Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: Jkm9jlcQyUAKzMtNwdnYhhFbdy6EkCEWL6qBR9Lu+y8=
Subject key identifier: 76:06:98:1E:9C:FA:8A:2D:E2:70:DE:12:99:9B:36:98:63:0D:AD:3B
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 01A1159851FB3A409BC816BCBE75E6799508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 0553
Signing time: Wed 07 Oct 2026 09:01:06 +0000
Manifest this update: Wed 07 Oct 2026 09:01:06 +0000
Manifest next update: Thu 08 Oct 2026 09:01:06 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: KJhVf05Q3BO1ZugcWrGlOjfRBVkPK8kvPdi4Nv+SLIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:51:fb:3a:40:9b:c8:16:bc:be:75:e6:79:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Oct 7 09:01:06 2026 GMT
Not After : Oct 8 09:01:06 2026 GMT
Subject: CN=7606981e9cfa8a2de270de12999b3698630dad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:bb:94:21:6c:32:0a:ae:32:c4:f7:df:82:
af:bd:83:92:bb:fa:d2:c1:73:5d:b1:fb:1b:c5:97:
30:30:cb:83:83:0a:04:74:3f:9e:7f:cb:bc:ec:0d:
ab:09:6d:5c:22:13:17:04:de:66:4d:af:5c:be:33:
ef:e0:20:74:49:a9:f4:14:eb:6c:2e:49:67:e7:2d:
ad:c3:26:5a:3f:b7:7f:f2:03:33:7d:0d:12:b0:a5:
dd:3b:f6:90:a6:f2:8c:95:e6:4e:25:00:5c:5d:89:
66:11:20:29:00:bf:4f:96:54:3f:71:78:ac:8b:89:
cc:1e:03:e7:cf:35:50:36:a6:d1:d8:0d:f2:b8:ef:
14:28:a3:9d:a0:9c:ae:39:a2:b1:4e:ad:c5:b6:cc:
d8:cd:f4:4c:4c:cd:7e:0c:a2:1d:77:9a:0f:89:09:
8c:6a:d6:05:0f:fe:d1:af:1b:93:b1:01:be:bc:b7:
09:b8:d5:78:bc:df:ca:71:59:09:b8:3c:fe:55:3c:
b5:74:ca:3f:b7:40:f1:59:12:e9:73:89:e9:0b:5d:
87:28:73:4d:83:ee:68:dc:60:75:e9:81:ff:35:b9:
e5:0f:34:11:e6:73:08:e3:0c:37:49:bb:f0:60:3f:
9e:fc:60:b2:92:cc:88:92:42:e3:6e:36:b3:7e:0b:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:98:1E:9C:FA:8A:2D:E2:70:DE:12:99:9B:36:98:63:0D:AD:3B
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:0c:ac:8a:8e:a4:f4:8b:b5:8c:a0:0d:94:13:cb:b2:76:
74:2e:9f:4c:7e:3f:e6:9d:6c:af:aa:9f:11:f4:6e:21:63:b2:
e6:3a:4c:24:98:39:3d:51:98:d7:a7:02:00:3f:e0:9c:c4:62:
1c:f4:34:ff:2e:fb:45:93:47:b7:46:87:7c:2a:d6:ad:f5:c0:
85:13:05:f1:09:4c:8d:f4:28:b1:d8:5c:35:86:b5:37:a5:62:
b5:f9:16:da:0d:52:23:10:ba:86:97:54:e1:35:10:cd:ba:be:
e2:b9:eb:89:1f:77:43:65:dd:04:14:08:de:7f:76:b2:23:fb:
01:eb:e9:21:fc:82:21:95:41:55:e9:f0:2d:e6:82:bf:94:16:
2f:97:22:71:c5:47:93:a6:0c:4a:31:af:a3:6e:25:4f:79:a6:
4f:3d:f8:08:e4:5c:fd:24:03:6b:ae:64:2f:5c:90:fb:6e:43:
30:22:20:c4:64:8e:43:94:a4:2a:11:ef:73:4d:53:86:ba:a4:
81:8d:95:e3:96:1e:e8:38:36:69:18:2b:9e:a5:cf:4d:a1:ee:
86:27:2d:aa:60:3c:79:3a:1c:8c:58:7a:03:5f:8b:76:4e:b8:
2f:7a:90:f4:6a:7c:90:d4:36:7b:0e:e3:58:72:19:54:6b:ee:
95:c4:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:07:18 2026 by rpki-client