Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: DpayP7H201qe0GQIv6aaewKJasbYU735rJ6TJzHyVBk=
Subject key identifier: 6B:70:8B:DE:5B:2A:A3:2A:A4:72:69:6A:31:24:0F:E1:65:B3:55:64
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 01A180AB37AFECD9DC3E5CAF7CC6EF35CD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 04:01:06 +0000
Manifest this update: Wed 28 Oct 2026 04:01:06 +0000
Manifest next update: Thu 29 Oct 2026 04:01:06 +0000
Files and hashes: 1: WVSje2-V9hlvx2DHrLYafa4VndI.asa (hash: HgSXxrRDl778gx/DZsMfwInNr0fsVx40+FI5RHCVI9I=)
2: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: SeuFrxhMasRunCfs3dvoqywWfWsostoagxLu7gui01I=)
3: uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa (hash: hudIU2XaMQ5FOKPriX4aD5JP7Gpmax5hlY7F7k4okbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:37:af:ec:d9:dc:3e:5c:af:7c:c6:ef:35:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Oct 28 04:01:06 2026 GMT
Not After : Oct 29 04:01:06 2026 GMT
Subject: CN=6b708bde5b2aa32aa472696a31240fe165b35564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:09:4b:2a:42:40:21:fc:e9:2e:4f:30:87:
66:bc:e9:fa:aa:a7:49:65:b6:38:e8:bd:25:fc:c4:
4b:d8:34:d4:cb:5c:4f:89:67:29:48:5a:e7:ea:3f:
b4:3e:f1:ca:7f:3d:ea:91:36:64:98:af:a2:11:f5:
7e:41:a1:9a:26:34:f0:d4:de:b8:f4:07:44:c7:2c:
73:48:6c:12:51:4c:f0:30:2b:d9:3a:b7:9c:b6:4a:
46:b4:9e:1f:27:1f:f2:73:a1:df:80:2b:f8:00:a1:
6d:f3:d2:02:37:0f:bf:b2:ec:d1:00:72:6a:62:8b:
ab:14:91:9e:3c:4a:68:5c:03:a3:7e:76:71:60:e3:
dd:62:65:62:44:d2:c5:31:b8:84:5f:29:98:4d:7a:
9c:02:ac:61:94:f1:67:d1:ed:ff:d9:9e:a6:4a:b6:
ce:d9:03:d7:70:1c:ea:3a:ba:19:01:3f:ec:cd:fb:
54:c8:42:2c:53:6a:c6:9d:cc:8e:e1:ba:49:05:ee:
c9:3b:68:1f:71:fe:27:0a:5d:94:d1:48:26:11:8e:
71:88:10:44:04:8c:87:76:ce:57:e5:b3:e4:db:f1:
28:0d:a2:47:43:4c:7e:9d:11:28:cd:80:f3:3a:5f:
b6:1e:25:7a:04:58:12:61:a0:b4:10:cf:32:43:2e:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:8B:DE:5B:2A:A3:2A:A4:72:69:6A:31:24:0F:E1:65:B3:55:64
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:29:cb:e9:26:01:5d:e6:83:f1:d5:31:8e:82:38:70:be:
e4:98:44:23:ea:71:ad:f2:a2:4e:68:22:32:ee:22:5d:d9:48:
fa:f5:98:86:b8:d5:79:f0:27:2a:2a:53:49:ea:26:a7:be:c2:
2b:9a:2f:e1:b2:c5:2a:c8:a4:75:17:05:8a:4f:a3:c8:c9:30:
2f:b0:ba:65:22:47:6e:3d:46:b3:51:57:3f:9f:a4:54:84:0b:
bd:10:3b:9b:bd:81:f4:78:98:7d:8a:32:0d:ba:64:bb:6d:5f:
2a:38:38:95:2d:4b:18:3c:a8:45:51:bc:d0:de:a9:95:37:ac:
24:7d:b5:16:10:1e:da:10:ff:e9:fd:22:31:d6:45:85:5d:71:
81:3e:5f:ba:99:de:46:c0:95:10:b5:ab:01:37:5f:d4:4c:52:
b4:24:d6:53:7e:66:13:98:ac:a0:4d:6c:a4:e0:e5:97:ad:e6:
31:fc:5a:24:13:94:26:06:b1:c6:8c:59:33:66:c9:38:74:54:
cf:45:f0:48:b4:70:e9:cb:fc:e9:71:f0:23:d7:13:de:0d:22:
33:c3:dd:5d:09:64:35:75:0e:ed:9d:d0:bd:da:bd:5b:34:7a:
29:0f:19:23:e0:f7:35:2f:15:6b:35:d5:b1:be:52:7e:57:e4:
b8:9a:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:35 2026 by rpki-client