Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File: rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier: hZMqXC/NUeXqdt3r346HyQTMQytSr7Ths3wuDIJedco=
Subject key identifier: E9:81:6B:D1:5B:3C:AE:D5:78:2E:ED:7C:7E:94:89:94:3E:45:87:55
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 01A17C295C3D67B7C132771CA75A8F132936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number: 048A
Signing time: Tue 27 Oct 2026 07:00:47 +0000
Manifest this update: Tue 27 Oct 2026 07:00:47 +0000
Manifest next update: Wed 28 Oct 2026 07:00:47 +0000
Files and hashes: 1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: Qydeem0k98QU+nK6KasdCDux/oxvHit0FitHJQgPUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:5c:3d:67:b7:c1:32:77:1c:a7:5a:8f:13:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Oct 27 07:00:47 2026 GMT
Not After : Oct 28 07:00:47 2026 GMT
Subject: CN=e9816bd15b3caed5782eed7c7e9489943e458755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:f1:aa:a1:97:11:3e:4c:73:69:36:7d:71:
15:62:fb:59:0c:8d:5f:c4:fe:d7:2d:06:bc:f4:d1:
c0:b9:09:2b:f4:86:08:aa:01:de:56:cf:8f:9d:75:
3d:7c:ce:ef:35:4d:ad:bb:12:48:9a:9b:e7:15:16:
a2:66:16:95:e0:14:93:83:3a:c5:eb:aa:ff:da:26:
96:28:71:e8:fd:50:eb:34:85:7d:18:e7:3a:df:60:
c4:e6:c7:08:6f:59:e7:c2:4c:be:c0:07:09:e2:91:
4f:2b:18:2b:17:55:3e:4f:76:a4:bb:da:32:09:e3:
22:76:65:4d:43:af:f9:b3:d4:aa:0c:2c:be:d2:e6:
bb:47:d1:0f:dc:6d:1c:5e:59:83:2e:21:c2:ce:3e:
02:28:7d:bd:f1:61:8d:78:e9:b6:58:03:af:10:a0:
8a:f5:ed:a4:7e:6b:07:1f:04:d3:c4:e3:b8:2b:56:
2f:e0:7e:6a:28:60:89:8b:29:5d:2c:04:c7:a2:f1:
c9:fa:c1:45:4d:ae:67:f9:ed:53:c6:f2:22:8b:6f:
7b:3b:b3:f1:54:f3:f8:15:b9:d3:be:33:42:96:41:
57:26:ee:57:9b:05:fa:4e:d4:8a:61:cc:05:de:97:
d5:aa:50:72:da:dd:6f:d0:70:86:6a:aa:4d:94:f3:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:81:6B:D1:5B:3C:AE:D5:78:2E:ED:7C:7E:94:89:94:3E:45:87:55
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:90:40:cd:7a:3e:c9:84:a5:c2:ab:e8:dd:2a:f1:25:9f:4a:
62:ce:bd:37:59:ae:29:52:a9:ef:8e:31:46:49:11:f8:b7:14:
1e:35:c1:f6:6f:79:ce:35:6c:3e:20:05:cf:0a:ac:6a:62:af:
0f:de:ba:a5:b3:7d:58:87:c9:c0:37:5c:17:c6:97:44:a5:39:
30:f4:8e:31:03:95:86:ad:8f:c1:76:e9:e5:f4:8e:66:f3:a3:
3f:11:8e:40:a5:57:58:d8:83:d7:a0:18:f3:25:30:45:82:45:
7d:4c:f9:85:a1:d4:20:99:86:63:8b:bc:dc:c7:bc:dc:1f:c0:
df:d7:33:1c:6b:c5:b7:33:c1:c9:1b:97:db:e4:f6:e2:02:d7:
42:68:d2:87:a1:1f:ec:ec:27:06:9f:19:82:ce:79:7e:8f:03:
d3:5e:c1:68:b2:9b:78:88:f2:3a:8d:83:83:fa:f0:1f:eb:e1:
82:fe:1f:58:61:62:5e:02:0a:ca:95:64:69:c3:cf:65:a2:e2:
12:5c:eb:26:ca:cc:71:4a:9f:f7:4f:4c:ee:9c:60:98:42:d7:
b1:ea:9c:6b:ec:85:80:69:67:76:78:9d:6c:a3:9e:36:69:43:
ce:a0:c6:59:13:4a:09:ea:4c:68:1e:25:2e:d4:14:8a:f7:a9:
a7:f0:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:22:44 2026 by rpki-client