Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: xHBxlIIXKKKnoC71xy4P3XlwOwmq8Ueoo2vDjJbsDoY=
Subject key identifier: E4:38:79:57:96:F6:0C:96:3E:AD:B2:09:B5:43:DC:AF:39:8C:63:2E
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 01A1675993988CF2068013FA4ED8E69D7EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 1AC0
Signing time: Fri 23 Oct 2026 06:01:25 +0000
Manifest this update: Fri 23 Oct 2026 06:01:25 +0000
Manifest next update: Sat 24 Oct 2026 06:01:25 +0000
Files and hashes: 1: CwEHiw8-rD_vPe4opG3JdCk-9XU.roa (hash: 5Mq6aRR/m+E+HsVhHVaZrrn3wbosNxJ4KE2lUUUVryc=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: JgAoGLkcI2YS9iFdwGLWPNPQj6eVmJWbS5COZKjOnvE=)
3: sixJN22c65-58IzEJ-pKD3oInH8.roa (hash: Z/jEsl745Xwfy/+IpISYY9PebeGSQrh3/r+kN3H/PrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:59:93:98:8c:f2:06:80:13:fa:4e:d8:e6:9d:7e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Oct 23 06:01:25 2026 GMT
Not After : Oct 24 06:01:25 2026 GMT
Subject: CN=e438795796f60c963eadb209b543dcaf398c632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:45:73:3c:a5:f5:e4:9b:89:18:c3:87:e4:
bc:fd:4a:eb:3d:6a:5d:04:e9:aa:5d:22:46:1b:72:
d6:65:8a:2d:bd:45:92:e3:17:5d:b7:de:b4:54:14:
d5:5a:0b:b2:de:0a:37:71:66:06:84:65:f9:64:fa:
db:c3:89:bf:ad:0f:df:20:74:a7:8d:d0:6c:dd:9c:
de:d6:84:f4:92:3c:b5:e5:66:52:3f:38:32:84:4d:
8f:95:b0:37:5b:26:4b:81:8d:3b:04:25:22:ba:fd:
24:eb:f0:a8:43:cb:e6:e8:26:d4:09:ee:48:27:1f:
dc:78:24:b7:61:b4:df:96:87:25:b6:ad:ca:6a:a6:
cd:dd:99:7f:8c:19:f7:32:d8:34:54:03:f5:4e:e1:
83:02:41:b9:d9:2c:d2:a5:c1:e7:c8:25:d6:e5:df:
dc:08:be:b7:1e:ae:f9:6e:4b:c0:31:0f:fb:f6:08:
05:cd:94:15:c9:bd:0b:ec:85:fc:a2:a3:cf:d4:68:
1c:f5:07:eb:05:70:4b:62:21:af:92:50:3c:ed:4a:
38:31:98:b9:9c:53:65:6d:1f:3c:cc:16:92:c1:77:
b0:26:58:12:bf:c1:70:45:c6:ee:61:8f:e2:1b:b7:
33:91:76:7e:a1:ba:23:4e:1e:88:ca:6d:ee:45:f8:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:79:57:96:F6:0C:96:3E:AD:B2:09:B5:43:DC:AF:39:8C:63:2E
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3d:5c:4f:62:f4:62:57:fc:bf:00:f3:39:d2:19:56:25:c4:
b6:7a:0e:df:01:6e:98:11:88:b6:26:cf:e7:4d:37:ff:98:37:
5d:b4:b0:fe:02:92:8f:bb:f4:4d:5d:3c:7e:95:68:9c:be:7b:
8e:12:5a:da:40:da:b5:fa:0e:bf:6e:44:b2:e9:a5:4b:5b:cd:
54:49:5d:fd:84:8d:24:48:0e:98:09:2c:91:e8:8f:86:30:62:
78:4c:3b:e3:65:00:3a:d3:9b:43:04:49:74:37:9c:a2:14:c0:
30:0b:39:a9:38:4b:e7:66:9b:a2:b1:7a:e9:d6:c0:ed:89:e7:
58:fa:0b:30:38:61:38:22:f0:2d:34:91:d0:b7:2b:4f:0b:0b:
79:d1:b5:49:bd:2e:24:86:ff:65:a9:ed:5c:11:f9:26:dd:9c:
18:28:8d:a2:88:13:5a:85:f0:61:46:49:8d:ca:58:1c:ef:03:
4d:ee:f3:8c:d8:48:82:f8:56:8b:29:79:52:b0:aa:f3:ab:7e:
ce:b5:21:2c:9b:01:44:5d:df:2b:da:5e:61:25:17:1b:c3:ee:
a0:b5:9a:ee:c3:58:53:ed:23:11:55:ea:16:91:dd:64:2b:c9:
2a:af:ef:97:29:dd:dc:8d:3f:cd:e1:63:1c:f0:8e:2a:aa:6c:
70:0c:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 12:41:27 2026 by rpki-client