Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: tAkcO0RAndpyvyXmpQdfe8IyddYxR3xyDTh8oOFacMs=
Subject key identifier: BB:1D:62:02:45:31:5A:A8:C1:AD:E9:27:40:3D:DA:46:DB:F5:B6:48
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 01A1347EAE155EC382E04D05E39061D729B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 023F
Signing time: Tue 13 Oct 2026 09:01:19 +0000
Manifest this update: Tue 13 Oct 2026 09:01:19 +0000
Manifest next update: Wed 14 Oct 2026 09:01:19 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: iO0qyya4+beSXtHyzZ2ddp6cRCZmgooNYjuLdZVArtw=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:ae:15:5e:c3:82:e0:4d:05:e3:90:61:d7:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Oct 13 09:01:19 2026 GMT
Not After : Oct 14 09:01:19 2026 GMT
Subject: CN=bb1d620245315aa8c1ade927403dda46dbf5b648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:e7:38:47:be:f1:fe:df:f5:fb:d8:35:89:
ae:84:7a:06:3c:68:8e:61:98:e3:d8:f0:e1:f2:3c:
06:bb:d0:cc:6a:33:6b:3f:18:e6:82:b9:c3:6f:6d:
68:1b:14:f1:65:80:c5:27:ef:6c:b1:27:d3:35:9d:
5f:e8:f0:93:19:81:ed:11:55:e9:1a:72:e3:6a:79:
bd:2a:62:18:0f:5b:09:34:2d:8c:bc:ca:82:bf:f2:
00:71:bc:af:56:11:0b:2f:b0:7a:db:1b:fc:f3:59:
9c:d5:89:79:a4:8e:5d:b5:22:d9:8f:8e:cb:f0:6d:
0b:05:2d:8e:1d:25:c9:0a:d3:95:21:60:c2:13:d2:
47:63:ee:6d:65:51:0c:22:5a:2b:fe:0b:43:e6:a1:
44:9b:06:e8:cd:46:78:44:62:ed:f6:6e:88:06:ea:
d9:8f:04:1a:6d:f8:10:8b:99:1c:bc:ad:42:70:9a:
45:66:68:36:e6:73:c8:d8:29:70:6f:75:f1:de:8a:
62:40:6b:3d:5f:c7:2a:e0:de:f9:b9:f6:59:46:fc:
9d:ff:2e:19:e8:98:7f:d3:f8:a0:89:7c:e0:50:7c:
6d:28:68:eb:33:6a:19:fc:5f:21:e9:7e:b0:37:f4:
75:bf:db:57:32:48:1b:03:4f:1c:f4:6e:dd:ae:51:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:62:02:45:31:5A:A8:C1:AD:E9:27:40:3D:DA:46:DB:F5:B6:48
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:50:84:71:a0:15:31:23:b3:dd:9a:5f:1b:b6:d2:b9:99:
76:64:30:16:bb:84:32:bb:bd:a8:74:b5:9a:39:c0:e0:36:8e:
b5:ca:40:5a:c4:be:63:21:39:2d:77:27:5a:88:23:6b:d0:3c:
fb:02:fc:92:67:66:bf:33:85:28:5a:4a:c3:ab:3a:11:d5:c7:
ba:3f:d9:ff:7b:ad:5b:77:10:78:03:df:79:af:44:6d:74:e2:
13:59:e3:0a:9f:a8:ec:97:05:ce:bc:ac:0b:2b:13:a2:24:3e:
a8:c8:81:ef:73:73:30:b0:91:80:a6:47:29:72:af:3e:3a:6b:
06:fa:be:51:a5:b3:4c:f9:fc:43:3f:a9:f5:f8:4a:80:ed:79:
70:64:77:d8:f4:7b:86:17:89:aa:bd:83:4c:b7:4c:75:89:7f:
64:44:4c:42:24:5a:73:aa:61:e9:1a:d3:04:b5:cd:92:90:ee:
b6:f4:3c:0e:a2:af:f2:b8:f3:12:39:31:ac:87:96:c0:a8:a9:
55:ed:85:88:14:32:c8:06:80:13:dd:b4:7d:22:6a:aa:d2:3c:
db:8c:d3:56:65:d6:1c:c8:58:b8:17:16:60:2c:0f:ce:df:d1:
00:61:f3:75:79:80:92:dd:95:35:25:ce:97:f0:84:14:d9:4f:
d4:b6:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:32 2026 by rpki-client