Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: v6aHUCKhpa3f5hEONRaI0i4yxZC8X5NAu2Ln3FEdGBo=
Subject key identifier: 88:C5:AE:21:89:CF:A8:0F:10:BE:B4:72:7B:49:49:1A:DC:AF:1D:F9
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 01A18FB040C7C763EE0997ABDDD77CB0CC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1A5F
Signing time: Sat 31 Oct 2026 02:00:55 +0000
Manifest this update: Sat 31 Oct 2026 02:00:55 +0000
Manifest next update: Sun 01 Nov 2026 02:00:55 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: W8Q05UNc3uUJW8mH3sa7JJF2cmIWCOYXWLaM4K1p5Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:40:c7:c7:63:ee:09:97:ab:dd:d7:7c:b0:cc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Oct 31 02:00:55 2026 GMT
Not After : Nov 1 02:00:55 2026 GMT
Subject: CN=88c5ae2189cfa80f10beb4727b49491adcaf1df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:c4:ba:cf:7d:06:18:5a:3a:0e:73:e1:61:
29:59:77:f1:a1:1b:12:c7:22:70:88:29:60:9c:6c:
45:fe:36:90:c6:5c:38:45:da:1c:0b:0b:84:59:4d:
89:b8:92:e7:75:9e:5b:2b:c4:f2:4a:20:cb:04:3e:
0f:31:f0:eb:e5:07:d4:3c:25:64:23:46:bd:e1:e1:
92:0b:eb:c7:31:c6:9f:69:de:7a:fa:3f:98:66:b5:
ed:a2:57:01:f5:f5:a4:ab:60:bf:18:82:90:06:fd:
02:13:d1:10:45:34:6c:94:15:59:78:b4:90:97:06:
fa:0c:5d:c0:bc:f8:ab:80:df:cd:42:8b:e0:fe:b2:
91:d5:8b:5c:10:a5:d7:ed:53:4f:49:2d:25:9d:c4:
35:2d:d8:3b:86:cf:e5:4b:3b:ef:4c:21:73:06:ad:
83:52:31:cb:9f:17:79:88:10:22:64:79:ea:a1:8d:
3a:0d:4b:ea:1a:78:bd:9f:5d:d5:8c:1a:bb:83:b2:
fe:9a:9e:7e:78:10:7c:87:2c:7c:83:fa:7f:80:e0:
c9:27:d7:06:ed:fa:9c:7e:47:71:15:cd:e1:34:73:
24:19:06:3d:ba:7a:ca:40:60:35:c5:3d:10:e6:4a:
31:29:ca:0a:d1:53:18:5b:8b:8e:54:bf:e9:1e:12:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:AE:21:89:CF:A8:0F:10:BE:B4:72:7B:49:49:1A:DC:AF:1D:F9
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:24:f5:f9:cb:cb:5a:07:41:53:54:6b:7d:d3:16:2e:6c:c2:
b6:d6:f0:72:05:c0:78:5a:a2:10:f0:01:65:17:97:4b:6d:a9:
d0:ba:1b:3a:7a:e3:61:21:01:ec:75:fa:0d:1d:0f:45:fd:15:
7a:9c:66:6f:15:e2:02:0b:68:0d:0b:9b:51:15:fa:f8:b0:10:
e3:ed:8c:1c:21:a7:1c:a9:08:dc:d6:88:68:83:2c:c9:48:64:
16:2d:12:e4:b7:09:b7:bb:9a:de:51:42:1f:47:76:32:b5:77:
1a:70:31:4a:92:37:ca:87:3e:ca:5d:d3:46:af:c9:ee:71:4d:
45:87:1b:a0:68:86:52:18:eb:5c:3b:52:18:9b:18:2b:76:1f:
c1:13:6e:35:d8:f1:e4:a3:04:7f:f2:56:a2:fd:fe:7e:88:5f:
48:31:78:6f:09:e7:cb:75:be:53:da:c0:da:b5:aa:3c:f8:1d:
56:8a:57:67:b9:94:3b:d7:9c:69:17:6b:66:d3:27:00:f5:94:
ba:2c:3e:a1:75:cf:ed:a7:03:a4:28:8b:21:65:1d:39:5b:95:
20:3f:b1:47:ad:cf:1d:98:ff:a4:ca:93:a5:24:8d:80:e6:2b:
1c:54:f0:25:6c:08:74:4f:29:62:26:51:f1:d0:08:c8:7b:18:
7e:a2:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:46:44 2026 by rpki-client