Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: 0IrLeaICSgzcPVpILSJ0fEbB/fanilBIjwfzqqZ6EP8=
Subject key identifier: FA:BF:D8:8E:00:42:10:5A:FC:B4:1C:9C:54:3F:5E:45:1B:C3:23:93
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01A13D8187F67AD890C41FA6B165011F3B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 130C
Signing time: Thu 15 Oct 2026 03:01:01 +0000
Manifest this update: Thu 15 Oct 2026 03:01:01 +0000
Manifest next update: Fri 16 Oct 2026 03:01:01 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: ySvEcY8PIFbaN7Kuuootjk7j5mUShR5LPNkuee5tDLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:87:f6:7a:d8:90:c4:1f:a6:b1:65:01:1f:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Oct 15 03:01:01 2026 GMT
Not After : Oct 16 03:01:01 2026 GMT
Subject: CN=fabfd88e0042105afcb41c9c543f5e451bc32393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:c6:d0:63:e7:27:7a:c1:25:24:d8:5f:4c:
17:10:bd:00:bb:2d:45:12:f2:56:1a:01:8f:e3:e3:
d9:75:36:11:28:b8:c4:a2:35:0e:1f:65:cf:00:a3:
73:ea:f0:07:6d:43:ca:23:40:49:89:85:2c:4c:89:
b0:1a:4b:ec:b1:51:d3:b0:93:93:2f:88:8e:ae:db:
a0:22:29:5c:19:1f:ba:01:ad:69:e1:2e:25:54:dc:
e8:3f:04:13:0e:8b:d0:43:9a:66:79:a7:82:3b:72:
ac:c9:60:f6:a2:16:b5:ff:22:3a:f4:4b:12:ed:b9:
4a:e2:bd:c2:18:ea:bf:e2:e2:c5:1e:0d:5c:ba:3b:
5a:81:5e:d9:bd:74:04:cb:20:8b:4a:22:9b:2d:07:
e3:68:b3:17:27:cb:6b:19:b5:d7:f3:50:04:dc:3f:
4a:9c:bf:8b:7e:1f:61:3c:31:d9:99:47:22:13:ef:
6e:d7:ac:17:4d:e5:18:99:54:77:dc:5b:89:e4:81:
61:47:18:51:ba:c0:c4:02:02:ab:3f:84:3e:77:ae:
5b:05:e4:44:ed:e1:f6:d2:3e:c8:c3:d3:bb:45:23:
94:2b:3c:22:8e:af:d4:d9:27:6e:0b:d0:1a:a7:b3:
fc:95:6b:bb:dd:cd:c9:66:ed:e2:88:cb:b4:2c:b9:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:D8:8E:00:42:10:5A:FC:B4:1C:9C:54:3F:5E:45:1B:C3:23:93
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2c:28:6d:09:e2:b5:7b:65:7d:6b:46:cf:39:da:49:93:99:
34:1c:ef:2f:1c:e4:1a:c8:d8:5b:32:ea:91:a8:56:93:19:6d:
1d:0b:d1:ba:fa:b2:a1:0a:1f:45:5e:9e:6f:e2:ae:30:4d:31:
51:af:fd:84:cf:47:27:22:c6:ea:dd:da:91:c2:9c:4f:f0:9d:
db:8e:5e:0d:ce:3b:2f:88:dc:03:a8:be:d1:84:df:84:fe:9d:
16:c9:3f:cb:cb:5f:a5:89:d3:14:a0:0f:d9:28:ed:39:4c:7c:
4c:55:dc:76:14:d1:49:7a:9d:0a:64:d9:da:1f:cc:5d:89:62:
8c:f6:d1:e2:48:bd:f7:a5:3e:61:48:80:57:78:e0:97:09:0c:
27:db:e0:76:43:22:84:3a:97:7e:eb:6a:4c:27:05:4d:be:d6:
5d:aa:05:eb:7b:dd:86:28:f2:ee:88:b5:86:09:b7:86:33:7e:
35:22:07:38:0f:00:53:0e:92:5e:77:ad:b4:e6:4e:e7:b5:98:
47:04:53:24:8b:ad:11:e5:8c:d5:53:15:ae:d6:8d:7a:91:fd:
3b:ec:9f:f3:20:da:4c:5d:23:0b:cd:01:33:3a:80:9c:e7:6f:
97:57:2c:c5:03:63:63:9b:98:6a:dd:d3:1f:e9:d4:54:2c:45:
7c:34:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:25 2026 by rpki-client