Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: CzrNgcm0fbqJKgiysVSw838p09NPnWo81vFMp2XEARM=
Subject key identifier: FB:13:2F:BC:21:57:5A:07:FB:CD:72:CB:9A:51:2A:87:52:4E:68:10
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 01A188650332F4FDA8B7ECB2D579FD2BC1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 1ACF
Signing time: Thu 29 Oct 2026 16:01:23 +0000
Manifest this update: Thu 29 Oct 2026 16:01:23 +0000
Manifest next update: Fri 30 Oct 2026 16:01:23 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: mAR1fc+66d2bZ9Y/ijKaLhMBpVUqa+hIGiHd1wcCE/M=)
2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:65:03:32:f4:fd:a8:b7:ec:b2:d5:79:fd:2b:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Oct 29 16:01:23 2026 GMT
Not After : Oct 30 16:01:23 2026 GMT
Subject: CN=fb132fbc21575a07fbcd72cb9a512a87524e6810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:b8:b0:ab:18:58:6d:13:da:32:3f:82:42:
b2:9b:2c:c7:f8:d0:d8:3e:5e:20:48:b2:03:d2:f9:
7d:21:95:cc:6e:9a:55:80:27:0a:51:bb:91:dd:38:
76:ad:c8:c3:c7:f8:5c:8d:1a:bf:aa:b8:9a:b7:54:
54:f8:fc:61:f3:25:4c:0c:f6:95:44:3d:1d:47:0e:
a9:01:19:dc:74:59:db:15:17:96:38:43:32:47:b1:
7c:e7:0f:55:3f:24:8b:56:fc:5c:bb:b1:f6:9f:50:
d5:a6:4c:1b:e3:8d:fc:6d:49:19:1b:3c:20:c6:a0:
64:0c:fa:68:ef:30:4f:d9:9f:4b:e4:8b:fa:40:c9:
35:61:87:65:d6:58:3d:a7:ad:10:52:fd:8c:82:1c:
57:f0:da:92:22:05:ee:78:2c:45:9c:55:8e:b3:b9:
ee:8f:c4:f6:03:52:89:67:30:13:3f:0a:f9:02:7f:
50:39:95:b7:04:4f:77:34:7e:83:46:17:c3:60:a4:
0e:24:d4:a3:34:96:70:0b:a2:b9:2d:30:82:e4:ea:
88:4d:8e:f1:80:df:b3:06:c7:d9:36:c4:b7:9b:49:
d4:b5:5d:6b:c5:1e:7c:4f:ca:82:4c:42:92:16:a6:
27:45:86:3c:1c:98:40:f7:88:4f:c8:b7:0a:41:20:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:2F:BC:21:57:5A:07:FB:CD:72:CB:9A:51:2A:87:52:4E:68:10
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cc:5f:fd:83:fa:8a:cc:2a:e0:76:30:2d:57:c7:2f:16:bf:
cb:a9:d8:77:e6:74:f6:83:81:b7:de:bc:7c:bf:81:f6:a9:65:
4e:ee:7b:7c:38:ce:b3:ca:08:89:46:48:85:44:9a:4f:4a:a2:
30:33:87:f0:55:0d:63:f7:dc:91:64:0f:83:6c:43:e7:28:a4:
4e:09:4c:dd:77:28:e2:1d:b2:04:86:24:28:a3:83:4e:c7:ca:
60:e5:40:d1:1e:18:ba:68:76:dc:4f:33:04:d6:95:6d:72:72:
27:57:91:a1:49:b5:8a:33:f8:28:b8:92:b3:95:c0:0b:b9:8e:
a5:7b:59:b5:5c:db:e7:c7:ca:30:8d:a8:d0:05:6c:74:cb:27:
33:33:c8:87:5d:4d:e3:17:6c:5a:37:1d:09:82:07:1a:96:6a:
61:4c:c2:ca:11:a1:c3:fc:eb:7b:81:b1:25:ca:80:0a:22:65:
73:ce:22:10:b4:76:83:58:53:f9:63:e5:56:b6:1e:74:b6:6e:
36:33:77:33:e5:59:3d:26:d6:97:87:85:0a:5f:de:d6:aa:d8:
29:81:e0:57:ca:1b:3d:26:a5:93:97:e8:d6:cb:41:fc:18:3d:
64:4a:3c:bc:4c:37:36:57:93:c4:91:0c:31:e9:2e:6f:c8:a4:
af:f2:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:13:52 2026 by rpki-client