Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: 1G1IaRFbHdYwRAuulq78Bv1ZQzKzJ617Ti4HciyDE9E=
Subject key identifier: FD:86:91:BF:07:95:84:0E:84:DC:3E:7E:6C:E2:6B:8B:36:EC:D0:EA
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01A183077DCD26AD90ED23B9E265202A5320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 16FB
Signing time: Wed 28 Oct 2026 15:01:08 +0000
Manifest this update: Wed 28 Oct 2026 15:01:08 +0000
Manifest next update: Thu 29 Oct 2026 15:01:08 +0000
Files and hashes: 1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: wil4KDSdpnTpygGzSsOCvJgeAYrkWOTRNS7ZA4pOYIY=)
4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:7d:cd:26:ad:90:ed:23:b9:e2:65:20:2a:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Oct 28 15:01:08 2026 GMT
Not After : Oct 29 15:01:08 2026 GMT
Subject: CN=fd8691bf0795840e84dc3e7e6ce26b8b36ecd0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:9f:2e:2b:b1:3b:cf:40:02:1f:ac:60:bc:
9c:89:57:46:fd:91:4f:fa:53:4b:92:d2:98:1f:69:
73:16:d4:bc:33:be:6b:4c:87:a7:93:88:c0:c4:72:
19:1e:b3:65:02:a5:3e:b6:db:d9:27:6c:79:a5:a0:
8a:af:a2:eb:7e:17:4c:01:1f:9e:7b:31:f2:a3:e5:
78:fa:0c:5a:93:bf:17:c0:16:ef:78:f2:e8:8d:84:
a1:4d:74:2f:98:47:82:c2:bf:73:55:d2:6e:9f:bf:
09:d4:55:25:f7:09:9f:4c:3c:45:cb:ab:fb:c0:7c:
2a:99:36:15:29:81:b9:da:9f:47:87:30:54:94:a6:
67:44:28:6b:34:cc:ff:8c:75:6b:b1:01:82:d7:45:
45:e5:82:4e:02:6f:01:7a:e8:0f:a4:0f:15:a3:9d:
8f:3e:2e:db:9d:77:43:95:82:e5:ae:e0:96:7a:bd:
d3:e1:f4:cf:6c:25:65:f8:a5:41:b2:bd:cc:8a:64:
d0:50:21:08:4b:af:3c:5c:70:54:4e:6e:5f:e0:3d:
87:ca:b3:df:28:e8:0a:e0:e2:b5:fa:1e:7c:0a:dc:
b1:ba:f4:6e:27:a1:7e:fc:85:10:fa:65:82:c2:b5:
5f:6e:52:fc:bb:81:c1:22:d9:b0:e2:a4:b4:e5:f0:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:91:BF:07:95:84:0E:84:DC:3E:7E:6C:E2:6B:8B:36:EC:D0:EA
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:1d:d9:92:7c:dd:00:ed:cf:21:9b:1c:e2:90:96:ee:10:
b6:c7:07:e2:77:88:3c:70:02:0e:04:74:58:8d:c9:42:e6:ec:
47:66:4e:f6:f2:37:8f:cd:a2:3f:7d:7a:7f:ed:ed:6a:97:b6:
63:f7:bf:a1:a7:cc:00:fe:52:44:dd:c7:c2:56:87:16:a4:94:
5b:ac:cc:cd:88:21:8d:10:a7:c5:ef:e9:9e:d8:02:bf:3f:ef:
39:11:97:9a:1c:00:2c:5b:7b:2e:14:bb:d6:3d:91:07:d0:72:
a7:9e:58:ed:fc:46:78:19:a0:3c:8d:96:2f:36:4d:a0:cd:b5:
b8:15:a5:80:58:17:69:4d:df:41:c2:b0:9e:a8:62:b8:0d:a0:
25:74:f0:e9:9c:2a:d2:ea:46:29:27:25:f1:e1:ef:e6:72:3f:
8c:d1:3b:58:70:a8:28:3d:3b:08:43:60:e6:75:40:8e:e4:8a:
3f:b3:7d:a9:e8:ff:81:c7:65:bb:d5:8c:68:dd:f5:77:d1:fa:
3e:1b:8e:a1:4d:3d:fc:71:fc:86:06:13:a2:85:c6:76:a8:49:
db:1a:2a:c8:aa:a7:7c:be:ff:26:ba:90:87:3a:3d:80:12:5d:
a9:a5:34:19:34:d6:b0:18:5b:fa:c0:5e:88:6e:bc:4e:89:07:
61:cb:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:38 2026 by rpki-client