Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
File: F_2hoaCf3teimtqgN1JFpM7SPGg.mft (raw, json)
Hash identifier: WrJUIX3GVy0hr9GxuZwDxhlw8F80jn9tVEFZpuaD2UI=
Subject key identifier: A9:E3:FF:FD:97:B5:E2:02:F6:44:27:C9:D3:23:DD:ED:D0:8B:BB:CB
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 01A0EF2FC8F403F6969B0211D32E200759AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
Manifest number: 01C7
Signing time: Tue 29 Sep 2026 22:01:21 +0000
Manifest this update: Tue 29 Sep 2026 22:01:21 +0000
Manifest next update: Wed 30 Sep 2026 22:01:21 +0000
Files and hashes: 1: F_2hoaCf3teimtqgN1JFpM7SPGg.crl (hash: 0iay40CxfxovuNwjAwuGL+m/Bykes8v57XkhqonqLnU=)
2: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (hash: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=)
3: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (hash: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:c8:f4:03:f6:96:9b:02:11:d3:2e:20:07:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Sep 29 22:01:21 2026 GMT
Not After : Sep 30 22:01:21 2026 GMT
Subject: CN=a9e3fffd97b5e202f64427c9d323ddedd08bbbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:1e:48:9d:17:82:31:42:67:b3:68:ba:75:
26:4d:f2:d5:cd:72:50:0a:e7:dc:8d:57:df:90:b7:
0b:a3:c2:30:0f:67:eb:a8:45:d2:0a:50:f6:dd:a1:
70:f5:18:83:fb:64:af:21:c0:62:64:47:db:85:f5:
b6:c4:5e:df:62:68:0a:17:15:60:74:54:d7:91:bf:
eb:f7:e2:68:36:ab:bf:9e:54:80:b3:88:71:52:5d:
b6:fc:e7:72:e2:64:02:2e:e0:ed:c9:f0:3c:8b:2d:
75:66:e2:81:ec:83:e4:5e:1c:f3:d1:4e:25:0a:31:
0c:de:7f:5a:72:ea:b3:64:2e:48:fd:47:0c:aa:a1:
8d:7b:1d:f4:a5:7c:67:06:e7:7e:3c:65:ac:15:c5:
3d:46:5b:17:eb:8a:9b:42:39:40:2e:a8:82:1c:d2:
fd:7d:0b:d4:82:6a:14:0b:bf:e0:7b:70:df:8f:5c:
d7:5b:15:e9:1f:74:1d:aa:2b:22:1d:ec:3b:91:ba:
4c:4e:2c:d3:4e:67:07:03:1e:bd:bc:d9:d7:85:ba:
ee:08:8d:f1:85:11:e1:fc:ad:27:b7:ea:bd:22:81:
e5:99:98:74:fe:70:ee:cd:b5:96:c0:d2:c5:ce:0f:
e8:80:c2:2e:35:c8:6b:10:14:4e:9b:b5:03:da:70:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E3:FF:FD:97:B5:E2:02:F6:44:27:C9:D3:23:DD:ED:D0:8B:BB:CB
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:de:a2:6f:32:d7:59:29:aa:07:d5:64:aa:bc:ba:bd:3d:
0e:1e:9f:25:6b:0f:9c:9a:0a:3a:00:d0:ef:f0:d5:45:94:76:
35:cb:c2:3d:07:60:a8:37:b5:a4:bd:ac:2c:8d:50:ff:13:c5:
71:27:fe:9a:d1:c1:c8:88:6e:54:f5:ba:77:8a:df:66:cb:93:
60:a3:a2:68:26:e2:94:85:02:2f:86:bd:83:8c:34:0c:84:3b:
c8:3d:0b:ca:7f:ac:cb:93:57:46:73:c7:6d:6f:04:aa:27:bc:
a6:c4:60:84:c2:ad:9e:1d:1d:82:84:33:01:4b:83:5c:cf:9f:
2b:88:5c:26:a3:f8:de:f3:e4:81:c2:07:af:b8:ef:c9:c9:2f:
29:b1:8a:bc:42:09:87:bd:6a:fd:89:ea:84:72:cf:f8:53:cc:
f7:f7:01:1c:12:1b:ca:cd:86:59:aa:82:f6:b6:eb:36:84:c6:
8b:9c:4c:9e:74:d0:0b:47:f4:37:9c:89:59:0c:50:73:ad:6b:
34:f2:54:33:0a:ec:87:aa:3c:15:e3:eb:96:ed:5c:ee:9e:8c:
40:7c:3f:43:ab:f9:7b:1e:e6:01:8f:91:0e:be:ed:fd:33:1f:
cb:7e:48:79:77:3f:ce:1a:5e:0d:33:9a:8f:5a:d4:45:c6:55:
65:5b:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:52:55 2026 by rpki-client