Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: aeuhq+8omId6kdOGTCiUw1Clkwo/LpyRKDiMU0I0HgM=
Subject key identifier: D8:A4:B4:4F:ED:23:F7:7A:42:76:72:95:36:17:EC:14:5A:B3:8B:1D
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 01A08AFA6C46D48A762F214FF78222AE477D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 19D8
Signing time: Thu 10 Sep 2026 11:01:02 +0000
Manifest this update: Thu 10 Sep 2026 11:01:02 +0000
Manifest next update: Fri 11 Sep 2026 11:01:02 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: lX86e7sPG+BQIHeKD+1dT9V2IB+v1J29I3eC1F76IbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:6c:46:d4:8a:76:2f:21:4f:f7:82:22:ae:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Sep 10 11:01:02 2026 GMT
Not After : Sep 11 11:01:02 2026 GMT
Subject: CN=d8a4b44fed23f77a427672953617ec145ab38b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:03:3f:f8:7f:cc:81:dc:7b:9d:be:72:e4:
49:b4:ca:4a:c2:ee:27:3d:99:1e:4f:d2:d8:04:3b:
57:b1:58:18:aa:49:e0:27:ca:1e:19:8a:df:b1:77:
46:4c:21:46:78:c5:4a:e5:83:aa:b0:a2:60:21:03:
e3:01:0d:08:0e:fc:69:f4:2c:21:f2:87:0d:b7:64:
fc:66:b1:54:4e:3f:8f:54:43:3e:c7:96:d6:25:fe:
62:88:01:77:2d:b2:8e:ab:b7:4b:f0:da:a0:cc:1e:
8a:96:0f:da:a4:11:eb:3d:d4:6e:8c:e7:41:cf:e7:
21:e9:26:98:78:f9:5a:77:29:bb:f2:61:6b:a2:63:
52:30:47:3e:ae:c6:61:35:05:56:61:73:03:65:f9:
f6:69:de:a4:18:fb:db:c4:fe:e7:0e:0c:ea:60:d6:
38:d8:c0:f2:db:c1:f5:26:b2:24:84:82:a0:51:c6:
49:3a:9b:24:46:40:42:7f:bd:14:95:7a:71:b4:52:
d1:c5:de:5a:77:86:b3:8b:83:d1:8b:b3:b5:b1:c2:
a7:4b:c1:4b:27:fd:b9:ef:f3:a3:a6:3f:ec:fe:e6:
42:a3:6c:1a:61:92:eb:65:91:a2:b3:c6:b8:16:1b:
f8:ea:df:24:b9:7c:09:e9:5b:7f:11:94:cd:8e:a3:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:B4:4F:ED:23:F7:7A:42:76:72:95:36:17:EC:14:5A:B3:8B:1D
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b1:5f:fb:7d:ea:98:08:fe:86:39:dc:12:37:38:87:be:cc:
8a:b7:9f:ac:7f:4f:5a:1a:e7:30:6b:78:df:90:94:dd:cb:5b:
95:d0:57:63:6c:df:ee:4a:97:00:8d:ad:e9:9b:43:c5:c3:af:
af:83:42:25:ab:d7:22:c0:d9:75:37:96:e4:49:22:1a:b3:5d:
11:5e:23:a9:90:1d:ca:a8:0d:a4:59:60:fa:e7:dc:b5:13:51:
57:bb:7e:c8:60:ac:a7:8e:7e:d4:23:30:53:0d:fe:43:9b:1b:
67:94:34:45:57:53:1d:6c:b8:08:4f:2c:27:09:27:3f:d6:e0:
66:a3:ee:10:a0:b0:c4:e0:bd:1b:ac:bd:a7:b7:44:23:6b:33:
cf:2f:9a:db:ee:3a:33:28:b3:f8:a6:cd:25:8c:c2:f1:5e:dc:
15:03:62:54:a7:30:d1:b0:e2:0b:99:8f:51:71:01:d0:8a:b3:
f8:b6:2a:09:5e:4d:33:07:76:59:a9:a6:52:55:b7:35:bd:43:
ee:f0:e1:24:28:61:6e:21:ca:22:42:a6:23:73:74:4c:16:c9:
83:0b:73:c1:3b:db:ad:f8:b8:cd:f4:97:52:8c:df:62:17:f0:
30:39:29:ff:58:3b:a2:5e:dc:a2:d1:08:95:f8:ee:7b:c0:37:
1e:00:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:24:33 2026 by rpki-client