Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
File: fsXyOE4h9kNhkTORzhqSs3LoD68.mft (raw, json)
Hash identifier: tVhnqZvF6kVQo9XX2nCTl3uH2F5jRp2AUAcuR4oAG0Q=
Subject key identifier: 0A:81:CE:8A:F1:5E:10:CA:FD:30:23:3E:76:1D:9C:9D:C9:4D:1D:9B
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 01A18788A825AD42373384D8CA1EC3FD5A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:42 +0000
Manifest this update: Thu 29 Oct 2026 12:00:42 +0000
Manifest next update: Fri 30 Oct 2026 12:00:42 +0000
Files and hashes: 1: LPa8zPLpV8cXLL0nCvftZJmqBOc.roa (hash: LXKc34IWPeXHGhj7ZOiZu7C5VwcYcKy1yZjCEZ9N19Q=)
2: fsXyOE4h9kNhkTORzhqSs3LoD68.crl (hash: OODFp3JwrLBBKYNKq3EGk3MBim2T/1VFv4ZUd0df4oo=)
3: pQG7xs47QDWXz1fB29umQErevhE.roa (hash: YQn0GgeL+9mDh4EZTTSLpL9PtFZrlsb8YoTmjdlwtnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:a8:25:ad:42:37:33:84:d8:ca:1e:c3:fd:5a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Oct 29 12:00:42 2026 GMT
Not After : Oct 30 12:00:42 2026 GMT
Subject: CN=0a81ce8af15e10cafd30233e761d9c9dc94d1d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:aa:9b:e7:e9:bf:9b:53:40:52:16:83:e4:
e3:6a:d6:ba:8a:f9:f5:ef:e4:57:40:3b:a7:b4:8a:
7d:26:45:2d:f5:2e:d5:fe:58:56:01:fa:a6:15:08:
fc:cd:25:d6:1b:c4:d2:21:e5:0a:10:af:9d:1f:6d:
5a:7a:52:11:8f:5b:3f:0c:ce:ef:63:b5:c3:ab:9a:
e8:81:38:ae:f7:99:d5:6f:c2:24:f3:18:33:ae:bf:
69:c7:bf:bf:ec:46:ca:2f:7e:55:34:23:1a:15:17:
57:da:fa:a5:53:f0:0a:49:ab:ff:25:a9:6a:bb:ee:
a2:da:5d:21:52:a0:76:fe:db:c8:e9:3c:f7:ae:e0:
b7:b3:13:af:7b:09:0c:38:af:6a:99:68:b6:2a:55:
8a:74:e6:2a:2d:1c:26:19:db:32:3d:3b:82:60:49:
a1:34:b8:aa:6c:87:59:55:5a:82:f3:88:7a:32:0c:
09:3c:38:44:8b:7d:41:4b:c3:54:ea:ba:64:b9:99:
bd:5f:3a:09:da:a9:cc:fe:d3:6f:1b:ce:94:3c:98:
7b:04:47:fd:7c:be:6e:4a:0c:5c:48:65:4f:2e:79:
c4:b3:2d:ae:f8:78:f0:89:a9:9a:96:53:ac:43:aa:
43:6e:d9:ad:70:31:af:3b:2d:9a:ec:df:01:10:ad:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:CE:8A:F1:5E:10:CA:FD:30:23:3E:76:1D:9C:9D:C9:4D:1D:9B
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:48:c6:42:4d:25:4d:0a:09:c0:e7:61:59:24:be:e0:11:
b5:bb:ed:bc:aa:85:48:b7:b6:fa:35:1b:e8:f1:be:57:63:53:
da:01:fe:90:3c:47:63:2d:7d:6c:9c:f9:fd:aa:23:05:0d:d5:
88:88:99:a3:88:9e:72:e4:43:ad:a0:a9:d1:9c:b8:85:5a:25:
36:03:43:02:f4:4a:09:9a:55:95:46:cf:bc:99:ca:90:a5:bb:
1c:ef:89:fe:d0:0f:87:55:0b:34:d5:8b:e0:8f:00:0d:5b:f3:
93:59:ff:88:08:f3:3c:e8:81:3b:5b:bf:72:c1:86:8d:4b:a3:
c5:20:87:a9:74:66:23:01:c2:5a:c8:e8:67:7f:6d:e7:f8:de:
ba:c7:ab:30:ef:73:d1:84:3a:aa:b8:17:08:18:27:4e:ff:28:
8d:9d:b3:8f:2f:68:0c:b0:ee:b2:cc:16:59:a8:54:2c:eb:60:
49:4c:60:95:da:e2:7c:6f:96:45:26:e7:31:de:d2:57:d3:da:
08:c5:a6:4c:97:02:e3:5d:b5:9f:33:2f:0b:28:29:ea:e2:f3:
e4:61:ab:d2:ee:3f:28:b8:4b:ea:54:78:07:05:2e:44:5b:d1:
da:0d:0a:b2:36:70:b3:8e:0f:30:41:09:da:57:96:d4:46:6e:
68:47:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:41 2026 by rpki-client