Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: AmvpD5JQwnnCYZaWkr9pcuiacYpscXbFM/1BYmcBd/c=
Subject key identifier: CC:9B:D2:AB:A3:E3:EA:31:C7:4E:97:4C:38:16:FD:24:29:AD:6D:F9
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 01A17B1694F41DC59BDDE1361C36F842D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 11AC
Signing time: Tue 27 Oct 2026 02:00:39 +0000
Manifest this update: Tue 27 Oct 2026 02:00:39 +0000
Manifest next update: Wed 28 Oct 2026 02:00:39 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: YQ0lovXikSXNwGpE6L3KCR+fsNXjb9nzwPP0JMEQ1M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:94:f4:1d:c5:9b:dd:e1:36:1c:36:f8:42:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Oct 27 02:00:39 2026 GMT
Not After : Oct 28 02:00:39 2026 GMT
Subject: CN=cc9bd2aba3e3ea31c74e974c3816fd2429ad6df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:13:22:e6:43:95:52:76:02:cc:d9:c9:4a:
e1:8c:4f:79:14:29:ab:92:2c:6d:ed:97:37:8e:92:
ba:57:8d:e7:81:35:0b:0f:14:7b:88:29:2c:be:a2:
b3:ac:b1:08:29:c7:1a:99:3a:68:b3:d5:58:d0:e5:
06:a0:a6:3e:1c:83:34:68:bb:04:57:1e:b0:39:e8:
13:ba:e7:ad:7d:8b:ae:6d:18:f2:41:ef:7d:03:75:
14:43:8b:ef:91:3e:fc:75:0f:fb:5e:24:cf:3f:11:
32:21:fa:96:be:8b:3d:18:c6:c6:24:23:3d:8b:a1:
22:88:8b:71:30:0d:be:ce:f7:fb:5f:93:37:00:e5:
24:6a:81:2c:88:60:cf:c0:f1:bc:81:fe:0a:8e:90:
2e:08:16:be:e7:f6:81:30:32:92:9b:a0:fe:4a:15:
10:1f:57:f4:66:f4:ec:c1:14:57:3b:06:f3:2d:04:
c0:95:73:3b:ee:1e:6d:ea:e6:00:ac:da:c8:cf:64:
b0:67:18:70:43:d0:f7:4d:60:74:98:10:73:8a:b9:
ff:ef:73:10:3d:4e:19:81:14:f1:65:6d:76:52:a5:
f2:c6:db:16:47:3b:a9:5c:ba:28:50:0d:44:67:d1:
d7:de:46:d3:23:4c:84:39:17:74:6f:f7:ce:ed:e3:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:D2:AB:A3:E3:EA:31:C7:4E:97:4C:38:16:FD:24:29:AD:6D:F9
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:27:d0:9b:07:0c:30:96:d8:54:44:37:7c:fb:56:d7:05:
5b:69:6c:6b:f2:d5:c6:6c:90:98:9f:18:e0:8b:fb:a4:b6:da:
fb:4a:b5:c2:3b:45:13:e9:6e:d5:cf:26:2e:73:d3:9a:d9:f4:
d1:9b:d2:c7:d5:9b:17:61:ae:35:b7:22:6e:53:7d:a8:8f:d9:
7b:c3:62:20:72:fa:15:ee:0a:02:27:c6:3d:15:78:d3:3a:33:
83:1d:63:1e:be:c0:a4:0d:42:bc:17:ba:32:e7:85:fe:91:62:
6e:2d:2e:f7:cc:22:55:99:e6:11:08:2a:ae:8a:79:2f:64:47:
b0:f2:38:3e:71:06:4d:bd:27:ad:81:6b:59:a8:f2:ce:ed:70:
fa:7e:3f:83:70:56:7d:aa:70:b6:0e:8b:f6:12:92:03:a6:70:
b2:df:ad:17:d0:29:9e:c7:56:6d:19:6b:33:06:74:d9:c9:1c:
6c:58:40:dd:61:ce:25:a3:14:39:cc:1a:72:cc:32:59:ad:f6:
34:38:fd:ce:b7:28:7b:3e:a9:b5:54:b4:d3:0d:53:b2:8b:fc:
6a:0c:3c:fc:27:aa:7a:41:b1:c4:b4:4d:be:70:22:ad:53:66:
0f:83:8a:5f:c2:0f:1f:a2:17:af:0c:30:1a:d0:fc:b3:d0:f5:
64:d3:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:39 2026 by rpki-client