Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: QJ8mV+K1mQ/5gfns7zgN9I+3VcKN3SgdDiuLhHLGqdQ=
Subject key identifier: E3:A6:50:17:D3:1C:73:1C:9A:3B:FE:D3:EF:C7:7C:55:A8:A3:56:CD
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 01A11AF591D1C40EDB7EFD5CD063EBBFDC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0623
Signing time: Thu 08 Oct 2026 10:01:03 +0000
Manifest this update: Thu 08 Oct 2026 10:01:03 +0000
Manifest next update: Fri 09 Oct 2026 10:01:03 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: b0m/7sdgvUggHvnnWYclNqw2tMm1rHoIqL+dftxN+cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:91:d1:c4:0e:db:7e:fd:5c:d0:63:eb:bf:dc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Oct 8 10:01:03 2026 GMT
Not After : Oct 9 10:01:03 2026 GMT
Subject: CN=e3a65017d31c731c9a3bfed3efc77c55a8a356cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:8a:a2:d4:27:a2:7b:5d:f3:63:1e:f6:e8:
ee:ab:a2:00:6e:16:0b:f7:75:b8:04:4c:56:1e:24:
b1:00:00:ce:51:c5:b8:7f:33:26:5c:f8:44:da:fb:
af:7a:e7:2d:d2:9d:ca:ef:4b:fe:b9:3a:2e:c2:1b:
e4:2f:17:d6:18:6c:1c:e3:93:05:d9:7a:2b:30:49:
99:f1:1f:9a:a4:84:17:14:bc:6d:e9:a2:59:dc:44:
32:a0:55:7c:06:ec:cc:a5:db:68:9a:e2:3f:18:27:
2d:c9:4e:de:dc:8a:d9:45:59:72:cc:ef:7c:d5:ff:
42:1c:dd:f8:f4:24:4b:eb:49:45:f8:3f:b4:b5:01:
3e:57:a3:56:11:3f:d9:2c:a2:40:4e:cd:0c:fe:3a:
a5:26:e5:75:db:0c:ae:e6:bf:20:9f:b9:8a:5e:54:
7e:9c:a3:2e:2d:c2:6f:9e:a3:c8:26:fa:1a:ac:b2:
b8:69:14:a7:a1:5e:32:79:b8:1d:fe:af:26:8a:18:
e4:47:d0:d4:b1:ac:fc:36:54:77:c7:51:8b:66:ba:
73:9c:0a:c5:e0:44:a0:a5:d9:d8:80:cc:c0:a6:dc:
9c:37:06:60:c9:30:6a:5c:bd:8c:2c:be:49:58:95:
c5:3a:45:f5:c1:31:e9:cf:50:73:34:a9:81:4f:b9:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:50:17:D3:1C:73:1C:9A:3B:FE:D3:EF:C7:7C:55:A8:A3:56:CD
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c6:d2:79:c4:01:ad:ed:b4:2e:63:a7:ee:0b:cb:95:58:5e:
51:b5:a0:e9:65:f6:2a:fe:e9:84:e4:a9:65:6a:ba:b6:eb:66:
17:d4:eb:e2:ff:b3:41:55:7c:8b:73:87:4b:c7:8d:9b:6d:04:
db:05:11:11:f6:9f:ea:b6:1e:b2:6d:94:18:2a:27:99:62:f7:
7c:ef:d3:05:00:90:54:b2:24:0d:03:e0:24:42:8d:00:22:ca:
eb:93:6c:2b:22:e4:c0:dd:47:b7:6f:1a:f4:de:18:45:40:8d:
61:58:db:73:85:ad:be:30:4e:fe:40:8b:0b:9a:a9:f0:09:48:
be:50:8d:0b:62:1e:9b:c4:99:af:42:bb:58:57:71:ac:82:d9:
8a:54:a9:b9:e3:70:2e:80:d2:be:19:e4:ce:35:12:06:47:f4:
50:32:7c:a3:65:92:95:04:a3:50:13:b0:98:f1:ca:cd:bf:26:
5c:50:12:25:a1:cc:7d:87:50:f4:22:bf:81:d5:0a:d9:84:29:
15:3c:c7:5f:f5:88:4c:5b:e5:21:60:0a:24:4c:6f:8f:3e:f1:
33:96:cc:37:92:39:72:dd:5e:4c:0a:6b:4e:20:ce:43:1e:19:
84:e0:11:f6:35:0e:e7:84:c2:e9:c0:d4:87:62:31:b5:2e:46:
29:93:d5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:45 2026 by rpki-client