Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: DEWfibNgx3k2VAC26ddy9ToPuNzfTFqAGbzNRr+XqbQ=
Subject key identifier: 08:47:5E:10:A6:2F:0D:91:5F:62:B4:F3:E1:8A:8E:1C:FF:FB:26:EE
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 01A1551C64B682BE4831D731A18741015892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 07F1
Signing time: Mon 19 Oct 2026 17:01:26 +0000
Manifest this update: Mon 19 Oct 2026 17:01:26 +0000
Manifest next update: Tue 20 Oct 2026 17:01:26 +0000
Files and hashes: 1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: oHbobiaTdIab3q37N6uH4boGDiOcAZw/CTXgR4sIm50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:64:b6:82:be:48:31:d7:31:a1:87:41:01:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Oct 19 17:01:26 2026 GMT
Not After : Oct 20 17:01:26 2026 GMT
Subject: CN=08475e10a62f0d915f62b4f3e18a8e1cfffb26ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:1f:3d:01:5c:d5:92:78:55:c3:1a:1b:4f:
c0:fa:1b:a0:0e:4b:6f:39:ae:f8:c6:8f:b9:ae:e4:
8b:5e:8d:7e:79:b0:5d:7e:81:fd:0a:d9:ad:5f:0a:
39:87:d1:d9:b4:d2:26:11:31:4d:54:96:98:7f:50:
51:75:97:e9:c2:d0:10:61:4a:d3:d3:31:aa:ac:c7:
5d:14:b0:82:34:b7:ca:25:ff:40:b0:93:82:9d:0e:
b5:94:17:79:4b:cb:da:e1:90:bc:f4:fc:ae:ff:62:
68:9a:85:14:57:06:2b:f1:9d:7d:a7:6c:92:1e:74:
0a:30:9f:28:aa:3f:4d:4f:be:ad:53:8d:62:dd:59:
8f:92:1b:76:36:4a:f6:ea:c7:36:d6:9b:17:2e:29:
0f:91:24:6e:11:83:a1:68:1e:04:c0:1e:34:9f:db:
c1:65:cd:f2:57:e4:50:8f:7b:ca:b0:5b:ec:71:bf:
b2:b2:7b:39:db:3e:78:d6:ca:92:5f:59:e0:9b:64:
33:90:f5:79:e1:05:f8:85:9f:90:3b:5e:11:55:04:
0a:11:73:6b:99:c2:3d:3d:dd:5f:87:2a:58:85:23:
a4:72:4a:bd:9d:4e:21:54:07:00:35:56:8d:46:1d:
57:95:7b:38:cc:08:c0:bc:cd:c1:5c:37:54:9c:62:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:5E:10:A6:2F:0D:91:5F:62:B4:F3:E1:8A:8E:1C:FF:FB:26:EE
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:08:a0:4c:cc:76:bb:f3:c8:56:07:9b:67:7b:4c:24:e3:
53:fe:09:c7:d1:99:19:87:ba:9f:d4:51:f9:2c:c7:72:7d:2a:
e3:1d:e0:be:e8:16:da:f2:58:4e:e5:76:30:b1:de:f0:8f:03:
53:56:f6:d1:bd:9a:8a:9f:cd:c6:89:2c:03:f5:d8:ad:97:f9:
69:01:b7:fd:32:d2:de:93:79:1e:b8:b3:e3:dd:cf:ee:1b:c1:
dd:68:6b:0a:83:6b:2e:dd:f0:7a:1c:69:d0:bd:de:ed:85:ae:
d0:b9:d3:f2:a2:10:da:40:f6:26:20:37:fd:65:d8:a8:0e:39:
96:02:3b:03:54:63:17:15:20:06:d0:46:16:2d:3e:0f:2f:2f:
ba:71:ad:5c:cb:92:50:ea:10:66:5b:fb:f3:f3:ec:7a:f6:ff:
44:a6:f6:ac:97:ee:4f:e0:6c:4e:5c:a8:db:01:5b:b4:7c:9f:
ae:64:24:c7:3d:b3:b4:ed:7f:5c:4d:74:a4:31:83:5c:41:c5:
dc:79:48:9f:b3:4e:77:ec:9c:50:26:a7:84:d5:ad:7e:90:37:
14:df:7e:f1:6c:f1:f5:9a:5f:77:53:f3:b7:29:a2:b6:e8:73:
56:1d:db:ea:8a:1f:b1:63:7b:3c:93:6c:b3:22:d2:f9:a0:a2:
38:93:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:21 2026 by rpki-client