Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: /pkNaEt7Am0T1gmO4wt2in6SmW/Ft2sqYKkJt5y4hn0=
Subject key identifier: 6B:2C:50:43:35:79:B7:7D:05:10:0A:61:AE:D3:A0:98:4A:59:CC:1F
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01A160E8AE900DF490F8FF8BD0CF92E03C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 14DE
Signing time: Thu 22 Oct 2026 00:00:24 +0000
Manifest this update: Thu 22 Oct 2026 00:00:24 +0000
Manifest next update: Fri 23 Oct 2026 00:00:24 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: P2XgpDqrJQj9i2O2hYmNxDWgAB3CyipVdbwRiPQytKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:ae:90:0d:f4:90:f8:ff:8b:d0:cf:92:e0:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Oct 22 00:00:24 2026 GMT
Not After : Oct 23 00:00:24 2026 GMT
Subject: CN=6b2c50433579b77d05100a61aed3a0984a59cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:ba:ce:b4:03:bc:a2:86:9f:f4:d1:e2:79:
18:80:73:db:46:cd:f7:18:3e:b3:90:d5:ef:7c:b5:
0b:af:b0:b0:20:bf:ed:e6:6d:a8:46:3b:68:e0:36:
74:93:4f:f4:ff:be:f6:2a:25:22:6d:69:a7:cf:0f:
14:e7:48:a6:83:be:45:1f:2a:00:ea:d5:81:bd:80:
55:35:b9:76:e6:d8:a4:07:4b:1a:2d:32:dd:20:e0:
23:29:ea:46:4c:61:c2:1f:16:60:eb:cf:da:97:f3:
1d:44:08:f9:26:ff:9a:98:0f:6b:0d:0f:85:c2:a7:
8e:e4:4d:5f:f0:6e:14:a6:6a:c8:36:1d:7a:19:c9:
b1:17:14:37:dc:e6:8f:10:94:53:db:1e:37:c3:ad:
c5:a2:e2:7b:47:8a:b7:11:1a:f1:e5:a5:3d:0c:5e:
e6:85:94:0c:e2:d2:be:50:1b:fb:77:4f:48:34:5d:
79:f3:e7:28:54:4b:b7:da:6e:41:e1:06:2b:41:27:
e6:9a:bc:7e:f6:c7:49:45:8d:40:52:7b:49:77:82:
e5:b0:69:6f:0a:f9:f4:3f:8e:43:6d:6e:c3:0b:6c:
d5:05:aa:c9:9b:01:8d:24:fb:1c:0a:45:00:b4:91:
00:66:f7:45:3f:17:0e:eb:a1:a0:3a:d5:c5:c6:9e:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:50:43:35:79:B7:7D:05:10:0A:61:AE:D3:A0:98:4A:59:CC:1F
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:60:62:00:40:eb:07:b8:9a:61:d5:3d:1c:76:82:2f:9e:28:
1c:20:4d:01:82:c3:d7:26:09:72:03:2e:2b:97:66:dd:13:80:
2f:d3:64:ec:d2:7b:e8:38:c2:71:05:32:bc:3d:cb:4f:fc:25:
3e:58:e1:34:0f:89:ae:2c:12:a1:c3:1c:d3:2f:90:ab:bc:0a:
58:6b:03:6b:3b:17:ad:62:06:6a:ae:3d:e5:d1:de:10:00:f0:
15:a3:9a:c4:51:8b:9a:20:8b:fb:95:50:fc:d8:7a:54:39:bb:
5f:e7:2e:93:38:99:da:0e:63:c2:52:32:b2:ee:21:73:cc:c2:
9f:9f:0e:56:9e:99:17:1d:be:e2:d6:4e:c5:08:41:70:c8:a5:
47:43:b4:3d:ea:8c:8a:7f:03:5d:73:ed:a2:d6:5c:b7:23:a3:
c6:77:30:f1:ac:3c:a0:3d:ec:d0:31:7c:dd:0a:34:a9:b4:8c:
81:c5:6c:a7:43:ca:9c:4e:03:eb:65:ee:3d:12:d5:09:01:2c:
20:3b:ef:5b:5d:e9:ff:55:5c:e5:76:d6:92:51:a6:5b:67:57:
0f:e9:0d:4c:11:fd:d5:cd:4b:77:55:78:d8:62:b1:3d:08:d7:
de:0f:d5:a1:f0:df:ea:d7:f2:dd:cc:34:ad:1f:11:ad:26:86:
28:4e:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:43 2026 by rpki-client