Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File: _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier: +nG6M/UqnwKnjrR9DyiWf4r9vA2RYXa87kezQT3m5bg=
Subject key identifier: 4A:32:66:D0:71:AE:66:C6:E2:F5:81:91:FF:6A:E0:66:E4:57:0B:A1
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 01A1815029AF4EDE4B40F4D036E0406EFB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 07:01:16 +0000
Manifest this update: Wed 28 Oct 2026 07:01:16 +0000
Manifest next update: Thu 29 Oct 2026 07:01:16 +0000
Files and hashes: 1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: Eh827XBViKowc145MQ2u/ctzyqKxVAAbq87x9RBGSLM=)
5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:29:af:4e:de:4b:40:f4:d0:36:e0:40:6e:fb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Oct 28 07:01:16 2026 GMT
Not After : Oct 29 07:01:16 2026 GMT
Subject: CN=4a3266d071ae66c6e2f58191ff6ae066e4570ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:09:08:57:36:8a:3f:62:2c:d7:d5:0e:ed:
ba:42:8c:9b:7a:e1:e9:bc:60:dc:b5:52:6f:c7:41:
f1:af:0a:50:32:40:f4:b3:c7:cb:1e:5a:46:f5:e1:
61:1b:76:93:af:6f:2f:76:b4:8a:2e:64:1b:28:ad:
59:52:83:6c:38:e6:5d:e5:6c:79:50:d7:11:55:96:
35:3a:76:03:d0:10:89:6e:b2:8f:e4:74:89:4d:f1:
28:ab:ed:a0:7b:4e:ec:35:bf:58:4b:88:cc:e7:3c:
4b:9b:fc:86:91:1e:6a:d3:69:ef:93:60:82:fc:68:
ba:14:45:b3:e3:1f:7f:99:5f:89:d5:90:40:17:8e:
5b:cc:6e:ea:8d:58:c3:1f:25:c8:48:11:61:02:3b:
4c:27:81:99:a7:d4:30:6e:6b:ce:18:0d:3f:c0:ae:
25:27:25:a8:b2:21:ae:93:57:d3:ee:52:98:0e:51:
16:5d:d7:f9:9b:63:1c:b2:91:93:16:c6:d7:c7:b3:
e8:21:e9:62:d6:89:89:a9:77:6d:29:98:2c:30:1a:
b7:d6:eb:6a:b2:5b:3a:91:42:76:81:90:23:63:14:
48:b2:fe:c4:2f:37:7d:f1:7c:cd:aa:2e:f1:70:a6:
a0:11:2b:c8:99:14:1d:54:9f:65:64:99:02:9f:6a:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:66:D0:71:AE:66:C6:E2:F5:81:91:FF:6A:E0:66:E4:57:0B:A1
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:3d:07:0c:66:65:45:84:99:a7:2d:a3:d2:56:11:94:99:
7c:be:4a:cc:fc:39:45:1a:c0:09:4f:6d:60:0f:ef:4e:cf:c4:
1e:fd:60:00:d7:23:f7:09:a3:33:f2:77:31:de:4f:6b:ba:d0:
0e:0c:40:50:22:bf:01:32:ac:ea:4a:2c:bd:91:aa:b5:c2:f1:
b3:fe:9f:94:fc:91:b9:c3:00:6b:74:34:e3:f3:c5:22:e8:03:
8d:54:0d:a6:03:1d:ff:ba:77:73:a0:d0:01:c0:01:91:d7:08:
24:1e:82:7d:c0:eb:70:2f:a9:0a:13:74:cd:1b:ae:8e:13:0a:
a7:4d:3b:e9:91:5b:76:2e:ad:4f:d6:f3:11:4a:ae:dc:1f:d1:
cc:a8:c3:c6:4e:c9:0c:df:94:9d:e1:4e:1f:c6:45:60:8f:dc:
12:a7:bb:76:27:7f:30:7d:2a:bc:8d:62:94:07:d9:77:0a:27:
5b:2e:fe:34:f8:c8:2a:7e:db:4e:2e:ed:66:34:bd:98:8b:f5:
65:7b:a3:f3:57:2c:c3:a0:9f:87:c5:59:8b:78:7a:c7:47:3d:
47:68:67:7b:20:c1:e8:5c:90:d2:df:b6:6d:34:8e:19:34:eb:
68:ff:29:ab:d5:90:6b:be:51:98:01:ea:a5:de:10:75:80:15:
a9:b5:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:49 2026 by rpki-client