Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: TAG1Cxc3yYVDsjpOLZAP2Y6sr6Kg0wKdLGI5iCXYHAc=
Subject key identifier: E1:E0:FE:D3:8E:11:C2:2D:87:30:70:13:2D:54:79:08:A5:43:AA:40
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 01A0DD983ABC4FC7F06D99B7C53BD0F596F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 1338
Signing time: Sat 26 Sep 2026 12:02:16 +0000
Manifest this update: Sat 26 Sep 2026 12:02:16 +0000
Manifest next update: Sun 27 Sep 2026 12:02:16 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: Xrz1rjjdY9g9BkRiEA622KPK+kJju29FCytdmacwGmI=)
2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:3a:bc:4f:c7:f0:6d:99:b7:c5:3b:d0:f5:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Sep 26 12:02:16 2026 GMT
Not After : Sep 27 12:02:16 2026 GMT
Subject: CN=e1e0fed38e11c22d873070132d547908a543aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:1c:96:f7:11:f7:9e:98:fa:2e:d7:7b:23:
23:d8:15:f4:f0:31:66:f5:49:71:11:63:f0:15:58:
99:bf:a8:b8:5b:43:a5:06:9b:91:32:ae:8d:69:bf:
b5:5a:79:95:01:fd:43:67:7b:84:19:25:26:79:e6:
e0:cb:29:e1:d8:b3:1c:44:9d:10:8a:cf:cc:14:67:
c5:a6:30:2a:01:b6:6c:4c:d9:cc:ef:2a:07:03:cb:
9c:8e:ad:59:75:78:0f:7f:73:31:8c:25:77:57:d6:
5d:a4:a7:04:18:35:0f:09:de:bb:48:34:9d:0c:b8:
b9:d1:e8:b0:d3:60:15:89:df:31:46:40:74:f3:72:
16:22:c0:01:2c:46:78:a5:ba:e1:b6:54:82:47:e3:
ae:95:ad:8b:6d:26:bc:7e:fc:09:12:a2:48:7d:41:
89:83:b8:90:79:a8:3c:45:68:f9:65:72:d3:72:8b:
1d:f9:28:b8:eb:de:4c:79:9c:7a:20:58:20:ba:26:
83:fa:e4:8c:86:33:b1:71:37:54:b0:ea:2b:3d:95:
62:38:aa:b2:f4:7c:5f:2c:3c:66:84:fa:b1:f0:0a:
f0:d1:dc:31:2c:2f:9f:1a:a4:19:c7:9b:cb:b6:fa:
85:7f:40:ce:aa:4d:bd:61:c1:f6:3a:5e:a2:6f:ea:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:FE:D3:8E:11:C2:2D:87:30:70:13:2D:54:79:08:A5:43:AA:40
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3c:dd:29:a9:f5:97:ce:e7:c0:c2:36:83:34:95:59:09:56:
ef:65:e9:25:d7:b7:d5:9f:f4:7a:61:d8:e7:57:0b:5d:5b:9f:
56:e6:ad:af:ed:60:73:f0:cc:8b:bf:72:c6:86:9a:95:c4:e7:
23:cf:fb:dd:80:3d:71:0e:97:d8:7a:9c:5d:39:71:d9:76:ae:
f2:4f:78:19:8e:3b:4f:58:db:96:2f:65:29:51:87:ef:d1:57:
37:a3:43:82:e2:3e:cb:cb:96:f6:1d:b7:09:dd:45:ec:e2:c4:
ed:21:81:fb:bf:a5:b9:b2:af:1b:1c:79:ca:d1:db:35:f8:be:
b2:96:de:d7:fd:11:00:e5:b7:99:69:1c:a7:cf:0b:62:ee:8f:
f7:9c:5c:46:ee:31:58:a1:f0:36:87:48:27:e0:dc:de:83:32:
84:59:c6:a3:5e:8b:96:29:d8:47:c4:2c:29:32:56:d4:38:f5:
81:ee:71:d6:db:29:4c:21:98:3e:10:72:60:08:a7:f6:ae:b7:
76:f1:31:5d:09:33:8e:cc:67:ba:63:3b:14:94:6b:a0:8e:2d:
10:f4:05:01:b9:f1:90:80:86:dc:61:7e:7e:d9:cd:cc:7f:da:
af:9e:d1:79:36:0c:25:49:b6:7c:64:c8:0e:28:71:f5:f4:7d:
19:b3:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:27:15 2026 by rpki-client