
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: 4QaYD8ruGfJy2xiZB7hcrAlKctlxAOrbMH3gN++zD7Q=
Subject key identifier: 11:70:E9:81:F4:07:33:0F:AD:E2:FF:21:27:FB:E5:5C:98:57:D7:89
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 01A16345D55CB38FCDCC476BEAD39E902EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 1ABB
Signing time: Thu 22 Oct 2026 11:01:23 +0000
Manifest this update: Thu 22 Oct 2026 11:01:23 +0000
Manifest next update: Fri 23 Oct 2026 11:01:23 +0000
Files and hashes: 1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: Kdcy1i/WTIF8vytgeoIeZXV0NxqJWDin2UAp6Zn9H84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:45:d5:5c:b3:8f:cd:cc:47:6b:ea:d3:9e:90:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Oct 22 11:01:23 2026 GMT
Not After : Oct 23 11:01:23 2026 GMT
Subject: CN=1170e981f407330fade2ff2127fbe55c9857d789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:c2:1a:1f:77:a6:8d:0d:ef:46:01:a2:a4:
af:32:f0:81:a5:77:fa:8d:6a:44:e6:f7:de:49:4e:
1d:1a:69:41:b1:e3:26:fa:01:b7:84:eb:f1:70:e4:
37:8b:0f:63:fe:68:cd:c1:12:b2:8f:57:4f:04:01:
56:1f:75:51:df:0e:17:c9:7e:10:d4:5b:c4:95:a4:
4d:a8:89:8b:f8:31:06:5b:4a:7d:67:d2:61:02:ba:
6a:c9:1f:e6:20:0a:7b:ff:4a:b9:22:6f:73:12:f3:
0a:fd:89:b5:af:af:68:6e:fd:6c:d2:99:bc:95:8c:
9c:ab:72:99:8b:4b:d1:e4:9a:18:1c:f9:8a:f1:a2:
58:d9:ef:ba:a7:9c:a9:54:9d:fa:35:60:de:ad:de:
cf:10:34:4f:19:48:eb:b9:d4:60:f9:84:f6:8b:2d:
f8:ab:97:5b:26:5b:4c:37:46:81:49:28:78:6d:f4:
28:5a:6d:bb:75:97:8b:69:f2:f1:80:77:47:33:b5:
dd:fb:41:73:a1:7e:fa:22:1f:bc:13:f5:81:51:28:
01:db:5c:a7:41:66:21:dd:17:2d:bd:1f:92:ec:e6:
be:fe:97:d9:c1:b1:f9:ec:b2:4c:46:d4:8b:1c:c0:
1b:3b:75:8f:61:e7:a1:75:31:91:3a:8c:6d:37:1a:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:E9:81:F4:07:33:0F:AD:E2:FF:21:27:FB:E5:5C:98:57:D7:89
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:51:94:16:27:9d:1d:85:8e:17:0c:0e:54:78:80:3c:8b:
19:fb:7a:5c:00:ed:07:e7:07:4f:ea:55:0d:5d:8f:30:b3:6a:
21:61:c8:a7:9f:07:ed:86:91:36:b8:b3:9d:9c:45:c9:d0:4b:
ff:98:f3:b0:74:12:b7:39:46:6c:11:48:81:b4:0b:16:01:73:
c5:c6:99:4a:18:af:9d:64:d1:ae:3a:bd:75:75:cc:e9:9f:d3:
8e:e7:0a:44:50:e9:08:f4:33:ed:51:26:5d:9b:88:59:6c:25:
ae:9c:10:aa:72:41:a9:c4:43:5b:5c:5b:75:0b:28:95:73:a4:
9e:5e:77:29:7c:bd:20:06:6c:ea:e4:24:b4:cf:15:6c:d2:2b:
06:f4:d6:14:ca:07:84:1e:aa:52:ff:33:d2:56:7e:7d:c6:df:
c5:82:ec:b0:5b:27:94:d7:a4:75:e1:e1:64:d2:4c:3d:53:f9:
a1:25:16:ef:b6:34:8e:31:e6:65:4a:f6:30:a8:2b:8d:7c:b2:
b3:4b:95:2d:1c:5c:07:9b:0e:fb:3d:c3:14:49:23:91:df:37:
f5:df:86:37:27:d0:eb:2b:f3:cd:d2:24:9c:7f:6e:91:65:72:
e1:85:f4:1f:b5:a2:dc:7c:20:4f:96:98:9d:69:89:f9:95:62:
e4:9e:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:41:19 2026 by rpki-client