Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: tCnKCo32kNESNTJ61b+UYTNXm/kfIgXch33oBAaq6vI=
Subject key identifier: A3:9B:F7:AA:65:3B:E2:EC:33:65:16:13:A2:99:EF:D8:7E:03:64:90
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 01A1938D481983B9D00B25A21B3837D6EF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 147A
Signing time: Sat 31 Oct 2026 20:01:12 +0000
Manifest this update: Sat 31 Oct 2026 20:01:12 +0000
Manifest next update: Sun 01 Nov 2026 20:01:12 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: UcoeUEJOnrDKCaGN0XQobFqkQ7VGkxz/QOjyYIK/rxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8d:48:19:83:b9:d0:0b:25:a2:1b:38:37:d6:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Oct 31 20:01:12 2026 GMT
Not After : Nov 1 20:01:12 2026 GMT
Subject: CN=a39bf7aa653be2ec33651613a299efd87e036490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:02:ee:53:6b:b9:03:2d:d6:73:73:42:80:
33:3b:39:08:1a:7d:8b:2b:2a:2c:7e:20:df:86:7b:
1d:4b:b9:03:77:c8:1b:0f:3c:b4:cf:45:fe:25:e8:
73:8e:6b:54:0c:c3:50:7f:3f:a4:ca:ed:cf:66:a4:
a7:c2:6d:cd:5e:38:68:cc:9e:64:d7:f7:0a:50:7e:
1e:6d:03:e3:8b:d3:51:02:65:b8:77:9f:91:8c:55:
6a:f1:6a:84:63:1d:4d:af:6c:8b:b4:57:78:7c:18:
54:90:7d:b8:ed:e1:07:5d:71:eb:bd:62:34:fd:de:
6f:6c:eb:71:5c:7f:f3:30:9c:ab:b4:27:8a:e1:25:
87:28:0d:7b:32:20:e8:36:63:c0:21:ca:0f:3d:5d:
67:e6:2e:a9:ca:ef:69:b0:3b:be:5f:d9:e6:86:a0:
99:59:2f:31:35:53:48:7c:72:5e:84:1f:55:56:d5:
b0:10:cb:a1:77:f6:43:83:83:15:b8:65:13:3c:15:
ea:9d:da:d9:9b:2d:4d:07:ce:d6:7a:43:55:e9:d6:
75:56:e8:58:f6:ad:07:74:ee:fb:f3:ab:b6:70:6b:
af:82:ef:ab:35:ae:af:4b:9a:79:3f:4d:7f:f0:5d:
12:6c:1f:d3:a7:4d:18:2a:60:e8:bf:b4:21:0d:57:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:F7:AA:65:3B:E2:EC:33:65:16:13:A2:99:EF:D8:7E:03:64:90
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:05:f1:35:4f:91:96:63:5c:54:2c:bd:21:f3:36:f1:22:f8:
38:e7:4a:b2:29:50:16:57:d4:3a:e0:c0:a2:ee:10:be:14:69:
09:b2:32:67:e9:7c:3f:e6:b6:c5:86:12:64:28:51:b2:4e:e2:
f7:5b:6b:98:a5:6f:14:8a:5d:e6:2f:72:c1:1f:ca:11:53:a8:
3e:d0:63:b6:ff:70:78:2a:44:9c:f7:9d:33:61:2f:ed:c5:21:
c8:3b:e5:18:a4:81:04:76:4d:ee:b1:28:a0:57:5d:86:69:08:
1a:6c:80:09:a8:f1:3b:e8:80:6a:23:13:2a:49:ba:09:90:82:
01:e7:93:6b:c9:bc:f0:b1:98:f7:05:e1:af:f5:82:2d:fb:ab:
3f:1c:88:6d:c6:47:5c:1c:d8:29:e9:40:9d:99:f3:ab:3a:a3:
52:36:b0:15:84:a8:6b:18:05:51:d7:b4:ba:0d:ab:41:6f:e7:
a4:d2:3a:90:64:86:0b:c9:c1:1d:70:ca:61:bd:57:75:2e:9d:
65:7e:14:6c:98:af:ff:21:d2:1c:8a:dc:68:60:b3:fd:cd:7c:
55:44:e0:64:92:35:51:38:72:23:35:16:9a:bb:6f:9c:85:ba:
c0:86:3f:a9:95:02:fc:fa:4a:7a:d0:cd:bc:92:9b:d3:21:73:
f3:63:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:14 2026 by rpki-client