
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: ee9aP0iOfqTHQ1yOUNZAbaCPY2Ezav6YqNnhQTpsrtE=
Subject key identifier: 40:07:88:3A:92:54:CA:60:18:00:D5:20:03:B3:31:1F:1A:46:3D:D5
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 01A0CC358258099A687FF20D7B728991AE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 131C
Signing time: Wed 23 Sep 2026 03:00:53 +0000
Manifest this update: Wed 23 Sep 2026 03:00:53 +0000
Manifest next update: Thu 24 Sep 2026 03:00:53 +0000
Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: JG8TcCMWBjiyPdMYkLy78urhRB0DEkpQHlvHb2nhIYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:82:58:09:9a:68:7f:f2:0d:7b:72:89:91:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Sep 23 03:00:53 2026 GMT
Not After : Sep 24 03:00:53 2026 GMT
Subject: CN=4007883a9254ca601800d52003b3311f1a463dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:37:e6:81:48:62:5c:ac:a0:b7:69:0b:15:af:
c6:6d:0e:f2:e3:22:7e:3f:73:2c:a5:b9:87:23:1f:
9b:5e:15:b5:81:d7:cf:87:04:a8:5c:24:4f:0c:3b:
dc:0d:57:70:f4:a2:ab:b2:c4:a9:a4:a1:96:50:4c:
04:f1:a9:d8:ce:de:77:69:6a:9a:22:9f:8a:95:f6:
93:5a:35:b8:89:51:4f:63:55:e1:62:3e:8e:67:ef:
fe:08:bd:7c:93:d7:c3:ab:de:4d:4e:e5:23:4b:90:
0e:14:95:86:7e:72:11:07:d5:e8:39:3c:92:cf:85:
86:91:eb:06:a3:83:d9:96:b3:bb:ed:e8:87:bc:27:
24:f7:26:f8:65:4e:22:8b:d1:fd:5a:50:f9:c8:38:
f6:e0:b3:77:a4:8b:af:e0:6e:59:5c:bb:e0:a9:3d:
3c:e7:16:d1:07:b4:37:d6:20:11:63:77:0e:20:ee:
c3:a4:5f:9b:cf:b8:7c:55:9e:2f:d0:03:dc:62:49:
28:16:f3:5f:4f:7b:e2:b2:d9:7f:b9:c7:74:65:73:
96:ca:0f:78:97:78:84:08:ce:7a:e1:c5:1c:ed:dc:
b6:8c:ab:12:16:9e:2f:3d:67:36:7f:f3:00:78:e1:
84:03:f6:b5:b7:d7:73:ba:88:b0:ad:bd:28:7d:65:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:88:3A:92:54:CA:60:18:00:D5:20:03:B3:31:1F:1A:46:3D:D5
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d4:61:4e:ef:75:ef:5d:43:1e:dc:93:10:03:df:bd:5e:bd:
59:59:d7:4d:02:ec:91:83:d7:97:85:37:a9:fa:8a:42:07:3e:
f2:83:87:46:ec:c9:f7:67:fd:fc:3b:ea:68:af:04:05:72:b6:
92:10:79:f4:6a:f9:81:2e:d3:55:c1:54:73:8c:b7:8f:bd:5b:
be:29:be:fb:4e:9c:7a:bd:b0:30:a9:48:1c:ac:d6:95:8b:d3:
0b:19:0d:9f:a7:25:1d:d2:96:c4:7e:75:fd:21:8c:cd:40:1b:
5a:3a:ca:5a:e1:fe:aa:29:df:d6:1a:a6:68:91:c5:9d:c2:47:
dc:8f:74:b9:33:dc:05:07:f9:a3:64:5e:41:8a:0e:90:24:38:
af:f1:3c:ac:2b:27:10:4d:c8:e6:48:c6:96:54:35:3e:c3:13:
1f:4b:6c:3a:45:35:77:9f:a5:01:57:3d:87:25:6c:a1:2e:4c:
42:55:2f:1c:ee:ce:d9:8f:47:51:b4:43:18:0e:be:2c:8e:b7:
71:09:5c:50:73:72:b8:b9:d3:40:9d:3b:96:9f:8c:14:a2:2e:
aa:14:5d:2c:ef:4e:72:35:8b:64:a5:9e:5a:71:5a:cc:86:6d:
34:da:ec:97:0d:55:7d:c3:81:bb:1f:2a:2c:37:74:1b:2e:48:
a3:64:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:28 2026 by rpki-client