Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: YYn7CxalJY+qf8lJTnmjErTxJxysxaawsge7OHS1f3o=
Subject key identifier: C5:45:45:7B:86:30:AC:F2:A0:D0:9C:59:14:6A:AD:E9:09:10:D0:89
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 01A16EDC4F93913CA53472A7C9329BBB1DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 1AC1
Signing time: Sat 24 Oct 2026 17:01:34 +0000
Manifest this update: Sat 24 Oct 2026 17:01:34 +0000
Manifest next update: Sun 25 Oct 2026 17:01:34 +0000
Files and hashes: 1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: rQoTwihDDRo2Mz9RvsKxFjNU05MY7pWF9b3exU+AhbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:dc:4f:93:91:3c:a5:34:72:a7:c9:32:9b:bb:1d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Oct 24 17:01:34 2026 GMT
Not After : Oct 25 17:01:34 2026 GMT
Subject: CN=c545457b8630acf2a0d09c59146aade90910d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:14:9c:db:ca:93:c1:20:58:5e:ff:0d:fc:
75:df:0c:c1:6f:77:cc:60:89:ce:dd:0f:44:34:99:
48:b0:2e:d0:cc:2c:60:95:27:fa:1b:e8:5d:b2:ba:
01:72:a3:21:dc:70:7a:52:8a:de:f1:49:d5:4c:99:
2e:84:62:48:4c:db:a9:10:28:af:2d:af:40:6f:6f:
ee:c1:00:a5:f7:4d:fd:5e:e4:ac:6e:8e:1e:86:c1:
e1:96:e1:d6:e6:6c:dd:e9:4d:67:0d:59:88:38:cb:
d5:bf:ec:70:4d:78:b6:53:12:a7:86:49:01:42:4a:
88:e8:ae:c9:96:61:44:40:62:c1:6c:e6:92:a8:82:
08:3e:4f:b3:c2:02:3a:59:97:0b:ed:aa:dc:7c:d5:
b0:75:44:a1:4b:8e:e5:8a:c3:ab:88:6e:72:c3:33:
c9:ab:61:79:bf:21:6e:61:fb:0a:cf:f8:17:c8:59:
89:18:f1:45:fe:32:4c:aa:12:37:f3:aa:31:4f:da:
d0:40:b2:dc:77:96:5f:b7:c9:2e:e8:16:6c:cd:f1:
c4:13:05:09:df:e8:5c:5b:e4:fc:50:dc:25:ce:ce:
de:4e:1e:cb:49:9a:e5:eb:dd:1a:78:25:ff:aa:b4:
c3:06:a5:ba:e4:1b:54:83:dc:cd:42:9f:e5:1d:94:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:45:7B:86:30:AC:F2:A0:D0:9C:59:14:6A:AD:E9:09:10:D0:89
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:10:4e:25:98:35:77:9b:a8:dd:a5:cf:b8:ed:8f:0e:00:
21:2d:3a:34:5d:60:d8:30:06:57:38:6d:87:32:ae:d2:4b:eb:
ca:1d:43:b8:f6:41:3f:9f:25:ef:2e:7a:e8:17:da:58:9e:25:
e7:f6:6d:37:da:56:15:a1:07:46:e0:69:0e:49:e6:de:df:6d:
62:5f:b5:8c:9a:94:09:b5:5c:2f:56:a5:00:c3:43:7c:4f:5d:
23:e3:fa:f1:ce:c5:b1:ce:62:74:04:2d:67:e6:fe:3c:3b:68:
e4:98:35:29:66:9c:0b:71:22:10:39:e9:90:a8:2e:90:f8:e6:
ec:20:39:db:87:f5:c2:d4:53:ce:e4:24:43:2d:40:81:57:f6:
90:1c:8c:8f:fc:ab:2d:27:84:e7:87:23:05:7f:7c:ea:d8:fe:
73:c0:fb:11:c2:f9:4a:d5:68:c2:2b:22:e7:3c:9a:81:5d:d2:
61:75:9b:87:22:fd:0a:b3:f2:06:83:5f:7b:d2:67:8e:c8:92:
a3:8b:f0:92:58:58:55:c4:d2:cd:f3:0e:dd:fd:7b:35:0d:37:
1d:36:98:92:58:97:c5:a3:62:93:e7:b9:db:35:36:b9:8e:ce:
e7:a3:08:ec:86:f7:cb:8b:f1:68:cc:ee:b1:3b:72:0a:42:08:
91:1d:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:57 2026 by rpki-client