Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: F0mFqX4NIPdc5FUEOLsaJR728EjrJza9CJ2kCIW7J1I=
Subject key identifier: 6C:83:91:B6:FA:84:8C:DC:6F:A1:FA:89:1F:61:1C:B5:BB:EF:61:57
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 01A13D817BDF11B677631C3F0B7A54069369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 03:00:58 +0000
Manifest this update: Thu 15 Oct 2026 03:00:58 +0000
Manifest next update: Fri 16 Oct 2026 03:00:58 +0000
Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: yTuch8ZhnrJF5w9teWv9+OIkjQ/M8hGYWXusNUhV41Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:7b:df:11:b6:77:63:1c:3f:0b:7a:54:06:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Oct 15 03:00:58 2026 GMT
Not After : Oct 16 03:00:58 2026 GMT
Subject: CN=6c8391b6fa848cdc6fa1fa891f611cb5bbef6157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:60:50:ab:2c:12:e4:31:60:2e:50:a1:7b:
e7:c4:a4:ed:02:fa:78:af:cb:36:87:44:a1:54:3c:
5c:de:bc:d7:8c:17:5f:b4:48:ac:c7:04:cb:04:c1:
31:e2:f1:01:9b:83:32:05:1c:51:d0:1f:77:68:13:
85:93:80:79:50:54:bb:ae:d2:d6:eb:b9:86:e9:42:
84:b0:bd:fe:02:05:61:07:6d:a7:cd:1f:02:c4:12:
8f:6f:a7:6a:f4:a6:7b:ac:7e:0f:99:af:ee:21:82:
86:20:0b:8e:7d:36:3f:7f:c0:00:58:1e:dd:57:b3:
88:07:ac:2d:0e:4c:44:a2:f8:d9:09:45:ee:f2:40:
9d:9f:ff:d3:f4:0e:e7:b4:10:1e:ef:7b:31:7a:15:
d3:4c:b2:2a:31:f5:b1:1a:18:bd:5a:55:65:0a:d9:
bf:31:ad:23:23:ab:cf:53:f9:8a:45:d9:20:2c:cf:
e0:09:aa:c1:2f:a7:35:f8:e4:e1:4e:f8:4d:b6:91:
06:80:91:3d:87:49:a5:0c:15:0f:52:f3:9a:96:e0:
c5:58:38:a0:6d:17:e2:73:35:ef:0b:d5:31:22:e1:
72:90:bb:81:b1:40:ae:0a:29:74:d6:df:1b:04:29:
2a:f8:77:dd:9e:67:72:f6:43:ee:bd:56:a9:54:4b:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:91:B6:FA:84:8C:DC:6F:A1:FA:89:1F:61:1C:B5:BB:EF:61:57
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:70:f3:0e:18:80:dc:19:90:b2:18:61:db:9f:df:71:3e:
23:1e:90:e4:f1:93:1c:7d:6d:b5:c5:04:e7:cd:29:0e:21:24:
ce:6a:e6:ff:ee:7f:8a:da:52:a9:c2:6a:c0:f0:7f:e0:85:4c:
d9:e6:e1:75:48:89:52:d5:fd:08:9f:c1:98:cd:4f:ee:82:c0:
ea:2c:fe:8b:9f:a7:31:5f:d0:44:37:a5:09:40:d4:3f:b9:04:
3c:37:30:0d:91:a0:01:cf:35:82:ee:49:80:30:df:3d:06:25:
c3:f6:19:68:20:80:11:6f:b6:57:98:a4:65:cc:d0:f2:5b:46:
e4:58:a6:9d:22:87:5d:79:e7:7f:f4:1b:b7:dc:8b:18:78:b7:
6e:28:02:79:cd:df:f2:2b:4b:ab:59:b5:d8:12:65:3b:45:65:
dc:70:f7:96:cf:29:c5:7f:7c:d5:ee:ff:b2:48:c2:2b:e9:ae:
3a:af:90:28:c6:e0:d4:67:7f:13:67:16:54:28:94:9d:28:4b:
ac:89:2f:9c:b0:a8:78:02:9f:92:5b:59:44:f1:5d:6c:58:81:
05:a7:e3:74:37:f3:98:b9:a0:a6:e5:88:5c:e3:44:64:a1:a0:
5e:33:1b:3e:11:56:0c:e8:34:58:c1:f1:c7:be:0b:43:be:1b:
0a:57:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:39 2026 by rpki-client