Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: GpvZ+QRLz3K9pJ2VJXryfFoSeUyrS+bqPcJEBrgqZJE=
Subject key identifier: DB:4E:2F:36:6C:3E:71:E1:23:C5:F8:2E:00:A8:26:86:4F:A2:05:EA
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 01A18B2E23128DABF0775C477155CA58604C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 0440
Signing time: Fri 30 Oct 2026 05:00:18 +0000
Manifest this update: Fri 30 Oct 2026 05:00:18 +0000
Manifest next update: Sat 31 Oct 2026 05:00:18 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa (hash: PXjaU8QTswXCjDyy2BPXpx1XOOVAoOODgsuczLeFqK8=)
3: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: I8NZpW/tonx/i+jT4mpXVdG/9cyfARG3NzJ66MJoCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:23:12:8d:ab:f0:77:5c:47:71:55:ca:58:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Oct 30 05:00:18 2026 GMT
Not After : Oct 31 05:00:18 2026 GMT
Subject: CN=db4e2f366c3e71e123c5f82e00a826864fa205ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:96:08:f9:31:b0:fc:1c:e7:90:5f:46:63:
e5:1a:d6:65:65:75:48:38:5d:46:d8:36:73:d4:e7:
da:9e:a7:ea:90:f1:52:fe:2d:0f:42:89:e0:82:21:
2c:a2:94:15:b3:a3:da:55:67:07:c5:88:fa:ac:cf:
97:c0:a0:c2:79:04:30:1d:61:6c:2a:95:11:51:18:
67:c5:eb:74:33:56:82:15:61:a9:39:3b:36:9c:62:
a9:89:bf:b6:31:8d:45:7c:5d:05:b4:ee:1f:3d:7a:
78:dc:5e:57:d5:23:e0:8e:75:1a:91:5c:d4:e9:bc:
7e:7b:56:3c:f0:3e:a5:8c:e1:80:a7:a6:0e:e9:3e:
19:ec:a4:9f:d1:83:e3:8d:d1:48:52:f5:c4:34:44:
bf:ba:b6:d5:ba:1f:13:2f:67:6b:6e:b0:21:3e:39:
dd:c9:2a:06:8a:c7:61:34:95:2c:26:9c:89:5f:d8:
2e:35:e1:d6:59:a4:d3:7f:1b:75:87:f2:23:99:e5:
30:4e:87:b2:5c:0c:95:dd:b6:6b:11:97:7a:22:50:
6f:19:36:91:b7:76:13:24:c3:b2:3f:c4:64:19:a4:
9e:9e:1a:7f:ca:c5:f3:51:bf:79:54:98:36:15:2e:
48:b7:98:e2:ce:05:2e:c2:e5:bb:b7:2a:ac:17:6c:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:2F:36:6C:3E:71:E1:23:C5:F8:2E:00:A8:26:86:4F:A2:05:EA
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:19:d0:13:49:8a:96:60:5e:32:7d:8f:07:20:ac:49:bc:00:
4a:63:b7:e1:40:16:48:09:c9:25:ec:b4:1d:06:66:da:bc:da:
e8:99:4a:56:5c:0e:06:bf:0b:40:a2:ae:d9:c9:e6:e4:9b:bf:
fd:1a:57:f7:a8:07:cd:10:31:b4:ba:cc:4e:dc:af:ea:99:b2:
3f:5f:fb:a1:a7:cd:78:d9:43:71:bf:69:b3:bd:7a:ff:e9:4e:
90:6b:36:cf:e7:db:8f:00:03:bf:eb:d8:3a:ef:e0:f0:6b:20:
b6:3c:85:78:cd:bd:3a:30:b8:d7:87:5e:11:3d:cb:ed:6c:bc:
c7:f3:b1:3e:9f:73:47:89:9e:cf:70:fc:b2:1c:9e:73:05:3b:
51:91:3b:2a:40:73:cf:98:1a:03:90:1b:93:b9:b8:a3:e1:d8:
87:5d:f8:cc:fc:2b:5a:69:a7:ff:78:6d:b0:29:2d:e7:eb:7a:
b4:88:33:b9:99:e8:e1:5d:39:7e:11:89:d0:71:50:ae:c8:b1:
dc:b9:9e:f8:2e:6e:99:dd:58:24:eb:a1:a1:fd:bc:a3:c1:24:
74:00:79:bb:d4:98:a1:d0:8f:87:00:dc:26:4c:76:fb:f9:85:
af:86:b9:bb:09:9c:ce:bf:9f:1a:ca:a2:2e:63:18:8c:f7:0e:
0e:4d:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:09 2026 by rpki-client