Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: b0KuSAUGKTQgV6+SAdUYcZwF7IVWq13O37tiwU0grIs=
Subject key identifier: A2:6A:C0:B7:A3:81:9F:51:54:AD:D2:69:9E:F1:2F:BA:89:BB:3A:EA
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01A16D91F5902A7347D34A2F4FC6824F626F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 11D2
Signing time: Sat 24 Oct 2026 11:00:44 +0000
Manifest this update: Sat 24 Oct 2026 11:00:44 +0000
Manifest next update: Sun 25 Oct 2026 11:00:44 +0000
Files and hashes: 1: BzJSjNhx5MWI5ZIlWEzinLfJWp8.roa (hash: 4xTJguN7o3iRrYCcOEV50JW5ghhoz8ozCdLzv3/vPRQ=)
2: PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa (hash: gl6f8DXeLthMCjyLTaJ3OgpTkOvLgi2P9WVTX4qF9dE=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: pQ/V6zojU24QyHR4XJyyiHLczLaNpq0tqAzKvyAy5XQ=)
4: iAcU8TmU3XO9pInkys3o4nP2d1o.roa (hash: 8kLlqWjTG7qODVMxiGmAdLlFMj+sGZZsSvd11HBghdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:91:f5:90:2a:73:47:d3:4a:2f:4f:c6:82:4f:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Oct 24 11:00:44 2026 GMT
Not After : Oct 25 11:00:44 2026 GMT
Subject: CN=a26ac0b7a3819f5154add2699ef12fba89bb3aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:50:70:5b:4f:06:09:6b:26:78:1f:38:77:
3a:b3:25:21:09:2c:4c:0a:fe:00:83:2c:59:29:85:
4e:35:60:f8:f1:c5:8b:67:88:27:ff:b1:60:c6:95:
e4:13:58:17:6e:2f:f5:a5:e7:8e:f3:61:5e:1d:cd:
b3:1f:1f:84:38:d5:3b:4a:5f:74:00:de:d2:5b:e1:
7b:f0:94:61:b1:e4:8a:a9:6e:21:bc:d7:e9:ba:67:
aa:c2:2f:b5:f3:f0:d8:79:a9:0c:83:06:5d:41:9e:
e7:43:a8:24:ee:bc:f2:bd:c2:87:5b:a1:1c:14:20:
41:63:a4:d5:21:99:24:3e:58:3c:ed:93:f8:2c:0a:
14:8d:42:b8:43:9a:22:cc:a0:a7:6b:e4:79:f8:0d:
98:3c:70:5a:48:48:19:49:1a:1f:07:a6:07:bf:e7:
86:00:3a:66:60:c7:65:8c:2c:b2:ca:c0:4c:12:72:
f8:28:50:a9:2d:64:4b:79:23:0f:f7:85:8b:85:fb:
eb:fb:b3:25:9a:66:40:ed:5f:93:17:47:2f:9d:64:
ac:55:dc:14:18:34:e0:c4:18:94:b6:e2:52:50:ec:
c7:31:07:18:fc:ba:88:e3:6c:2f:0f:69:2b:ab:04:
05:17:29:cf:3b:ac:e9:e7:d2:8c:43:60:9e:df:e0:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:C0:B7:A3:81:9F:51:54:AD:D2:69:9E:F1:2F:BA:89:BB:3A:EA
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:46:c5:1b:07:41:38:b2:72:74:e7:0d:6c:5f:3d:7e:54:
75:1c:e8:59:bf:63:32:2c:a9:83:69:d9:8f:29:81:ed:a8:39:
16:d1:f2:b2:75:5f:37:a9:5a:51:8c:9b:6e:78:ae:2c:d1:ec:
18:f2:1f:a8:97:10:5f:47:6f:f6:15:e1:88:fb:21:81:81:81:
05:05:e8:6d:20:f5:c3:23:a0:71:92:da:bc:4d:6d:a1:b3:4e:
17:73:4d:00:2d:a5:da:d5:e8:45:f5:71:d5:2c:41:22:76:5b:
78:53:64:59:e9:f8:04:9e:a9:3a:3d:cf:b4:a7:26:95:f9:43:
3f:b4:97:59:51:70:14:39:cc:32:0a:7f:64:60:12:81:db:31:
ff:e3:18:22:f5:e2:6f:cc:b0:27:bd:aa:56:53:99:60:d1:21:
72:bb:bb:d4:39:05:6d:a5:18:2d:36:79:90:4b:7f:c2:31:42:
1d:aa:96:6f:8e:13:7a:e1:82:a2:0c:3e:b8:e0:aa:47:84:ce:
10:bb:cc:a4:13:6e:dc:07:7a:f9:ff:e6:03:65:ef:cb:eb:94:
a8:8b:da:c4:47:bc:6e:dc:94:62:60:4b:dc:a0:47:97:10:7d:
ef:d3:cb:f2:a3:c6:6a:e6:8a:67:a1:01:dd:80:af:07:75:fd:
d4:4a:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:16 2026 by rpki-client