Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: n0q3sV+setpYbTszEXshJ6AVFmuXXF71DqGBKwzwy+k=
Subject key identifier: 01:7D:33:16:62:B8:11:6B:B2:BE:B0:03:9E:16:F2:82:D7:39:25:39
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 01A06EDEE01EFFE405FA3554A5405B2CE4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 00:01:35 +0000
Manifest this update: Sat 05 Sep 2026 00:01:35 +0000
Manifest next update: Sun 06 Sep 2026 00:01:35 +0000
Files and hashes: 1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: Kj7o83oZZsbnCHK39OeziN0ANIRSZ4Xx1OSTZuw7yDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:e0:1e:ff:e4:05:fa:35:54:a5:40:5b:2c:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Sep 5 00:01:35 2026 GMT
Not After : Sep 6 00:01:35 2026 GMT
Subject: CN=017d331662b8116bb2beb0039e16f282d7392539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:ad:3e:bb:f5:30:44:d9:75:b2:91:ed:0e:
c7:f6:96:aa:e9:08:c4:78:e9:23:04:1a:a0:a5:4d:
05:13:c9:90:99:f9:ae:18:db:18:0d:dc:44:f9:98:
d0:55:e2:5f:69:a4:b2:1a:86:0f:70:6f:b3:90:64:
4a:06:65:9e:fe:c5:b7:48:a1:df:f8:25:44:cc:3e:
77:b1:58:de:10:b2:34:b6:ba:ff:a9:3d:9e:59:a5:
f6:27:d2:a1:20:d4:54:29:f2:36:d7:be:52:25:59:
8a:76:a2:18:0f:e0:66:9d:a0:37:5d:96:b6:57:c3:
bc:94:a9:54:40:56:39:9c:de:2b:c7:92:40:9a:3a:
89:30:13:ab:4c:13:9a:fd:2d:cd:62:5d:cc:3a:65:
23:41:a8:3f:34:ac:43:af:25:bb:88:8c:16:c3:b3:
6e:34:9a:23:d4:db:03:94:44:f8:52:4f:35:72:06:
9c:36:06:a9:82:97:99:f0:82:12:96:29:ba:07:86:
b8:5d:06:f8:bb:48:36:4d:2b:62:be:f3:6a:e2:7c:
08:62:4a:04:0f:a4:9b:94:9e:95:c3:f0:b9:82:de:
60:e0:13:9b:a5:0f:8c:39:cb:f9:20:70:57:6d:29:
65:f6:60:98:a5:34:1a:c8:cb:97:cb:76:37:6c:51:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:33:16:62:B8:11:6B:B2:BE:B0:03:9E:16:F2:82:D7:39:25:39
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:b4:3e:c7:6e:b9:88:4f:1d:a9:2a:34:b7:da:98:14:d9:
4e:15:e5:f1:8b:3a:8d:5c:2a:11:e0:1c:aa:6b:5f:88:17:54:
83:24:30:7f:dd:2b:6e:97:37:48:7a:7a:e0:6d:47:81:cb:1c:
73:a9:c3:55:02:6e:6c:7e:e3:c2:b2:14:de:21:f0:48:d1:f6:
23:f3:88:59:51:b0:bb:c5:e7:cb:2b:3c:c3:d5:50:d2:b7:39:
c3:ff:6a:d7:3f:5c:07:73:50:3b:fd:27:b3:3e:0e:f5:68:a7:
72:46:7e:2e:f2:9c:04:07:b6:e0:50:eb:64:95:50:91:18:a0:
9b:4a:23:23:17:5b:16:7b:27:9f:82:e9:68:b5:44:8b:76:d8:
f4:e4:f5:78:fa:73:d5:de:7e:d0:12:31:62:f8:d6:55:d7:d4:
f2:aa:ba:c6:f0:ea:d6:4b:4d:e1:e7:d4:1c:49:11:5d:29:82:
58:4e:69:92:ac:91:a4:28:ca:7c:bc:fc:58:fe:18:65:aa:53:
17:b5:91:66:a6:bd:82:35:eb:16:3f:da:e4:08:f8:af:77:07:
4f:4f:eb:7a:d4:b3:d1:93:dc:7b:a2:4a:e5:26:c7:e6:11:a1:
81:90:5a:4a:68:1a:cd:99:0f:3a:7e:dc:b8:ce:d7:68:aa:7f:
4b:3e:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:07 2026 by rpki-client