Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: msuyKwgjY91pyejXHszcyMbOTr/f2pKg6vPw0hmW4OI=
Subject key identifier: 04:F2:FA:41:FB:9D:AA:1D:62:4B:41:8F:63:DF:B4:F9:FA:BC:1B:F6
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 01A190555B4921B2EB2F22044B16D425B2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: 0149
Signing time: Sat 31 Oct 2026 05:01:15 +0000
Manifest this update: Sat 31 Oct 2026 05:01:15 +0000
Manifest next update: Sun 01 Nov 2026 05:01:15 +0000
Files and hashes: 1: 3zRj7f9bkFjmmucQ1U0uW35Pbnk.roa (hash: w5C2c6MGi848WfxaniP2aATV+Se3XfwgaY489EQ+ZuI=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: 5FFooCRDS9Hpx+9ogbrugiqOxYQG20GhGRG31Xw7Sws=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:55:5b:49:21:b2:eb:2f:22:04:4b:16:d4:25:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Oct 31 05:01:15 2026 GMT
Not After : Nov 1 05:01:15 2026 GMT
Subject: CN=04f2fa41fb9daa1d624b418f63dfb4f9fabc1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:73:05:8e:eb:22:4f:00:97:7e:d4:bc:ce:
d2:60:4e:d2:a4:00:48:ac:7d:fd:6e:f9:0a:09:f9:
22:8e:c0:af:63:f3:3c:1d:25:4a:de:c1:ae:0c:45:
a6:8e:61:38:fe:a7:0b:38:44:f2:4a:4d:7f:cb:a3:
0e:cd:bc:81:84:9f:fb:fe:c8:b9:39:18:de:c9:32:
4e:7c:1a:ee:4a:74:49:14:0f:fc:89:a0:88:61:4b:
1f:3b:f4:d6:12:70:5c:16:01:b3:94:de:97:4f:a4:
09:42:0c:3b:46:0b:03:d0:16:c5:85:af:c5:c8:dd:
0f:44:c3:f1:ee:ff:90:cd:a2:c1:06:e2:44:85:ef:
96:c9:a0:df:dc:0c:d7:b7:75:3d:ff:3a:e2:f7:f9:
ef:d3:93:70:4f:af:c3:32:ed:e6:95:dd:1f:82:52:
3b:f4:9b:93:aa:ac:41:1a:b6:79:25:7f:d1:f1:2b:
62:41:e2:59:41:d4:b3:c0:64:c3:e2:fd:c6:1b:82:
88:c3:0a:88:12:73:08:80:79:e6:4a:63:6a:59:55:
bc:fc:c5:1d:f7:ce:09:12:da:27:68:4d:a3:20:36:
bd:cd:12:92:3a:13:d4:16:80:d3:95:2a:3c:83:74:
38:03:f2:18:87:62:9e:09:79:f7:fa:2f:11:94:3b:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F2:FA:41:FB:9D:AA:1D:62:4B:41:8F:63:DF:B4:F9:FA:BC:1B:F6
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:be:d2:b9:be:d0:3c:c2:76:00:87:7f:f3:bc:05:06:97:
bc:22:e9:af:46:a7:97:5d:63:a8:15:a4:11:f7:c4:44:aa:0f:
53:52:6d:73:3d:86:64:38:8d:f7:ea:ed:5d:49:0f:42:dc:c5:
51:c4:4a:42:4f:62:77:78:a5:ab:49:ff:f6:98:97:65:b3:07:
7f:56:aa:c4:99:6b:3b:a6:f6:94:96:f0:a2:5d:78:ef:ff:b8:
ca:a6:a6:66:27:44:c8:a1:f2:aa:55:17:60:bf:27:f8:7f:15:
17:d1:1f:42:c2:b1:3e:90:38:9e:9d:e3:65:28:20:e1:98:cd:
8d:1c:45:50:85:80:e9:23:1a:d0:f9:f2:b5:39:e2:e9:ec:21:
80:b8:ae:55:2a:bf:05:5c:76:e8:cf:78:a0:2d:8f:d7:a6:fb:
85:02:84:59:9e:eb:71:c9:73:b9:b4:e5:62:69:c9:74:f3:9e:
bf:62:30:d8:5d:01:4e:74:9f:21:2f:e1:41:8f:2c:c2:e3:73:
53:ea:32:da:16:df:56:cc:55:1b:6e:78:28:7c:79:a6:4c:46:
0c:bd:49:1a:a0:9f:04:09:87:91:97:f3:cb:33:2c:da:31:43:
bb:73:d5:12:1b:5c:e5:d8:2c:2b:a0:12:99:58:0b:81:45:e0:
b3:dd:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:22:35 2026 by rpki-client