Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: GngPaMbQAmEzYGSHT9bk8bg+sIi5eZZD3qb1rmpXFsU=
Subject key identifier: 74:B9:DE:6F:B8:89:07:41:81:6C:12:BA:78:DB:D7:14:BF:64:D0:89
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01A104003A368B8E82832A99041FF0A7FE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1A34
Signing time: Sat 03 Oct 2026 23:01:26 +0000
Manifest this update: Sat 03 Oct 2026 23:01:26 +0000
Manifest next update: Sun 04 Oct 2026 23:01:26 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: 9uVXai3ilxpCRYIwAiYpfzMnVbCZacwjU1ct8vEBopc=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:3a:36:8b:8e:82:83:2a:99:04:1f:f0:a7:fe:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Oct 3 23:01:26 2026 GMT
Not After : Oct 4 23:01:26 2026 GMT
Subject: CN=74b9de6fb8890741816c12ba78dbd714bf64d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:00:f7:81:f7:c6:fc:37:bf:1a:dc:51:cc:
14:56:bf:4f:14:c6:c2:88:6b:a1:43:5a:23:72:ae:
74:9f:78:73:78:15:a8:fc:6f:85:5f:5a:4a:04:6c:
30:d1:30:c6:14:4c:4f:57:38:69:49:1a:f3:f6:7c:
2b:5e:c0:7d:87:31:d8:97:c7:a6:7f:9b:bc:4f:91:
64:a1:83:6c:cb:f6:d3:e8:2a:5b:58:9b:15:b0:c2:
56:12:95:d3:a0:74:2a:60:8e:c5:27:75:3d:fb:fd:
7e:44:1d:93:ad:fb:0c:77:30:8c:fd:f1:ec:05:c3:
72:ea:cf:c7:a1:2d:b6:b0:aa:f2:84:9b:39:0a:f5:
d7:5d:46:94:07:c0:00:33:aa:02:09:7b:e3:b2:0d:
b2:fd:a0:f4:84:0d:76:e1:f5:1d:1b:b0:59:9d:6b:
27:70:05:da:58:95:a1:52:7c:b6:6f:9d:48:ad:79:
62:f0:dd:04:d0:27:2e:53:41:fe:61:ae:c1:e2:ee:
94:f5:57:0b:78:53:f2:ee:b4:87:ff:5b:de:54:0c:
2c:ff:88:c1:03:5c:0c:2c:75:47:f5:62:12:39:43:
78:88:b4:59:bf:f9:f8:a5:0a:f1:60:00:b2:18:46:
23:7f:40:0d:a7:d1:de:5c:9f:3e:eb:69:23:96:34:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:DE:6F:B8:89:07:41:81:6C:12:BA:78:DB:D7:14:BF:64:D0:89
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:67:7b:8d:74:0f:6d:28:e4:b9:21:f1:a9:95:54:e0:a0:
94:ee:4f:ed:62:75:d7:e8:12:58:64:92:9a:c3:a2:25:f3:e0:
85:84:f3:10:fb:6d:5d:a4:ba:66:18:f9:20:6e:ec:a7:88:8e:
5c:ec:91:18:75:22:62:8e:c3:60:3e:8f:44:70:87:64:63:d4:
67:91:2d:08:9b:57:7a:a7:da:45:ce:30:7d:4c:e2:44:94:eb:
bd:68:68:73:7e:b8:d5:68:4c:4a:09:ed:4c:ed:2b:60:fc:00:
ef:28:50:03:54:fb:06:42:58:7c:3d:7a:b1:60:d2:3f:9d:cb:
93:fb:1e:82:66:2e:d9:59:e2:74:c7:70:51:c3:40:89:5c:db:
da:49:2e:16:4a:54:79:ab:58:54:d4:c0:a9:66:04:a0:2c:08:
22:09:cd:36:09:43:56:2d:25:c6:b2:5f:2d:2f:81:c5:c4:9f:
c5:85:ff:88:d8:ab:56:cc:be:13:04:65:38:22:36:f6:8d:3f:
14:e0:17:24:b4:2f:fb:5d:11:0d:82:27:c3:74:db:e4:80:5d:
b4:86:1a:3c:34:65:9c:86:c8:3f:30:eb:40:4c:0c:f6:ac:f8:
2f:bd:9f:4a:47:17:3e:6d:cb:2f:f0:b8:8b:74:08:5f:46:3c:
d3:93:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:37:21 2026 by rpki-client