Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: GhZdB8m5Go4TaE4uvCs7wWs8qpZ4l22XJL9dgxEN2QA=
Subject key identifier: 35:54:3E:34:E2:34:D7:1D:C0:21:D4:C7:1E:9D:D8:B7:62:F4:E1:B8
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 01A17F2B4300432835C802C44B5D814EFBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 139F
Signing time: Tue 27 Oct 2026 21:01:43 +0000
Manifest this update: Tue 27 Oct 2026 21:01:43 +0000
Manifest next update: Wed 28 Oct 2026 21:01:43 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: gVWo7G9QG+hXCODWTHLfMZVz8l3wtbYKRMxf60GcmnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:43:00:43:28:35:c8:02:c4:4b:5d:81:4e:fb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Oct 27 21:01:43 2026 GMT
Not After : Oct 28 21:01:43 2026 GMT
Subject: CN=35543e34e234d71dc021d4c71e9dd8b762f4e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:1b:ed:a8:8a:61:b8:c4:bd:7f:a6:19:5d:
30:44:d2:d1:63:fb:2a:6f:e6:a3:c6:fe:93:72:ce:
f9:90:ae:f3:7b:e8:b2:3e:62:d9:ec:a8:1a:0e:44:
51:2a:84:e3:af:73:0c:dc:5a:36:b1:58:08:46:0a:
83:ec:48:cd:7b:59:77:8d:4b:c5:2f:ad:f2:f3:9f:
eb:f2:3f:fc:a9:49:c4:1e:4e:48:bd:38:e2:75:85:
c5:58:28:a4:f6:8f:90:22:16:b0:67:0f:35:97:84:
83:e6:78:2a:16:d7:fc:f7:5f:cd:72:c0:21:99:79:
90:fa:ea:0d:1c:d6:27:a8:c0:f4:0d:48:18:e2:c2:
df:c4:a0:d3:b9:49:31:01:f3:44:8e:a3:de:19:8d:
7a:08:02:d2:4d:dc:a7:80:38:e7:13:14:e3:1b:f5:
7f:c8:a8:db:cd:6d:a4:17:21:12:01:b7:d9:46:36:
58:8d:ef:51:3b:72:43:61:37:0e:d4:c5:f5:7f:fe:
78:11:62:0d:eb:52:4d:56:d2:db:a0:a0:c2:7e:50:
89:1e:45:ba:10:23:7b:89:81:62:88:b1:38:ce:d5:
64:85:26:50:95:96:0d:18:7a:a9:86:4c:28:12:5c:
1b:97:35:47:6b:dc:93:4a:7e:a0:cb:86:31:57:2c:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:3E:34:E2:34:D7:1D:C0:21:D4:C7:1E:9D:D8:B7:62:F4:E1:B8
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:30:ed:cd:a5:9a:b1:0b:bc:05:ee:96:bc:d2:96:eb:03:78:
ef:42:3a:f7:b7:69:dd:44:42:c6:16:8b:ce:19:b1:05:bd:17:
52:f2:a8:43:b3:11:80:23:04:0c:da:6d:bf:a6:52:fa:d2:43:
5b:1c:e1:da:cd:b3:73:c4:0d:3c:b1:16:d1:3e:b4:7e:45:a2:
43:df:7e:da:b1:f0:e8:a1:e5:2b:2d:00:8a:27:bb:a6:cb:06:
36:df:3a:cb:65:4c:f0:0e:d4:fa:92:47:df:f7:0a:55:59:59:
51:3f:72:fb:14:8d:67:2f:d2:89:15:74:ad:b4:f3:a5:5e:de:
77:e5:81:ae:48:49:98:5f:d0:16:c7:c8:b0:1f:ee:d0:a5:76:
9d:59:ff:93:60:f7:b2:34:52:94:61:cf:47:ac:80:41:c2:0f:
ee:f2:c5:35:26:a1:f1:69:7d:9c:b6:b4:58:4f:69:76:a3:34:
c0:6d:8b:ed:68:5a:19:65:18:66:36:97:9a:d9:a8:b6:31:8f:
d3:01:88:fd:ab:1a:58:dc:f7:93:3b:9d:b7:72:03:e5:1f:01:
d3:d6:c4:9c:36:de:a5:04:89:95:69:98:47:70:c6:67:d4:45:
6f:a8:f2:b0:6a:0c:37:a7:c4:97:44:5c:d7:91:a9:0e:ce:67:
a0:1f:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:06 2026 by rpki-client