Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: yDNp72ov0V2IN23Y03QtVrs/f0g3GZpb13xkNr1J6Cs=
Subject key identifier: 82:98:AF:D3:1D:C5:5D:60:F5:9E:B4:BF:D0:FB:48:86:71:23:14:CC
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 01A186E42BEAFD1DA8D21A307C464670658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 09:01:02 +0000
Manifest this update: Thu 29 Oct 2026 09:01:02 +0000
Manifest next update: Fri 30 Oct 2026 09:01:02 +0000
Files and hashes: 1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: brQQGSwe/KZsa6EYjEu90bdibgP1OSsEq81X9Fa2udw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e4:2b:ea:fd:1d:a8:d2:1a:30:7c:46:46:70:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Oct 29 09:01:02 2026 GMT
Not After : Oct 30 09:01:02 2026 GMT
Subject: CN=8298afd31dc55d60f59eb4bfd0fb4886712314cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:8f:b8:dc:d3:a5:20:65:38:a7:a6:19:98:
15:05:6e:83:bd:9b:7b:65:19:15:fd:86:4c:17:73:
30:b3:00:d9:ae:e5:e9:ae:f4:47:16:04:4b:0e:58:
9a:53:7c:6b:aa:50:34:34:b1:4e:23:f4:5b:b2:ed:
74:2c:f3:80:11:82:25:06:92:2d:e2:8f:39:94:98:
69:bb:01:40:db:4b:a7:d1:99:9c:b4:18:c0:78:65:
23:6f:f8:80:7a:ce:69:f2:c1:d3:44:ea:bd:46:72:
5b:4a:9f:bd:60:31:11:c5:93:42:26:28:0a:0a:bf:
68:cd:9c:02:7a:36:48:57:5a:7b:fe:67:86:50:77:
28:a1:7a:c1:4a:91:c2:1f:b2:b4:c0:31:1a:60:5d:
bc:bd:5d:74:69:fd:6a:8a:54:41:38:02:7b:ae:08:
8c:36:29:76:bc:3e:d0:94:03:b8:46:21:0f:b6:c8:
d0:8e:fc:ec:42:2d:3a:7f:2f:c0:60:d6:1e:f5:07:
cc:19:6c:e7:c7:48:f0:1d:ea:75:51:b7:eb:a9:02:
ac:48:2f:fb:2a:a9:5c:ba:b2:9b:07:0b:ed:2a:e9:
05:03:32:8b:e9:44:61:56:54:9a:ec:fa:76:09:0d:
3e:e0:0e:ac:12:07:7a:60:b6:f5:77:58:8c:23:84:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:AF:D3:1D:C5:5D:60:F5:9E:B4:BF:D0:FB:48:86:71:23:14:CC
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:6d:94:87:fb:fe:af:24:b4:dd:02:36:32:fd:fc:a5:18:
90:9e:3a:12:e1:e6:56:f6:28:60:a9:82:d5:27:d3:db:cb:3c:
69:cf:ca:b0:91:63:68:fc:c0:ce:3a:d6:f9:31:a0:6c:fd:ce:
33:6e:50:eb:e7:15:82:3e:40:af:82:02:e0:fa:27:9b:3a:7b:
ab:01:a1:69:cc:63:22:df:fa:aa:0b:99:a0:a5:76:61:84:d2:
fb:98:9d:68:c4:41:1a:5d:3b:f2:72:b2:6b:d0:78:7f:ab:ba:
d9:d7:f7:21:54:d5:20:bd:bc:2e:fd:6e:a2:a1:fb:39:fd:7a:
20:c3:51:df:e8:6d:7e:22:7d:f4:10:da:cc:e0:b0:ab:64:83:
5f:32:90:d4:f3:7f:54:4b:8b:91:ef:39:c2:2c:5a:66:22:03:
8b:ce:9a:ef:0e:fd:9f:f2:a7:6a:bd:b6:87:a1:55:1e:21:bf:
8c:99:14:2d:c1:dd:02:2a:80:01:76:14:68:19:d9:80:5a:56:
40:dd:ae:b9:a7:43:62:b3:65:d8:f2:0c:db:54:fc:21:19:59:
aa:f8:cc:e4:3b:3e:da:1d:4e:34:f7:12:2b:49:23:30:88:8b:
3a:b0:94:4f:53:f4:aa:c5:68:3f:1e:41:07:f2:db:c5:9b:19:
fe:d0:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:48 2026 by rpki-client