Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
File: FQe7zTFN1RPt1WowSBK-vj4Qniw.mft (raw, json)
Hash identifier: gQY2jl1b0Nz2XqdPDKS1O2aEsuX3MEv8+NiCwfX2UvY=
Subject key identifier: 72:75:4B:17:5C:EB:9D:A1:47:27:40:41:CC:34:10:7B:33:9A:5E:F8
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 01A17C602CF00B6414BF4DBCF6FDAF782BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
Manifest number: 0104
Signing time: Tue 27 Oct 2026 08:00:40 +0000
Manifest this update: Tue 27 Oct 2026 08:00:40 +0000
Manifest next update: Wed 28 Oct 2026 08:00:40 +0000
Files and hashes: 1: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (hash: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=)
2: FQe7zTFN1RPt1WowSBK-vj4Qniw.crl (hash: PAh5kMWQTU4zveKz46fq2agtchQ3CR5v3Jj3hNf5NNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:2c:f0:0b:64:14:bf:4d:bc:f6:fd:af:78:2b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Oct 27 08:00:40 2026 GMT
Not After : Oct 28 08:00:40 2026 GMT
Subject: CN=72754b175ceb9da147274041cc34107b339a5ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:6c:c7:78:ce:a7:18:40:d0:da:a5:a8:5b:
de:d9:e0:27:38:8e:44:a5:4d:63:5e:c6:bf:e6:98:
21:b8:09:9e:89:e8:98:66:e1:98:e0:65:be:32:ef:
00:f5:fd:52:16:84:7c:a1:7c:b0:31:9e:f0:6f:2a:
81:65:f0:f1:69:a0:f8:6c:c3:60:8e:1f:72:47:67:
b9:ec:91:8d:f3:b0:02:cd:fe:ac:31:20:47:d5:70:
4d:fd:bc:9c:55:5a:75:58:37:00:15:30:96:1f:4d:
f0:ee:ed:16:1a:86:d6:ad:9b:71:36:75:85:6e:f0:
a1:00:cc:0f:25:e0:77:57:eb:ef:5f:19:83:1f:e5:
c9:f3:05:11:4f:44:b7:91:02:a4:43:4d:87:b8:94:
1a:95:8d:7f:c2:33:19:a1:00:b1:23:9a:a7:ee:d5:
2f:ae:07:4e:72:79:92:ca:ef:cb:9c:70:f8:ec:6d:
f2:68:83:ad:d4:b7:bd:07:70:4b:be:c3:cc:28:97:
89:dd:6a:10:e3:19:2f:be:fa:a5:c4:af:56:b0:1f:
53:45:19:a5:55:9f:7f:c2:c8:53:a9:64:5f:c6:30:
26:8d:5b:40:78:41:68:f0:21:9b:45:e3:a1:c1:99:
aa:64:90:18:37:b7:a1:e5:4e:04:b7:98:ba:23:12:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:4B:17:5C:EB:9D:A1:47:27:40:41:CC:34:10:7B:33:9A:5E:F8
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:ec:d5:5e:f1:d4:ba:65:45:45:be:1b:d5:6c:e2:94:e3:
ee:00:51:9e:ac:ae:0b:fb:e8:e6:54:68:d2:97:31:67:77:52:
0f:4a:34:46:17:c3:7d:b8:28:c9:28:70:89:bb:94:0d:41:45:
dc:95:fe:76:be:87:c2:7f:3e:03:86:b6:51:b1:8e:ad:8a:ad:
19:62:e7:f6:b9:19:14:99:d0:0b:3d:06:36:a1:51:8d:4f:17:
44:bb:cf:be:ba:42:11:d9:ed:80:21:89:47:d2:96:43:90:66:
0f:41:c1:e4:0b:9f:83:53:c7:73:c5:81:1e:7d:67:ea:55:5b:
3e:e8:17:71:3f:00:71:b0:3e:57:46:38:77:9f:c2:1e:b9:35:
97:fe:8b:36:e5:0f:3b:6f:ef:ed:33:56:8e:be:45:9d:35:2f:
72:8b:71:2a:1d:a9:28:43:ed:c0:92:f0:fc:a5:39:ee:67:54:
c5:74:44:31:5a:f9:82:f4:02:04:de:05:0e:d8:a3:48:fe:3a:
2d:e9:ed:b6:ad:62:2a:4e:ac:e4:19:77:1c:c2:c1:a6:c8:4b:
31:f7:f3:6f:16:c0:e6:aa:3e:3c:eb:66:a2:da:5d:01:07:6e:
1b:d1:65:ef:ac:2e:b4:61:4a:13:c4:39:54:57:44:05:6f:07:
0a:a7:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:08 2026 by rpki-client