
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: emAv/jX6M2DVZxxOr2TM9qs3DDPowfzQx84YYP5M7ro=
Subject key identifier: 8A:B4:6C:92:A9:76:2C:21:4E:71:E3:9F:3E:09:ED:B2:1D:32:0F:3C
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 01A15F314D7E80EF9EB632480BB309865D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 1AB5
Signing time: Wed 21 Oct 2026 16:00:28 +0000
Manifest this update: Wed 21 Oct 2026 16:00:28 +0000
Manifest next update: Thu 22 Oct 2026 16:00:28 +0000
Files and hashes: 1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: 2lpo170QZkvRFnFP4CnidM2YVS6o7dN5FTVdyx3N0wg=)
3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:4d:7e:80:ef:9e:b6:32:48:0b:b3:09:86:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Oct 21 16:00:28 2026 GMT
Not After : Oct 22 16:00:28 2026 GMT
Subject: CN=8ab46c92a9762c214e71e39f3e09edb21d320f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:53:3b:57:a7:76:95:d2:39:5a:f4:a4:9b:
f9:0e:af:71:e0:a8:a0:b6:ec:b1:7a:f6:4b:77:3f:
ad:0f:93:b7:51:fd:89:ab:56:be:f9:d1:87:99:54:
fd:72:4e:fa:02:a0:23:7c:81:dd:94:ca:79:85:f9:
58:18:78:72:e9:ec:13:24:98:d4:03:6a:d7:a9:3b:
9b:48:6c:1c:ba:0c:e1:e1:f1:e7:79:97:e5:4f:c3:
d6:1f:ec:8e:ab:9a:50:6a:1e:d4:14:d2:27:10:33:
21:f4:85:62:86:4c:2b:4f:79:51:d1:5f:94:73:3f:
d2:c6:55:65:b1:a5:b2:a1:76:82:04:b9:83:34:3e:
03:74:d6:b7:a4:ff:22:04:2e:a5:90:cc:ab:19:45:
9e:07:37:fb:e4:e1:e4:59:52:df:a6:07:1d:f3:e3:
fa:e9:f3:58:01:aa:f6:79:85:ca:21:ff:89:69:0f:
79:bb:fd:a0:64:60:24:9b:8c:9a:cf:d9:e1:01:69:
e3:5d:a9:a3:a0:6d:e3:d5:3a:0b:98:98:7e:a8:32:
ef:e1:04:f4:d2:00:f4:44:a9:74:97:c8:26:6e:a5:
f9:69:66:91:a3:85:1c:d0:fb:ef:84:13:ad:ec:ca:
09:37:b2:a0:07:e7:d5:95:6d:23:d8:c9:ef:85:86:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B4:6C:92:A9:76:2C:21:4E:71:E3:9F:3E:09:ED:B2:1D:32:0F:3C
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:6c:5d:33:46:13:c0:f2:a1:cc:8f:52:cf:01:f7:42:03:
87:02:71:fd:a6:09:cc:9d:74:ec:c5:e9:7e:f8:a6:63:e7:a7:
0c:7a:ad:62:e8:ae:a8:9b:48:86:31:6e:2e:c8:97:7e:77:ce:
f6:5d:dd:84:a2:23:00:04:bb:d5:77:e9:45:9a:3f:17:06:5d:
1e:20:f8:b9:a8:eb:3e:e8:d9:b2:67:7c:0d:cb:df:95:df:4e:
1d:39:65:cd:48:d4:ba:a0:c2:52:1b:ce:5b:89:1f:7e:40:6b:
fb:4d:01:3f:93:c2:f8:4b:6a:8d:e9:5d:c9:1d:80:2b:ec:2a:
a3:c6:4c:08:5a:c4:e3:ec:91:67:38:c4:68:7d:c6:c1:ec:4b:
41:75:ef:6f:ab:53:d6:08:1a:17:17:bd:21:72:13:d2:ad:0b:
61:85:0e:c6:e8:b7:01:2a:1d:2a:b6:16:1e:09:db:f3:ae:ac:
ad:86:f2:de:48:38:c8:51:f0:d1:ba:5b:e6:1c:a6:4b:53:3c:
74:39:26:15:2d:af:67:b7:88:34:2b:05:01:3e:2a:d9:13:ff:
6f:0d:f5:f2:6a:a3:e6:c3:c4:1a:df:2d:65:56:3f:59:bf:6f:
e0:a8:a2:33:8e:49:ce:6b:52:82:38:ef:9e:4f:87:0a:16:6e:
18:9f:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:02 2026 by rpki-client