 02:00:59 2026 GMT
Subject: CN=eb10e3604eede5ffe6ef39254ededcdc9a5952d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:b7:f0:e0:d2:66:f3:1c:2b:f5:6f:8a:0c:
a7:ee:fd:e8:ef:68:4d:0e:84:f4:a7:02:4c:cc:2c:
94:40:f5:52:bd:7c:19:f7:ae:9f:9e:34:1a:51:4b:
d7:1e:79:89:ca:98:e2:94:11:6d:4e:2e:2d:c2:d2:
88:4e:61:92:c5:6a:f8:42:4a:b8:37:07:bf:60:e8:
71:4f:46:71:b9:f4:1a:4d:35:f0:99:0f:56:75:8d:
c5:ae:38:2c:82:4b:b8:ec:1a:75:6f:85:9b:04:91:
83:3c:c7:b0:0b:6c:02:8e:0a:c1:81:f1:93:65:73:
13:29:d7:bd:2d:ba:79:2a:f9:0f:bd:54:4c:b7:51:
9c:23:dd:17:6d:86:3d:2f:ff:95:7f:bd:a0:b7:42:
bc:a7:87:9e:06:df:43:f1:7b:8c:52:46:74:bb:58:
8d:59:6d:0c:0e:9e:a8:9e:6c:b3:41:58:59:86:96:
9c:a2:41:75:37:c9:bb:53:13:53:3a:97:14:a2:82:
dc:d0:b6:c4:8b:3d:66:ca:70:49:8e:14:65:be:3f:
38:85:32:bf:bd:1f:a8:fb:6b:2d:b4:f3:19:6e:1f:
ef:13:65:a1:06:46:e2:76:24:61:fd:b4:aa:9d:0a:
6d:bc:df:52:ff:92:2d:fb:60:9a:9c:81:66:15:04:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:E3:60:4E:ED:E5:FF:E6:EF:39:25:4E:DE:DC:DC:9A:59:52:D7
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:96:31:aa:3c:ed:54:b8:92:d0:db:ea:0b:9b:9f:a3:05:
f7:b7:31:bf:3b:4b:7d:a9:d9:60:49:d2:92:34:64:6f:f9:bb:
08:78:3d:b2:f2:aa:b6:24:cd:be:24:0e:27:72:25:1a:3a:80:
7f:c7:d0:25:64:fd:a1:39:5f:ed:4d:01:88:5d:e2:0d:ea:7f:
de:7d:b9:36:1c:ab:a8:92:e2:a3:72:c2:fa:9a:14:65:55:d2:
11:9b:2c:2a:29:b0:0e:00:bc:4b:ae:8a:23:1a:4c:72:a7:80:
f2:72:9c:da:a4:82:88:71:4b:e2:66:cf:d6:08:1c:f7:4b:6a:
54:ab:48:d0:7b:c8:9d:4f:9f:4f:a5:ff:3f:d2:02:f4:06:87:
40:24:dc:02:4c:8f:75:2e:50:e6:4e:47:fd:aa:4e:1d:0d:e1:
3a:dc:5b:54:b0:dc:2d:87:7d:d4:27:80:49:e6:00:cb:c3:29:
3c:42:a7:a6:fc:b3:a9:3b:7c:2c:06:68:b7:4c:8d:d3:1a:f0:
1d:3e:29:34:fa:b4:45:65:22:a2:ad:4f:25:49:3c:6b:06:e4:
94:8d:fd:a5:54:38:aa:59:67:bd:f6:9e:a5:b1:ec:1c:86:8e:
27:df:13:7a:7e:76:82:d1:22:61:f2:e3:7d:21:7e:5b:99:7c:
79:eb:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:43 2026 by rpki-client