Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: 9M2YxD9O1plASlQxokgCHScqWR9/XMGRV9ty8jGwJfE=
Subject key identifier: 8E:75:69:03:4F:72:8A:57:C7:94:7F:1A:83:93:41:9D:D1:8F:99:3D
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 01A08D8DA4C9380CA6EFE690A0B3DCF0B396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 23:01:05 +0000
Manifest this update: Thu 10 Sep 2026 23:01:05 +0000
Manifest next update: Fri 11 Sep 2026 23:01:05 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: bVthYLSKefqTsr7KeopVEbvCjMOW3BD2lXSOlF41lnM=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:a4:c9:38:0c:a6:ef:e6:90:a0:b3:dc:f0:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Sep 10 23:01:05 2026 GMT
Not After : Sep 11 23:01:05 2026 GMT
Subject: CN=8e7569034f728a57c7947f1a8393419dd18f993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:13:c9:ce:d8:c8:7b:f0:a2:a4:d9:0f:45:
46:73:ce:da:eb:27:b1:53:8c:1f:a9:98:2d:cf:60:
7d:87:89:27:87:c0:af:97:0e:8b:a2:fe:f6:73:aa:
6f:0f:93:e7:cc:cd:fa:4c:b6:76:91:63:4a:f8:5c:
1f:28:47:49:67:69:ee:80:3a:30:68:71:06:44:83:
7d:ad:23:5a:1d:6a:7e:01:d4:19:5e:1d:19:fc:ef:
62:af:7a:a1:33:3d:a6:71:dc:e6:34:1b:8e:92:7a:
f1:43:c0:2c:51:56:9f:2b:22:56:9a:43:d0:f1:5c:
c5:2a:2b:49:7f:71:ff:6b:e0:ff:4f:05:3c:a1:04:
b4:cd:79:63:da:76:2f:20:f0:4a:40:ee:13:26:6f:
3e:d9:0f:6a:26:78:c2:ff:82:ca:db:3b:14:ab:10:
94:d5:3f:f4:48:1a:e4:a7:44:ea:7d:9f:7f:a4:fc:
6c:41:37:f3:3a:53:61:94:ad:9f:a0:82:0d:4c:48:
43:2f:41:0f:c8:b1:cd:21:f2:25:82:aa:d2:f8:50:
fd:0f:35:20:cd:30:07:02:20:c3:16:de:df:21:53:
a6:19:48:f2:42:de:3c:31:75:79:a4:60:90:4d:ae:
40:de:69:04:6f:0e:9b:be:5a:8c:fb:f5:20:4f:84:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:69:03:4F:72:8A:57:C7:94:7F:1A:83:93:41:9D:D1:8F:99:3D
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:6e:d1:40:61:40:3b:9d:3c:cb:5c:18:b1:c4:8a:97:3b:
b3:08:67:a4:53:ae:9b:12:91:20:09:85:66:9c:b7:ae:85:c4:
fa:3a:14:9d:9d:e5:c7:97:3e:d7:b1:11:be:cc:49:af:3e:19:
1f:f2:33:9b:6f:14:5c:29:92:27:69:c8:f8:ce:b3:ee:11:62:
dd:e3:5b:f9:1b:09:c6:e2:99:2c:4b:73:02:72:26:82:3f:a7:
f1:1f:b0:0a:aa:11:06:ef:9b:8c:16:fe:24:b9:c5:b3:9b:6e:
5a:4a:a7:0d:87:11:fa:96:d1:69:8d:6c:63:d9:85:5f:b0:35:
b2:f9:21:18:7a:84:42:23:42:c6:a7:0f:82:13:60:c5:ef:ee:
45:c1:74:be:28:8c:d6:df:2f:f1:7a:3c:43:bc:3f:3b:2c:0d:
17:55:e5:53:4a:aa:27:b1:2d:ec:22:65:af:71:28:38:16:50:
7d:54:5b:41:00:54:ed:32:d7:8c:4f:f7:62:12:03:15:3f:8f:
7f:9d:d7:80:bb:36:38:70:f2:4c:3a:ec:ab:bd:a0:03:8d:00:
e6:dc:0c:5a:c5:f3:c7:0c:9b:7f:46:5c:a9:42:d5:49:7c:a9:
99:91:2c:af:43:22:7f:26:f5:db:f0:a6:5b:d0:ab:51:e3:e1:
86:e4:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:38 2026 by rpki-client