Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: IhS5jhEQ0jUu8sKYWy7HRNeYyd/PNgKwWNrdiijq62E=
Subject key identifier: B2:C2:B6:9A:04:44:58:61:16:77:E5:80:BD:73:BA:9E:8C:27:CC:FC
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01A0570CD5AFAD6A0DDEDDBC4E7D973D9462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1A2E
Signing time: Mon 31 Aug 2026 09:00:53 +0000
Manifest this update: Mon 31 Aug 2026 09:00:53 +0000
Manifest next update: Tue 01 Sep 2026 09:00:53 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: nnrI5phesHBUu5fCnEH3n6N9NPiZ9GEwVyIdGsdmp1Q=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:0c:d5:af:ad:6a:0d:de:dd:bc:4e:7d:97:3d:94:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Aug 31 09:00:53 2026 GMT
Not After : Sep 1 09:00:53 2026 GMT
Subject: CN=b2c2b69a044458611677e580bd73ba9e8c27ccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:9e:dc:14:df:be:10:f7:76:e0:d7:8a:79:
40:d9:87:3a:9e:1d:42:94:2b:62:17:2a:12:0d:04:
7a:3d:8a:30:ff:a2:61:f6:bb:22:e5:f3:a2:fb:12:
9d:14:07:a4:f3:c6:bd:96:28:6c:b2:c9:e3:d6:97:
16:3c:0b:70:c1:2c:b9:36:18:08:fa:19:f5:68:64:
65:a2:d2:3f:cf:7c:6b:05:18:8b:01:94:8b:18:97:
84:f3:e8:5a:e5:bb:ea:11:4f:10:4f:64:98:79:1a:
f8:4f:9e:eb:33:9b:7a:4e:65:62:3b:b3:1e:e8:d8:
23:8a:c6:2f:15:56:cb:b5:f4:82:b5:40:1f:12:3d:
57:fc:f1:8e:b7:25:00:72:8a:cc:33:46:e6:83:b8:
8a:d5:18:df:83:c1:d9:37:a4:22:ef:00:89:6d:c3:
ed:d0:93:18:b8:c0:7a:ca:8c:f8:6f:0d:f6:81:7c:
ed:dd:65:5f:d3:e1:6f:a8:98:bf:63:ee:db:72:7d:
b6:3b:f3:17:33:40:71:76:41:00:36:45:c8:b2:37:
5d:83:5c:3d:7f:13:e5:fa:a0:7b:6f:f5:0d:59:f5:
91:6d:3a:fd:f1:d7:46:4e:00:28:b7:3b:b7:f9:3e:
1e:10:8d:9d:ab:2f:65:6d:bb:f3:70:d1:7e:31:7c:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:B6:9A:04:44:58:61:16:77:E5:80:BD:73:BA:9E:8C:27:CC:FC
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:9d:08:83:55:84:ee:50:cc:8f:a0:53:cf:0c:d4:2e:2d:
09:a9:4e:ca:0f:6b:41:80:eb:09:30:ec:0d:80:a9:d3:39:6d:
90:2b:ec:c1:70:22:1c:29:d6:56:a6:b3:5d:80:98:28:fd:6e:
01:d9:a4:6f:77:4f:3d:7c:6c:bf:e3:9f:10:be:6a:e8:8b:10:
45:ef:40:e9:72:01:cb:40:7d:63:60:b2:0d:28:7d:88:bb:d4:
9f:90:1c:51:c1:9e:04:64:76:14:5c:1a:23:c9:8f:64:15:01:
9c:60:59:f0:36:fd:99:5a:0e:fc:29:2c:a7:fd:08:8d:fa:c6:
b3:c9:01:06:58:14:10:b2:60:7d:89:6c:48:65:9a:8a:98:15:
b7:d0:b8:6f:2f:8a:74:dd:d7:52:71:d7:df:9f:2d:ea:49:54:
b0:65:a6:d8:01:3d:cc:59:6e:c2:3e:94:5f:5e:30:0b:58:69:
c5:c3:1b:25:8d:f2:e9:fe:f6:66:e6:3b:69:e7:e3:03:56:3e:
68:17:f0:42:76:7c:23:22:18:92:3c:81:e0:2c:32:48:a8:b9:
47:b1:e4:be:65:80:b5:6d:fb:5b:0b:ac:b1:4c:57:a3:44:70:
d8:62:25:1d:f8:f6:0c:2c:c9:cf:a3:e3:3f:f6:07:0d:7e:0c:
dc:1a:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:53 2026 by rpki-client