Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: mLIQZsmhYB6Z+JFrHFSA4yvl8aOlw4E+7qyZp2Mq3Nc=
Subject key identifier: DF:65:76:60:1B:4C:B5:D3:44:5B:1D:1C:C4:66:96:5D:CF:F0:04:4C
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019D9963246AFA265016CE37570D04FBBD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 1174
Signing time: Fri 17 Apr 2026 03:01:44 +0000
Manifest this update: Fri 17 Apr 2026 03:01:44 +0000
Manifest next update: Sat 18 Apr 2026 03:01:44 +0000
Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: v+9dP2l51TPGB6dQr0QEvuZRVn0WPlPygr/qWvRflxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:24:6a:fa:26:50:16:ce:37:57:0d:04:fb:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Apr 17 03:01:44 2026 GMT
Not After : Apr 18 03:01:44 2026 GMT
Subject: CN=df6576601b4cb5d3445b1d1cc466965dcff0044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:4d:f1:25:a4:5e:e4:b3:79:be:7f:18:1c:
2f:db:58:e6:6f:33:eb:dc:e7:55:2d:1e:c5:78:01:
1d:6b:d9:4c:f1:aa:41:7d:64:86:95:5e:88:de:3f:
18:a9:4a:dd:6c:c9:7d:4f:26:ad:76:ba:f3:92:58:
69:36:3b:aa:0d:1f:3a:ac:dc:cc:e8:13:4c:e7:d8:
bb:9d:0a:3f:f3:81:eb:ac:a2:1d:62:fc:e8:29:c7:
b8:bf:db:b0:fc:1c:9f:9d:ef:6d:2b:c6:f9:dd:28:
bd:2d:3d:3c:e2:94:0e:09:87:94:24:b6:92:86:37:
ab:1c:52:83:85:7f:b0:93:7b:65:5e:7b:4b:55:b9:
37:ee:10:c8:5c:03:f6:11:76:74:04:67:53:9a:2a:
5a:08:02:62:a0:d8:42:14:ca:f9:a9:38:10:77:d8:
69:ff:56:f5:36:77:aa:7b:b5:9b:b9:58:9a:1a:a6:
62:33:a2:cb:7c:b1:41:cd:62:37:c0:ad:77:cc:99:
45:5a:5c:93:c1:7f:b1:f1:d8:50:1e:1a:a8:1e:29:
34:10:4f:f2:62:fb:7c:fc:d2:51:8b:f6:87:d5:f9:
2b:64:4a:1e:e1:18:9f:9c:fb:a1:7d:f1:d5:4a:2e:
83:65:07:07:7d:ff:55:66:d9:f4:35:91:35:d0:66:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:76:60:1B:4C:B5:D3:44:5B:1D:1C:C4:66:96:5D:CF:F0:04:4C
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:99:2e:db:54:a9:1a:8c:0b:64:fc:25:dc:ec:de:bc:39:
ae:76:b8:6b:ee:ec:7d:8f:6c:41:a8:54:c7:06:6c:b5:70:3b:
fb:ba:48:40:2a:12:1b:0e:7a:61:17:17:97:76:79:9f:02:aa:
19:06:64:82:fe:2b:b8:26:05:d1:c5:f0:24:be:f8:64:37:d7:
3f:ca:54:05:05:a3:fb:12:27:3d:a5:70:62:44:c4:23:6a:b6:
96:01:c5:62:ed:36:74:22:67:30:04:a5:f7:a0:83:12:20:d2:
9c:e2:31:ad:18:11:dc:d5:c0:a3:c2:1d:1b:4b:34:c7:ae:dd:
be:f5:67:60:aa:8c:2d:aa:7a:26:93:88:15:d2:21:7f:d7:13:
8c:c0:e9:66:10:5c:81:53:77:5f:29:48:81:9f:55:8d:6a:67:
99:d4:85:95:e9:9a:e8:46:82:9d:a4:e3:fe:96:55:ff:5d:0f:
cf:2c:27:84:11:f5:e7:4a:11:6a:5f:36:c9:8b:1a:8e:a4:d3:
77:73:ed:c2:d3:e7:04:d3:b7:ae:0a:c3:be:03:d0:74:1a:26:
a1:97:81:9e:99:48:ee:3c:be:f2:29:70:12:2a:bf:2d:6f:f4:
a7:c7:25:e9:6a:03:d3:98:16:c9:6f:68:7e:10:e5:1a:db:6f:
c6:2e:d3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:14 2026 by rpki-client