Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: 4Q5PUjeuOTIpOBLKVQcolDDCs7YdQ4CAfWJUngeMViY=
Subject key identifier: A8:D4:DD:3B:4C:C5:66:B8:54:D6:AC:E8:CF:F5:96:14:4F:DC:28:1D
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 01A182D0920025877E3A317830462C8CF1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 06F7
Signing time: Wed 28 Oct 2026 14:01:09 +0000
Manifest this update: Wed 28 Oct 2026 14:01:09 +0000
Manifest next update: Thu 29 Oct 2026 14:01:09 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: hb7ceV6njooLvJNQfzYkAoEOTvOnGVL6Uc2AN9HyUpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:92:00:25:87:7e:3a:31:78:30:46:2c:8c:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Oct 28 14:01:09 2026 GMT
Not After : Oct 29 14:01:09 2026 GMT
Subject: CN=a8d4dd3b4cc566b854d6ace8cff596144fdc281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:23:b8:2a:13:51:b4:b4:33:f4:54:e9:19:
14:1c:44:2c:d4:df:97:b3:19:78:9b:94:31:bc:17:
bb:7d:7b:9f:94:f9:e2:b0:ff:5f:4a:dd:e3:03:00:
18:71:ea:3b:3d:81:40:b8:f4:a4:e5:b7:77:f3:36:
2f:29:42:26:b8:90:f7:5d:21:03:ee:a0:26:2f:a9:
72:35:b7:5e:61:db:1e:61:d3:b8:b7:f0:e1:21:d8:
ce:84:b2:4d:4f:92:82:d9:8e:09:65:50:18:21:4f:
1f:b4:c1:b4:b0:7f:0b:8a:26:02:f3:76:49:4f:70:
46:a3:8f:3d:be:95:8e:77:1a:76:9a:3f:ff:8b:c8:
17:5f:62:87:a9:88:1d:22:3c:5f:83:34:f1:5b:9c:
c3:66:36:3b:38:28:77:8e:10:df:60:59:ed:68:fb:
90:c5:be:2d:e1:d9:40:e0:2c:e7:fb:71:2d:3a:e6:
72:9f:c6:98:53:56:ba:32:8e:b4:f2:d2:61:e7:c9:
96:14:b4:7a:dc:4d:c7:ab:b3:0a:4b:d6:5b:b4:9b:
cf:7f:7b:27:48:b0:4b:23:60:4a:ac:00:b4:ad:2e:
91:7a:3a:d9:80:fc:85:72:d9:b3:7c:02:b1:e6:a0:
86:ee:d3:4e:eb:b9:58:c9:10:c2:7e:1c:12:fc:27:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:DD:3B:4C:C5:66:B8:54:D6:AC:E8:CF:F5:96:14:4F:DC:28:1D
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9c:af:cc:08:00:0c:17:f2:42:a6:a3:7b:b9:ab:cf:6f:d4:
ab:19:25:79:90:70:f0:e9:cd:6d:93:34:b7:97:80:89:b0:75:
4d:81:dc:fb:c7:35:2f:c4:d2:15:33:23:29:e4:b0:3c:df:a6:
3b:9e:02:9f:b4:56:fd:7b:10:da:a0:1d:eb:74:f3:67:ff:04:
91:85:ac:34:45:b1:17:c3:a9:c6:ee:39:8e:d3:09:61:25:e1:
1f:5c:f1:25:a1:33:a5:c5:c7:10:7e:20:3d:1c:8f:d3:69:19:
66:13:a5:76:a7:4e:11:99:1f:39:59:4f:10:65:1d:48:db:7b:
27:3e:8a:b3:db:75:44:d1:28:77:7d:1c:74:3e:37:bd:93:d6:
be:1b:03:c4:7a:cc:15:5d:bf:76:3d:e4:33:54:2d:19:87:75:
52:cd:c7:07:e4:70:0c:3a:58:14:34:aa:52:dc:32:ad:92:ab:
af:f2:5a:67:a6:64:18:1f:77:49:e5:f7:fa:38:02:7f:04:fa:
95:53:7f:ef:3d:26:06:cd:1a:37:4c:de:fc:09:57:7b:4b:c2:
1c:86:17:9f:36:d6:ea:b0:27:4f:be:9a:1d:5d:8d:15:04:8f:
48:74:a6:34:0d:c8:0c:6f:46:d5:c5:f3:4d:79:e2:b0:b6:da:
67:b1:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:02 2026 by rpki-client