Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft
File: fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft (raw, json)
Hash identifier: 5PJ7FDmlzGDFAkQY+cuUXRZLHDBxlWPOPkfBPs/jjmg=
Subject key identifier: 41:B1:BE:4C:E8:2E:93:49:10:5A:8B:FF:E3:AD:4F:41:BF:06:1F:1A
Authority key identifier: 7D:2E:D9:77:2A:D0:6C:E1:D3:59:11:D2:6C:39:79:B4:E2:6E:BE:43
Certificate issuer: /CN=7d2ed9772ad06ce1d35911d26c3979b4e26ebe43
Certificate serial: 01A170CA290BC6D702804B2EC7C683529BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft
Manifest number: 4E
Signing time: Sun 25 Oct 2026 02:00:59 +0000
Manifest this update: Sun 25 Oct 2026 02:00:59 +0000
Manifest next update: Mon 26 Oct 2026 02:00:59 +0000
Files and hashes: 1: fS7ZdyrQbOHTWRHSbDl5tOJuvkM.crl (hash: svS+JyDZplfSdZlgsuJf8K3dCIxYFAU4ovWEeYEnCzw=)
2: pXWi5rhKsu2-vy5hbthrSqiVGqk.roa (hash: WeTdZTd6WH/iKIseN8SAJGdy9bh1UW5D5zEDLozS7lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:ca:29:0b:c6:d7:02:80:4b:2e:c7:c6:83:52:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ed9772ad06ce1d35911d26c3979b4e26ebe43
Validity
Not Before: Oct 25 02:00:59 2026 GMT
Not After : Oct 26 02:00:59 2026 GMT
Subject: CN=41b1be4ce82e9349105a8bffe3ad4f41bf061f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:01:5d:6d:92:40:8c:03:35:ff:94:b7:7b:
eb:13:80:df:05:0a:4e:62:22:e5:21:57:66:32:0b:
a3:48:44:96:9a:68:25:fe:aa:49:c3:45:00:ea:fc:
f0:7e:54:ba:ba:a6:27:03:0b:05:a6:da:35:a6:59:
a8:e4:33:91:99:b9:25:7d:1e:77:3b:3a:34:ab:11:
8d:07:a4:c9:d3:6d:73:45:d4:40:7c:aa:db:1d:7d:
e9:15:ed:c7:c4:6b:a1:3f:26:52:b1:a5:df:6c:e0:
01:d6:9d:22:50:ea:21:cb:52:22:db:c5:cd:cf:86:
34:39:ae:d6:c9:56:de:93:19:56:bd:d6:60:46:ad:
ac:0f:6b:88:94:b7:83:e2:9e:38:ba:16:d1:c7:12:
2a:67:ce:d4:2d:c0:eb:7a:b2:ae:74:48:ba:e0:7f:
a4:29:56:39:64:09:1c:44:9f:ab:84:42:ef:30:24:
bc:5a:99:8d:bc:14:bb:28:54:35:65:48:55:f0:d6:
7e:e4:19:95:1d:ab:86:e4:1c:30:2a:78:ef:68:a2:
83:a1:0f:25:b5:65:2b:e0:c0:80:02:45:f7:d0:c9:
f3:ae:31:be:15:3d:9a:79:80:4c:de:2f:62:75:cf:
46:7e:db:c6:08:5b:be:85:12:d2:b3:5f:bf:1f:74:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:BE:4C:E8:2E:93:49:10:5A:8B:FF:E3:AD:4F:41:BF:06:1F:1A
X509v3 Authority Key Identifier:
keyid:7D:2E:D9:77:2A:D0:6C:E1:D3:59:11:D2:6C:39:79:B4:E2:6E:BE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:2d:80:52:85:c1:fc:22:e4:d7:34:47:7f:45:c6:32:96:
9d:83:02:40:b0:c9:d8:e9:17:1b:49:3c:bf:41:a1:6e:60:64:
1b:f9:db:80:ea:f5:3a:9a:36:3e:70:43:f3:03:30:c1:b7:2e:
05:77:8b:6a:cc:0d:85:77:f2:32:6f:96:2e:f8:5e:55:ab:ef:
87:87:8b:86:81:ca:89:54:2f:af:df:e3:65:42:70:71:f7:f9:
df:11:1e:d9:cc:14:10:a9:06:d8:78:49:b0:b8:50:c3:22:d6:
47:3c:dd:4c:3d:55:23:d4:f7:a8:85:31:57:b2:a0:da:4b:7f:
69:a2:46:47:ba:91:7c:23:b6:a2:7a:e8:8e:9d:eb:12:08:5b:
74:bd:df:e8:f3:b0:48:3e:6e:08:0d:77:67:de:9b:28:8f:59:
23:a3:a1:e3:ea:78:63:4e:e6:9d:0f:9a:65:9a:1c:14:26:d1:
d4:09:fa:0e:0d:97:8c:a2:83:a1:6b:30:a5:6b:98:c6:69:5a:
0f:38:39:35:79:4c:28:90:e7:90:cf:ce:98:f4:01:15:c9:fc:
14:9f:c5:92:1b:01:b8:fc:08:4d:04:8d:7a:76:5f:9b:5e:36:
4f:b5:bd:cc:d6:5d:4a:d8:64:e9:6d:a0:e3:ae:33:8c:6d:8c:
a4:2c:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:34 2026 by rpki-client