Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: E2r9tSAqhf9MuRfhJ6BT/yBFvdnU2xS/FZpnrLoOnSc=
Subject key identifier: 3F:D2:CC:B9:70:CC:C6:0F:15:83:8C:64:77:5B:4D:26:D9:C9:38:EF
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 01A08CE90D51AC70ED99FE19F2FBC5FDF442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 13F2
Signing time: Thu 10 Sep 2026 20:01:18 +0000
Manifest this update: Thu 10 Sep 2026 20:01:18 +0000
Manifest next update: Fri 11 Sep 2026 20:01:18 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: 9gNw9lBN5ntyrP9Tf4esGxhvvXAV4g2kizs4GyfH8x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:0d:51:ac:70:ed:99:fe:19:f2:fb:c5:fd:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Sep 10 20:01:18 2026 GMT
Not After : Sep 11 20:01:18 2026 GMT
Subject: CN=3fd2ccb970ccc60f15838c64775b4d26d9c938ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:61:25:60:98:f4:3e:e6:44:d3:03:21:11:
cf:fe:86:35:d5:22:1c:f1:1a:ce:ab:2b:23:fe:18:
d9:21:c9:20:21:28:6d:02:88:f4:37:ea:44:6e:0c:
47:ba:bf:aa:f3:d2:ef:ff:aa:5f:2a:a6:c0:c8:d4:
7c:9b:56:c3:ac:c1:9c:ad:03:79:d9:a4:e7:b9:34:
33:94:2a:75:20:07:ec:f5:b1:e9:d1:77:33:e6:29:
71:33:9a:0c:2b:9f:03:fc:76:a7:ce:10:07:ac:d8:
d2:f7:3d:f0:8e:ae:f3:da:ad:79:9a:30:91:0c:97:
c9:5a:8c:4d:09:47:c0:34:f1:f2:7c:9e:c7:d5:12:
e8:03:bc:03:1f:0c:d5:71:a8:eb:40:62:78:62:10:
23:28:83:ff:2a:e6:d7:bf:fa:35:a9:d3:39:f0:22:
cc:2c:ec:e8:0c:b0:ee:29:35:3b:f1:ac:1e:ae:09:
2c:62:e9:05:f5:8d:9f:f5:af:00:f0:99:01:a7:2f:
a0:c8:20:b1:6d:91:ed:11:1a:89:13:fa:67:33:5c:
51:a5:32:08:e4:f3:8b:08:da:42:06:bf:e6:8d:08:
bb:fc:e5:57:ea:a3:5f:65:24:4b:36:db:d3:92:a0:
e8:9c:02:d2:d6:ed:1a:86:3a:dc:2c:67:a1:6e:d0:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:CC:B9:70:CC:C6:0F:15:83:8C:64:77:5B:4D:26:D9:C9:38:EF
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:23:1a:cb:42:30:4d:e0:c6:60:92:03:ca:f1:95:fa:46:c4:
12:32:c7:e5:65:f4:48:49:05:fa:70:fa:37:8a:46:42:32:47:
18:cf:29:1a:62:87:d3:be:d7:c6:c0:2a:90:f2:8a:31:ca:cb:
c5:c7:f5:a9:0e:7f:d3:d9:a8:8e:64:3d:97:83:90:60:62:99:
6d:04:14:06:aa:a3:10:21:b9:d1:89:13:fe:51:d6:a0:f5:67:
6c:77:3c:35:d6:f2:dc:27:f8:2f:6c:60:fa:f3:ab:66:0a:30:
26:16:7a:71:e9:04:34:1a:d9:67:71:91:af:71:93:55:f3:6a:
3f:78:0b:51:b8:87:6b:a8:dc:5d:e4:87:04:fc:42:a9:50:20:
a4:63:c9:77:e5:e1:b9:fe:47:1e:bc:90:03:22:3e:1e:21:75:
49:ef:8c:1c:0b:d3:eb:af:00:d0:73:d2:8b:af:dd:07:4f:43:
f9:26:9e:0d:ac:d8:9c:ea:13:3f:8a:df:64:0f:b7:fa:0d:4a:
43:bf:3a:69:52:c8:63:0a:84:8f:52:92:7c:ec:d7:85:96:ea:
40:13:6d:fb:2c:54:ba:c2:8d:91:bf:aa:0c:a4:42:8e:c8:91:
aa:10:40:e5:f8:a4:66:2e:84:b8:3e:1f:73:fa:9a:27:52:b0:
10:a3:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:08 2026 by rpki-client