Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: 2RRF1hFmpUsZGizY4EgfjKMV7hhaMPSBw9YoOa4NdCU=
Subject key identifier: 84:48:A6:43:53:F4:A4:08:D4:85:62:89:38:44:4E:2A:D5:29:5A:0A
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01A1949F5BA94768C330E3A8BC55D3ABE825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 1AD0
Signing time: Sun 01 Nov 2026 01:00:34 +0000
Manifest this update: Sun 01 Nov 2026 01:00:34 +0000
Manifest next update: Mon 02 Nov 2026 01:00:34 +0000
Files and hashes: 1: 9zx-jGX3RbLlRInzB3WpUMej34c.roa (hash: 8a+25rbKXY3XSXyYkMEL2laj6pvmya/GUv2Ei14rA+I=)
2: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: Z6E7T6jwtSv7QbrHYyfdEybNiOSKeMRYDNs0vPmktGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:9f:5b:a9:47:68:c3:30:e3:a8:bc:55:d3:ab:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Nov 1 01:00:34 2026 GMT
Not After : Nov 2 01:00:34 2026 GMT
Subject: CN=8448a64353f4a408d485628938444e2ad5295a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:59:9b:f2:dc:dc:20:ad:04:b1:6b:bc:60:9c:
1f:12:83:23:70:18:7b:9a:34:34:87:c6:1e:1e:33:
a9:24:11:44:74:2a:c6:cd:07:e5:ab:2f:76:3b:12:
d8:e1:82:98:15:9c:93:3d:47:8f:0c:e9:42:e3:fb:
53:ce:7a:d4:e7:ed:06:7f:05:de:8a:3a:ca:6e:05:
4a:2c:9a:71:66:6c:a0:7b:8a:27:72:2e:04:10:72:
44:55:de:ab:cd:ee:55:49:74:9e:5d:09:be:46:a3:
9e:02:1e:e4:4b:ea:3b:eb:14:2c:30:ea:22:14:47:
f7:72:9a:56:5e:27:f7:9c:84:12:68:92:b2:2c:03:
50:df:88:43:5d:99:78:cb:f8:ef:b9:aa:7a:51:e5:
b4:1d:be:89:e1:09:ee:f1:09:04:d2:b8:35:99:91:
0d:83:83:85:ab:a4:95:5c:84:e2:44:ba:cc:4b:25:
96:63:ea:32:ce:60:aa:8f:d0:19:b5:0a:4b:66:14:
1b:0b:46:20:22:ab:d6:b2:79:d0:9d:bc:59:c5:a6:
4e:bb:9f:23:0d:59:57:15:e1:08:5f:97:e1:84:ff:
ff:e8:03:70:99:84:7d:7f:1e:db:84:68:7e:46:b1:
25:60:75:df:8d:b3:23:32:2d:c7:1a:be:96:b5:65:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:A6:43:53:F4:A4:08:D4:85:62:89:38:44:4E:2A:D5:29:5A:0A
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:30:1e:9f:e7:13:25:a0:36:1f:ff:6f:35:47:27:54:d7:35:
c5:d1:63:90:09:3f:7b:b8:66:ad:f1:85:30:0a:42:e3:09:2d:
0c:51:6b:07:34:72:e9:a0:aa:34:2f:ca:b5:f8:c8:f0:99:aa:
6d:e7:08:5e:fd:b2:4b:cb:59:50:c3:3a:4b:4b:29:99:ce:6a:
cb:13:32:c1:2e:b5:19:f7:f2:70:a4:b9:6d:4d:86:6e:89:c2:
7e:3e:53:00:b4:d4:70:79:36:61:87:75:d5:8a:e6:aa:3a:05:
37:97:40:dc:0a:d2:24:e1:0b:b4:a2:26:fe:18:02:56:00:68:
16:c9:85:7c:5f:10:1a:e8:22:9d:3a:3b:3c:2d:41:06:db:5a:
c4:fe:0b:ad:40:8f:3f:d3:06:f3:09:9b:95:72:72:b4:df:9b:
38:cd:6c:3e:3f:7b:2f:e5:8c:94:f1:12:21:f2:82:33:a0:5e:
32:69:0e:d4:44:9d:fb:ed:3b:a2:f1:3c:4d:2d:dc:c6:0e:64:
65:a8:fb:80:ba:14:23:9e:b0:9c:5e:fd:50:bd:4c:98:ea:a7:
7a:a1:1d:d4:bd:72:2e:56:30:91:20:76:30:04:a7:b6:9f:36:
dc:49:96:67:1a:27:b7:43:15:26:5e:74:d5:04:86:1f:33:c3:
fc:20:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:23 2026 by rpki-client