Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: Yegua/BX+uPv5qQ7+r/zlH9AVKm4s2K9oiqVPV5K4Ww=
Subject key identifier: 1A:9C:C4:51:CA:47:BB:06:EF:17:66:9F:D4:33:15:CC:1F:44:0D:1A
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 01A0C5C5B1AB21D1A6DBB6DEB69070759E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 11C9
Signing time: Mon 21 Sep 2026 21:01:02 +0000
Manifest this update: Mon 21 Sep 2026 21:01:02 +0000
Manifest next update: Tue 22 Sep 2026 21:01:02 +0000
Files and hashes: 1: Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa (hash: 1v/i1kZJAPaWeakpaEAlVLItC/+EuwO/djTFONOVHBc=)
2: Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa (hash: //Zu89adA8vidZqbvniFI74+X1OldRsqrkjpoajtNHc=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: CsSqoKdvRb33dvquA8ER6ODJrPgtCBhVVNKkC7PvP0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:b1:ab:21:d1:a6:db:b6:de:b6:90:70:75:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Sep 21 21:01:02 2026 GMT
Not After : Sep 22 21:01:02 2026 GMT
Subject: CN=1a9cc451ca47bb06ef17669fd43315cc1f440d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:7d:bb:c6:71:3c:52:5d:34:c5:50:39:60:
55:17:3d:17:97:ab:1e:8f:56:2a:7f:9c:80:e4:92:
79:d6:65:2f:24:71:da:98:c5:5b:d3:e8:b9:fe:ff:
74:f7:78:03:6f:5f:77:68:9a:af:0d:11:61:28:e9:
e8:af:ea:8c:05:e0:02:d8:62:b6:a2:92:f1:b8:22:
a8:92:00:d2:45:b7:d5:06:fa:fa:1c:de:de:6b:c8:
d1:3c:08:bf:d2:f4:cb:10:c7:a1:86:2b:15:ca:fa:
60:5e:69:31:a0:ac:b8:cc:80:a5:94:de:8c:89:7d:
88:61:a7:d7:c8:c6:29:0a:d8:fa:de:33:ad:11:53:
65:e1:be:e2:0a:85:85:97:b9:96:c8:d2:d1:9d:f1:
73:81:e8:25:e0:42:7d:22:14:57:be:57:6d:30:31:
0a:cf:ac:54:92:ee:f5:20:07:74:7d:d8:69:a5:c4:
04:9a:8a:55:34:85:cd:f9:7c:39:67:ea:b5:08:ad:
27:d1:51:3c:b1:26:66:3b:77:e3:75:69:ef:60:5b:
f6:5a:75:b4:cb:a1:74:e1:57:70:73:96:8b:ac:4d:
51:9c:b5:f8:f0:a9:54:ab:5b:7d:51:ff:7a:e9:92:
7f:70:22:68:5c:86:53:b4:99:5c:d7:6f:76:87:21:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:C4:51:CA:47:BB:06:EF:17:66:9F:D4:33:15:CC:1F:44:0D:1A
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:01:46:23:98:83:a3:35:8e:24:1e:28:d2:d1:a4:d4:dd:54:
5f:a2:e8:82:08:e0:95:9d:94:9d:c8:08:f0:b5:5c:76:f6:d5:
aa:9c:3d:fc:ea:6c:30:86:54:ab:9f:34:ae:30:f2:df:8b:48:
44:4b:11:cb:65:f4:8e:1c:45:e7:6b:98:a0:e6:36:22:19:ea:
09:00:e1:12:7a:e6:b9:1e:bd:92:41:da:ca:e6:ea:3b:27:c5:
e8:b6:1b:85:42:6f:19:5c:04:4c:f1:18:b6:2c:71:37:2f:a2:
44:5c:c2:e8:28:b1:3f:b1:3a:43:95:7b:c1:71:d3:90:40:5a:
98:f3:48:39:0a:c2:aa:84:b4:d1:94:b0:b1:91:c7:2f:21:69:
ab:f5:28:39:10:66:78:6e:95:fe:1a:2e:10:4b:2d:76:be:e2:
f3:25:ae:3f:81:57:5a:68:f5:86:78:5f:bd:55:e6:af:8b:fe:
1a:4c:c6:2e:5b:33:8c:30:df:24:7c:ba:e8:b9:56:55:34:cc:
24:ec:df:d0:f2:a0:07:b2:a4:20:c0:5f:c4:69:9b:d1:58:9f:
1f:0a:d0:20:a9:2f:6e:51:8b:26:6f:80:d7:d3:c8:07:d8:10:
bb:ce:b8:0f:f3:d8:17:c2:f3:7d:34:5a:aa:1d:64:15:44:62:
d6:0c:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:21 2026 by rpki-client