Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: 4uJLVACZjikBvkyyeNCxfHzoZn3+KRYCbhISgCNTeYw=
Subject key identifier: 5D:6F:CF:85:96:F3:76:BC:53:25:3B:A0:52:70:51:5D:F2:29:DF:42
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 01A13B9320CEBBD6AC7681FA60B60B8582D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 18:01:00 +0000
Manifest this update: Wed 14 Oct 2026 18:01:00 +0000
Manifest next update: Thu 15 Oct 2026 18:01:00 +0000
Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: vx3A3R2bITiujNWSwlu5RvygrFVBLuGlGJ864IFb9XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:93:20:ce:bb:d6:ac:76:81:fa:60:b6:0b:85:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Oct 14 18:01:00 2026 GMT
Not After : Oct 15 18:01:00 2026 GMT
Subject: CN=5d6fcf8596f376bc53253ba05270515df229df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:96:64:2e:b8:cd:ef:e6:23:ef:3b:78:37:
e1:6e:c7:f8:ff:25:c2:8c:ab:ca:5c:58:af:c1:dc:
aa:7e:73:2b:fc:4a:28:cc:e3:b0:df:f4:26:2e:cf:
95:bf:89:77:0c:79:6a:17:6d:c8:32:37:aa:9a:86:
e9:34:54:ee:b2:ba:be:b2:07:b6:6c:65:4f:ae:93:
8d:71:d5:0c:7f:6a:d1:41:83:95:bd:e3:77:aa:b1:
91:76:29:50:37:86:55:82:c7:cb:98:f6:a4:c8:88:
3d:34:34:e6:d7:fc:20:6f:74:93:29:b1:b8:bb:a4:
1f:eb:99:cd:00:68:fc:20:de:3e:36:3f:36:b5:4a:
58:0e:50:9d:28:08:4b:9e:80:c0:41:8f:c5:65:fc:
53:97:dc:5a:34:89:64:e0:98:2f:1a:31:3f:bc:1e:
26:82:dc:00:88:e6:0f:19:c6:c3:f7:48:f3:a0:40:
f8:2f:c5:e6:88:23:bb:c6:58:c1:17:7f:43:71:dc:
67:9b:c7:24:d7:8c:92:50:a4:91:b8:0d:a4:9d:82:
e6:b7:93:2b:7e:7a:99:59:81:37:99:d5:4f:46:36:
38:a7:f3:51:89:05:98:51:3b:5f:c1:0b:97:06:0f:
46:01:5f:59:ef:e4:23:f2:65:d9:28:72:a7:99:bd:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:CF:85:96:F3:76:BC:53:25:3B:A0:52:70:51:5D:F2:29:DF:42
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:91:0b:cd:e9:60:c2:7f:64:d5:ea:b3:33:98:3d:1c:80:00:
c1:a6:13:f8:d4:bf:06:49:ce:78:c3:cd:50:49:3b:ab:6f:ef:
01:e5:7d:89:37:10:a5:f1:65:54:b2:b0:ee:0f:8a:9b:96:e2:
d3:d2:d8:74:a4:8c:66:03:5e:e8:80:29:3c:64:a2:25:1d:e4:
48:35:06:91:23:ef:72:05:72:29:ee:f7:c6:6e:05:0b:64:21:
6a:fb:60:cb:e4:3f:0c:9b:d6:8e:a2:74:8f:69:94:bc:72:be:
ac:9c:0e:07:ec:32:77:6a:94:e9:96:f1:68:7e:32:22:95:4a:
6b:b7:86:51:b5:63:31:01:05:e4:34:f4:c6:72:d8:5c:df:94:
2e:24:8c:07:e7:92:d2:fa:3f:09:54:0b:9d:7a:e0:11:e9:21:
a9:34:31:5e:56:4c:f1:05:92:aa:13:19:38:8a:cb:dc:9e:78:
0f:6d:f7:42:1b:00:7b:30:b8:69:b4:00:5b:1e:15:07:84:49:
43:9b:26:10:8b:4f:51:8d:88:4d:f0:d7:95:ba:5c:0e:26:a9:
54:94:24:73:61:cb:91:f1:fb:1d:0e:45:87:6e:1a:eb:c6:00:
19:e1:52:44:e3:49:33:0b:93:77:7a:49:43:39:a6:b8:d1:14:
be:bd:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:16:41 2026 by rpki-client