Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
File: fvq5R2s-yx5oEBZzgPyLGHag0hM.mft (raw, json)
Hash identifier: GpmlLKtcfS8jx+0DKtsB1LFrHa/Bd2HjjYFqVsDFQUs=
Subject key identifier: 67:1A:CD:88:F3:2E:06:71:57:45:06:01:7F:B3:ED:BD:BE:56:B0:ED
Authority key identifier: 7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
Certificate issuer: /CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Certificate serial: 01A1A8CC074D4979A21A5DECFB7591927915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
Manifest number: 78
Signing time: Wed 04 Nov 2026 23:01:45 +0000
Manifest this update: Wed 04 Nov 2026 23:01:45 +0000
Manifest next update: Thu 05 Nov 2026 23:01:45 +0000
Files and hashes: 1: 2C3FcWazR5XyXlMgLgJnDejEmi8.asa (hash: 2MsHJBx/wK2u5DGzbrSigEczmjhlHiUmREbO6gj6VoM=)
2: 8nnUCaJQXN-nQj9bznCUT32U5ec.roa (hash: cl9xzaH5wGrkXnoo9hpW9MPiIkknfBd+bptpAUznzJw=)
3: fvq5R2s-yx5oEBZzgPyLGHag0hM.crl (hash: eU8FiLDMABpQ4GUll9XQiF3LlZTuTr+tRol4tEMmKMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cc:07:4d:49:79:a2:1a:5d:ec:fb:75:91:92:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Validity
Not Before: Nov 4 23:01:45 2026 GMT
Not After : Nov 5 23:01:45 2026 GMT
Subject: CN=671acd88f32e0671574506017fb3edbdbe56b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:0b:d3:bf:c9:e5:ad:d3:5a:eb:33:04:ad:
d6:ff:b1:04:c1:c7:4b:41:23:2a:af:33:10:ae:9c:
b5:83:f7:68:de:39:3e:93:5e:d5:56:4a:3d:7c:23:
af:b5:6a:19:61:cc:69:a1:10:e8:57:66:e4:26:f2:
80:d0:54:2c:8b:de:7d:c0:8f:d3:5b:53:d7:5e:1b:
de:5a:9d:c4:b1:f0:fc:d1:09:5d:fc:0e:94:25:30:
cb:b0:fa:ec:cf:e8:c9:f3:ac:7f:26:2c:e6:6c:fe:
95:88:c5:a5:8c:ef:c0:3b:85:38:a4:99:2a:44:61:
70:df:09:71:a6:1e:17:ba:9e:9b:f7:16:3d:be:0c:
0c:2e:cc:c5:bf:db:fe:aa:65:27:7d:76:d6:8e:83:
ec:95:ea:33:3c:8c:30:45:aa:ea:c2:21:16:00:3e:
02:07:14:51:ec:2a:e1:2d:21:69:f7:f0:d9:11:da:
35:7c:82:69:e5:69:0f:88:25:6f:28:13:4b:56:81:
39:89:37:aa:21:86:81:26:7f:df:1f:6d:8a:35:61:
bc:1e:31:e9:c2:53:6a:72:89:8f:58:2d:c7:8e:96:
f3:da:c0:1f:03:c2:fd:43:56:00:ce:1a:13:04:7b:
73:15:63:65:b7:f6:7c:0b:3c:e1:65:9a:52:e7:29:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1A:CD:88:F3:2E:06:71:57:45:06:01:7F:B3:ED:BD:BE:56:B0:ED
X509v3 Authority Key Identifier:
keyid:7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:e6:65:36:4d:90:ab:dd:44:ff:bd:2c:31:b7:e0:74:1e:
b8:7c:af:f5:24:81:c3:df:b1:8e:df:a7:27:d3:88:d4:39:cd:
d7:55:28:ea:34:fa:4a:e1:bb:8f:76:8f:9f:aa:86:87:6b:c8:
45:61:95:12:35:b3:5f:e7:bb:4c:dc:b3:ba:52:d1:f6:83:05:
99:00:d4:ca:63:19:a6:a7:8d:f5:6f:3c:f1:56:11:6f:2c:2a:
32:e9:a0:5e:54:dd:65:c1:4b:0b:6a:36:96:63:a9:66:ff:c0:
17:7f:91:26:d7:39:a3:40:57:36:ce:60:18:74:7f:0c:53:98:
c4:38:6e:38:bf:bf:11:d5:95:c7:9a:90:dc:39:87:9f:bd:5a:
3d:25:fb:e8:e4:41:0e:f3:7a:20:24:9a:05:21:a4:35:9d:c4:
07:17:fb:e5:0a:9d:b5:d2:e6:88:b8:0e:f2:b5:9e:13:70:f5:
ed:4f:79:89:6e:88:88:8c:c2:d0:8a:69:eb:39:df:4c:ef:23:
8e:78:93:c3:65:55:8a:8a:81:d4:0e:01:1a:17:8c:3f:b7:79:
be:93:b6:e3:bb:d7:c0:81:8c:35:d0:0e:b9:e5:fa:6a:7c:ae:
53:6b:dd:4c:8f:d2:51:b8:23:e5:63:ca:f2:74:2a:57:ee:ad:
a5:22:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:38 2026 by rpki-client