Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
File: FQe7zTFN1RPt1WowSBK-vj4Qniw.mft (raw, json)
Hash identifier: uiCKvfsVO/PKFd39P8HzcpFfqa/0VE935X+WRAMvDSk=
Subject key identifier: 85:30:05:7A:27:D9:D5:6B:3F:4D:72:BC:5E:40:B0:E7:B9:21:3F:42
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 01A1822B5F93170EB75B4811637EA92F8615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
Manifest number: 0107
Signing time: Wed 28 Oct 2026 11:00:42 +0000
Manifest this update: Wed 28 Oct 2026 11:00:42 +0000
Manifest next update: Thu 29 Oct 2026 11:00:42 +0000
Files and hashes: 1: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (hash: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=)
2: FQe7zTFN1RPt1WowSBK-vj4Qniw.crl (hash: a63qlqiOj/qCgVb8vbVnOZ2jkP9bx06kEL9w7B3zYnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:5f:93:17:0e:b7:5b:48:11:63:7e:a9:2f:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Oct 28 11:00:42 2026 GMT
Not After : Oct 29 11:00:42 2026 GMT
Subject: CN=8530057a27d9d56b3f4d72bc5e40b0e7b9213f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:dd:2e:7e:91:bf:2e:17:37:b4:69:3a:43:
0f:a8:63:d5:16:1d:d2:eb:62:c0:8b:cc:85:75:bd:
64:0d:2d:e9:1b:bc:73:10:7a:b2:81:c7:9a:e0:88:
2b:a1:9f:9f:52:e8:db:b5:3a:62:0b:b1:0d:0b:9b:
1a:c4:0a:cc:fc:38:81:09:e3:80:89:13:f1:b4:23:
c3:49:f9:ed:b7:e3:37:dd:2f:4c:09:6e:74:3c:36:
a7:09:dd:20:f4:25:d5:b4:4d:b4:b2:d0:6f:ff:a7:
59:66:5e:8f:4f:72:20:79:e2:91:70:b2:78:c6:67:
18:0f:50:5f:83:c9:00:4b:d4:f8:fa:06:cc:c4:b3:
7d:74:a4:1f:da:50:60:16:bd:19:83:d9:10:89:01:
b9:5d:08:07:a2:cb:e8:5b:58:4a:83:a2:86:44:35:
fd:19:4f:c8:db:ce:f5:8f:06:78:f7:00:1d:e7:00:
2e:f4:13:48:49:67:41:14:30:84:5e:db:79:be:ed:
85:f0:0f:57:60:7f:3a:09:f5:3b:46:b8:94:75:be:
7a:cc:74:18:28:cf:af:78:de:32:a0:2f:a4:ba:66:
a6:de:27:2e:e6:8d:c3:f9:4d:5c:f1:38:b2:41:c5:
36:d6:21:d1:0a:46:1b:08:2a:76:a5:e2:89:63:ab:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:05:7A:27:D9:D5:6B:3F:4D:72:BC:5E:40:B0:E7:B9:21:3F:42
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:bc:99:a3:09:c6:66:ec:74:38:c5:77:a5:66:cc:13:ee:
53:2e:96:a3:24:e3:9b:3d:1b:73:aa:8c:64:ee:50:74:10:c3:
92:b8:48:2e:db:1d:24:15:8a:d1:e5:90:16:4d:5d:11:a7:59:
20:13:de:0f:84:54:f8:25:34:cc:d6:f8:d8:5b:59:99:2e:c4:
92:b5:a0:62:25:39:e7:b9:fb:5a:c4:f5:3c:a6:1c:9c:2c:82:
f5:f5:6a:35:e2:9e:9a:8a:68:49:3d:2a:d2:ca:5b:2f:3c:e8:
be:b3:62:ed:0b:75:5a:8a:82:4a:df:d0:07:c6:f2:25:9b:76:
d2:62:a9:88:d4:7a:e7:83:9d:f8:5d:65:e6:9b:2f:f2:39:0c:
bc:ca:bf:ee:8a:96:ec:b1:30:8f:fc:a4:ef:a0:db:84:2f:e4:
41:8c:da:a4:89:43:20:2c:63:c1:2c:f5:82:69:c8:54:29:c8:
96:d4:2d:bb:e4:91:b0:72:bd:ca:bd:95:62:f6:0d:5e:6c:23:
66:e7:b1:00:7d:b8:36:cc:3a:37:34:39:3a:a2:77:73:2c:b0:
2c:fc:d3:c4:72:96:0f:9f:bf:1d:f9:58:b3:44:da:6c:34:03:
3b:22:27:f4:ba:10:fb:08:69:ed:d2:0d:4a:96:33:c6:21:db:
87:7c:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:11 2026 by rpki-client