Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: AF2wb226I6bZrpVC80ehIeob9DD1jqaUWcHIrkjKomw=
Subject key identifier: AA:A4:0D:6D:E9:3E:58:AA:3D:DB:74:05:61:90:15:16:24:AA:CA:FD
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01A173CB15FADF003336B9BC1A25650E274D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0CCD
Signing time: Sun 25 Oct 2026 16:00:51 +0000
Manifest this update: Sun 25 Oct 2026 16:00:51 +0000
Manifest next update: Mon 26 Oct 2026 16:00:51 +0000
Files and hashes: 1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: jwH3Ffcz7XL1IueRyysGs1LOsyBD4gz/5gCqyXHX8wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:15:fa:df:00:33:36:b9:bc:1a:25:65:0e:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Oct 25 16:00:51 2026 GMT
Not After : Oct 26 16:00:51 2026 GMT
Subject: CN=aaa40d6de93e58aa3ddb74056190151624aacafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:d1:c8:02:6f:7d:11:eb:62:99:03:34:e8:
03:cb:d2:7b:15:97:12:ba:0e:f3:40:63:c1:df:d1:
b8:5f:0b:d1:7c:2e:a3:32:3d:22:ae:8e:da:15:dd:
59:43:97:8b:19:6a:29:ec:6c:9c:fa:07:47:d7:ae:
cf:aa:5d:82:b7:dc:fb:56:3e:7f:31:8c:37:d0:24:
08:25:0e:34:a0:7b:71:39:ac:7b:b2:77:f9:03:20:
2f:ab:65:85:13:08:43:87:9a:00:8b:04:0b:e3:7c:
fc:d4:73:46:4f:11:20:6f:48:fe:a5:10:01:a4:95:
67:c0:e2:3c:6d:a6:0a:2c:37:a4:6d:ce:83:8c:3d:
b0:0d:06:0e:87:0e:7c:23:78:65:48:ad:54:14:80:
6f:6e:6e:34:9f:4f:5f:06:08:61:6b:6d:07:35:69:
31:1e:a0:48:89:0a:09:c9:f1:9d:cd:0b:71:47:62:
8c:4b:b4:4d:f5:d8:d4:40:58:1b:0d:5b:e4:de:eb:
02:3a:c0:b4:30:61:6f:63:bf:37:0e:92:58:0d:e5:
27:ff:6a:bc:4e:7e:e0:d5:69:82:21:e4:1b:27:c6:
79:c9:36:51:46:f5:e9:d2:84:6f:a9:a2:d8:9d:b4:
05:d3:99:43:09:54:14:cf:34:87:bc:f3:85:cd:58:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:0D:6D:E9:3E:58:AA:3D:DB:74:05:61:90:15:16:24:AA:CA:FD
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:67:21:dc:31:36:08:60:7d:3c:a9:7c:0e:e9:da:e6:d0:
cb:53:6e:ae:6d:6c:a3:28:23:5a:81:7b:64:31:7e:40:76:63:
9d:ff:6f:8d:2c:27:39:60:1b:2a:5d:08:94:4f:13:e3:76:cc:
22:23:6b:f0:31:a1:4d:43:6c:ad:ba:21:94:06:24:be:23:4f:
02:eb:8d:dd:66:00:a2:07:2e:2e:19:95:0b:53:20:99:47:23:
cd:7c:ce:a0:e5:67:42:fd:75:61:11:32:ca:ed:f5:21:74:e0:
01:09:36:c0:28:0e:7e:49:39:51:cd:07:fe:24:5e:b3:4d:21:
52:b4:96:74:7a:25:29:7f:17:bd:db:e2:d2:b4:80:fc:03:01:
d2:f6:3e:64:4b:ac:75:eb:60:11:cc:70:87:27:15:89:67:50:
60:45:65:48:47:29:df:7f:e9:8d:59:bf:65:5e:77:de:22:52:
6d:f8:4c:79:fb:76:4f:80:43:a6:9e:36:7b:a3:d5:98:cd:ea:
17:75:6b:1f:99:cd:23:ce:2a:bb:3e:90:aa:67:c2:54:12:65:
73:59:7f:fb:d8:72:d2:b7:93:7f:24:6a:76:15:71:72:b2:2a:
3f:b2:ba:1b:83:e3:e5:0e:9d:98:bc:49:1e:53:3d:ec:85:06:
ea:51:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:22 2026 by rpki-client