Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 9GEjTnSZpUELgCbKKTBzcfV9F/uNnWGwp6Or6UKok4A=
Subject key identifier: 84:51:0B:49:0A:2A:5B:A2:21:48:A1:2E:5B:04:4F:0D:69:6D:C5:A9
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 01A11CE3E856D41A7349F38845550516ECC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0624
Signing time: Thu 08 Oct 2026 19:01:00 +0000
Manifest this update: Thu 08 Oct 2026 19:01:00 +0000
Manifest next update: Fri 09 Oct 2026 19:01:00 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: 8iqRLq8gmcfN7pfGjKjvHFsftGeObrtG0uXV0VatAVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:e8:56:d4:1a:73:49:f3:88:45:55:05:16:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Oct 8 19:01:00 2026 GMT
Not After : Oct 9 19:01:00 2026 GMT
Subject: CN=84510b490a2a5ba22148a12e5b044f0d696dc5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:54:ee:2c:37:3d:59:73:ed:d0:82:a1:9c:87:
61:e4:8f:dd:5b:bb:8c:87:d6:06:78:b3:a1:c3:22:
c2:ab:88:56:5c:66:52:3e:93:85:99:bf:3a:6b:d4:
87:78:70:f6:46:a8:8e:5a:b5:ce:f9:4c:70:58:70:
b0:56:2b:c9:4c:e5:f7:41:84:2c:9a:98:55:f2:8c:
5d:30:cf:e5:56:42:98:96:2d:11:85:38:7d:58:d0:
9d:cc:1d:44:af:a3:13:c9:ed:d9:c2:1b:7c:38:7f:
c1:72:e6:c0:7d:16:d9:b6:fa:04:b2:2f:5f:8f:ea:
d9:03:c8:8d:12:67:1d:8e:2d:6b:d9:2e:92:d6:91:
aa:78:d0:4b:48:f2:db:a9:ac:2d:11:5b:99:67:19:
45:46:08:f1:9c:18:69:59:c4:a8:7c:87:ea:a6:5c:
59:db:05:f0:df:89:9a:b3:54:7d:de:1a:c8:ea:03:
e9:a5:87:73:94:eb:45:34:a4:59:e4:84:1b:71:82:
4d:52:c2:f7:07:23:57:19:13:67:57:64:8e:c8:38:
4b:be:71:12:18:94:8c:e1:ee:24:52:4f:58:68:c8:
aa:3f:8a:02:13:36:99:77:bd:07:6e:ff:5b:c4:9a:
89:c6:62:08:9a:44:1c:7a:48:b9:f5:c9:68:9c:41:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:0B:49:0A:2A:5B:A2:21:48:A1:2E:5B:04:4F:0D:69:6D:C5:A9
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:56:92:df:be:4d:6e:20:4a:c7:70:4e:4f:16:60:2d:c5:b5:
a8:c0:ed:9a:97:be:08:ed:df:b1:72:70:5e:9d:fd:49:9b:9d:
7b:74:20:25:72:7d:51:19:2c:bd:59:32:3a:73:7d:a0:38:11:
f0:6f:28:ad:ee:1d:35:96:1f:dc:a9:ce:74:9c:b7:0f:88:c1:
de:9f:be:38:10:c1:aa:4a:ef:db:83:67:1b:c2:72:35:2f:3d:
ca:08:1d:26:38:b6:ce:ff:83:95:7c:34:54:eb:25:06:c8:fc:
b6:d7:73:d3:c8:2d:66:a1:37:1c:b2:41:d8:68:0d:88:2f:d7:
22:1c:91:04:a4:eb:dd:cd:41:bd:1f:16:09:bd:14:bb:6e:7a:
84:22:26:62:53:a1:38:9e:f5:f8:07:9a:41:f6:4b:cc:7e:3d:
cf:22:b0:54:e5:c1:b3:98:d4:7b:fc:35:80:c8:2f:eb:e6:b3:
43:ed:51:f9:01:ff:50:0e:d4:ab:b9:cd:94:8e:52:b8:c9:f4:
20:f1:39:12:cd:b6:48:33:a5:38:6e:24:3f:6b:ca:66:19:cd:
dc:df:1f:dc:89:5c:64:27:f3:b3:9e:d0:62:01:01:25:c3:fc:
62:0f:4d:a9:d4:d2:b7:4a:76:04:7e:22:c8:24:bd:1c:41:b6:
12:df:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:08 2026 by rpki-client