Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: DT1LI2IiWZTywQufKM+YOx7Ttiof2LWHHL+z5zjU1fM=
Subject key identifier: 81:83:2F:63:9D:20:2D:9A:36:CF:C4:35:0F:99:C2:47:89:58:3D:DA
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 01A186AD1BAA6ACEF7BF7E128BEF955C6F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1A5C
Signing time: Thu 29 Oct 2026 08:00:54 +0000
Manifest this update: Thu 29 Oct 2026 08:00:54 +0000
Manifest next update: Fri 30 Oct 2026 08:00:54 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: NCf38vH/qU1h7ZHujVI/poguoA5awRMjBhgd9TtpD00=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:1b:aa:6a:ce:f7:bf:7e:12:8b:ef:95:5c:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Oct 29 08:00:54 2026 GMT
Not After : Oct 30 08:00:54 2026 GMT
Subject: CN=81832f639d202d9a36cfc4350f99c24789583dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:53:21:64:e8:04:81:8b:a7:0b:0f:a4:db:
ec:86:cc:b3:e1:65:72:73:3e:5f:24:d2:65:30:f7:
fa:ef:73:91:2f:79:e1:29:ae:45:b8:e3:bb:4e:6d:
42:36:cf:28:01:1d:2f:2a:28:c9:c5:07:af:d0:e1:
d3:f3:dd:c0:a4:93:4f:0d:4a:0a:51:cf:1c:80:da:
eb:b7:58:e2:bc:46:be:5a:91:7a:3f:18:34:d0:92:
fe:60:81:9d:ef:09:3e:f7:e5:93:92:87:0e:e2:3d:
6a:6e:50:ca:89:a2:32:6f:85:88:02:a7:81:57:d4:
33:f0:b4:52:ed:c2:cf:35:b0:0e:08:be:ae:c3:4b:
48:e0:8e:8b:70:c1:76:a8:f0:37:f2:ce:d7:42:8d:
07:06:fc:f5:02:f1:92:05:94:11:e9:e5:5a:e8:0d:
aa:7f:2c:f8:12:65:ab:61:39:f7:77:52:75:8f:25:
a2:61:bc:87:9f:28:59:52:18:96:11:9f:ba:ae:4a:
08:cb:5f:2c:79:64:3f:61:9a:5b:06:65:95:c6:07:
5f:4d:2d:10:f8:ac:83:8f:80:90:ee:ad:6c:d5:c3:
5e:17:7d:38:72:8f:f6:9c:cb:65:63:ad:d4:45:cc:
d1:8f:46:74:96:4e:cb:f4:a5:b1:1f:79:cf:4d:f8:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:2F:63:9D:20:2D:9A:36:CF:C4:35:0F:99:C2:47:89:58:3D:DA
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:0a:a9:30:44:ae:e2:f9:65:25:6f:0a:cb:95:cb:a0:a1:
d8:9d:59:8a:4d:11:c5:e9:df:79:18:80:67:ca:b9:3e:3e:71:
96:b4:fc:00:5c:82:29:67:c4:5c:04:86:3b:63:35:d8:73:0b:
63:e1:e8:e9:c7:e8:06:53:52:5a:cd:6a:cf:5b:ca:76:89:57:
31:40:db:66:3b:83:60:ae:12:56:fc:07:5d:b1:92:58:e0:4e:
9d:2e:56:1c:75:b8:38:e3:ca:d7:f7:14:64:97:a6:73:bf:12:
70:e5:7b:69:9c:fb:12:ec:e5:fb:e7:b1:ca:4c:7f:1c:a8:c8:
90:db:81:db:2d:3b:ae:86:57:d7:27:9b:e8:23:70:fb:79:94:
fa:f0:cc:6a:ea:09:54:b8:dc:8d:6e:09:e2:a9:8f:a7:61:b6:
29:7c:82:cc:7b:45:ed:d7:5a:29:e8:28:70:ee:3f:28:88:bd:
f3:a9:4f:15:cd:f0:48:fc:85:f9:14:2e:82:a8:b3:fd:63:df:
30:ff:6a:8a:fe:c3:28:e9:d3:ff:b3:f4:32:8e:7d:05:d6:e2:
7f:ab:d4:d7:f5:80:fc:16:78:33:f6:72:e2:1f:d5:74:13:ba:
cf:4f:cc:be:1f:b4:d0:ce:68:22:78:93:82:44:ce:42:cb:28:
dd:08:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:04:20 2026 by rpki-client