Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
File: FQo3NJOhCsuvMf30RWF6YsTUb88.mft (raw, json)
Hash identifier: WjohnEbmbxWcpKtlXtQYfh1nhVQ151maJ/3U7vTl2Ek=
Subject key identifier: 4D:D0:11:0C:D7:5F:ED:00:38:D5:B0:39:28:FA:0B:EF:5D:F0:C4:A5
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A17FCFF666620872FB20BAE7A02BBD9A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
Manifest number: 0247
Signing time: Wed 28 Oct 2026 00:01:37 +0000
Manifest this update: Wed 28 Oct 2026 00:01:37 +0000
Manifest next update: Thu 29 Oct 2026 00:01:37 +0000
Files and hashes: 1: 1-BTIrppaQbq0VeepjoEkORTmMOY.roa (hash: avheX2CZtoVYwITGdmKR4XAbWKm6NWMhnWvEplfDO9k=)
2: FQo3NJOhCsuvMf30RWF6YsTUb88.crl (hash: Z0rm763TXPXSHvlK/uI1Gbfjrjq823YsqLb5Oule1G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:f6:66:62:08:72:fb:20:ba:e7:a0:2b:bd:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Oct 28 00:01:37 2026 GMT
Not After : Oct 29 00:01:37 2026 GMT
Subject: CN=4dd0110cd75fed0038d5b03928fa0bef5df0c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:f6:a3:e1:5b:2d:ff:46:63:c8:46:1a:2c:
75:80:c7:6f:78:ca:38:14:8d:a1:0a:b5:de:fc:47:
5a:5f:e4:96:57:a1:f8:99:21:0d:c7:96:30:44:42:
e2:ed:39:42:69:33:f0:58:27:af:b3:12:0a:ce:6c:
12:e3:20:f1:e8:cd:45:31:77:77:a2:df:a8:ad:82:
79:f6:ca:b0:40:89:1a:8b:36:af:e7:e9:ee:03:cc:
73:b2:91:20:ba:ee:e2:e9:a6:f5:21:19:90:ae:e5:
66:a4:63:41:93:49:e3:12:f5:f3:68:f3:85:e0:17:
04:28:63:06:92:3a:02:9a:f3:99:58:74:5d:9e:7b:
42:10:fa:bc:28:58:ca:36:16:42:f9:a8:25:1a:66:
7d:f6:37:d2:2d:46:a0:a4:63:45:77:4f:71:ec:96:
b0:d2:0e:6f:16:e9:6a:99:05:b7:34:b7:bd:33:d9:
71:4d:6a:83:df:67:e5:8d:58:f9:b6:2e:22:2a:24:
cc:b6:af:4d:9f:c1:da:13:34:6f:39:fa:57:03:6b:
9d:04:c3:a3:b6:97:d2:01:8d:65:64:0b:6b:16:a8:
f5:50:40:7d:f3:1c:f4:ee:71:fa:be:26:26:f8:89:
19:36:86:15:b5:8a:55:be:02:45:f8:6e:d2:10:21:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:11:0C:D7:5F:ED:00:38:D5:B0:39:28:FA:0B:EF:5D:F0:C4:A5
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:85:a9:1f:30:54:1e:91:21:a0:2d:89:0c:c1:94:af:b1:04:
8c:6f:2f:df:51:96:ba:83:59:91:62:b0:e0:78:a5:98:49:ea:
45:4c:19:94:0c:a7:66:09:74:b2:3c:23:8d:b4:af:50:ce:9f:
f3:cf:b8:d0:de:4d:4e:f4:c5:b9:69:26:df:0f:dc:ef:bf:df:
8c:9d:a1:dc:40:39:38:c2:09:5d:46:5e:26:91:58:12:d8:10:
bb:8e:13:6e:91:b5:b2:54:cd:e2:14:c7:49:87:c9:7c:4c:67:
46:8c:15:89:82:01:5e:f8:b0:4d:43:1a:3b:53:ff:6b:43:8d:
20:9b:7d:12:a3:9b:56:5c:a6:e7:03:3f:b3:c4:06:4b:0c:ba:
31:78:b3:52:32:d4:67:31:ec:42:18:3c:dd:44:89:4c:08:af:
57:07:03:58:3a:2a:c4:d5:20:3f:9d:3e:ef:02:0a:e5:bf:95:
6c:ca:73:a0:14:61:5e:8d:3f:5d:9f:c3:29:08:0c:ec:49:1f:
a6:62:5b:ab:41:31:9c:cc:72:29:fe:cf:89:0a:0c:75:8e:97:
30:da:93:3d:72:7f:ac:01:00:ce:51:ba:2f:3f:d9:16:f4:69:
42:10:da:2a:5b:2e:2c:3b:d4:23:e0:17:e8:8b:63:1b:ab:df:
b7:00:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:05 2026 by rpki-client