Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: vsC+dvcHJxbiXfhLVQG73nmO1+98N8aIKi7zgWS76zA=
Subject key identifier: 25:86:9B:4B:2E:EE:B5:4F:A4:1E:25:F5:F3:13:A3:C0:CA:E6:09:D8
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01A0CA46BF3E1B20B709A2110B358B35D6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 1490
Signing time: Tue 22 Sep 2026 18:00:29 +0000
Manifest this update: Tue 22 Sep 2026 18:00:29 +0000
Manifest next update: Wed 23 Sep 2026 18:00:29 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: x2PHDSYI7wO65SLE96LiHOjNmw+wtUm4op7+iVBnmcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:bf:3e:1b:20:b7:09:a2:11:0b:35:8b:35:d6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Sep 22 18:00:29 2026 GMT
Not After : Sep 23 18:00:29 2026 GMT
Subject: CN=25869b4b2eeeb54fa41e25f5f313a3c0cae609d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:37:77:27:87:39:85:f4:9a:72:c5:98:5b:
40:ab:10:f1:0a:de:51:d9:60:0d:21:8c:3f:2a:f0:
9f:58:18:b0:c8:4d:38:41:9a:77:f5:c2:e9:a5:c6:
86:c7:7e:1e:62:a6:b2:6c:30:e5:e3:28:21:37:b3:
31:8c:c6:ef:54:e6:06:65:d3:79:27:07:2a:5d:5b:
68:f5:0b:08:2c:65:65:10:d9:b8:67:94:6a:8f:3f:
a6:a1:19:29:fa:ce:db:1e:0d:a3:98:6c:50:c4:96:
cf:7f:82:9f:7f:ec:a1:84:65:8c:68:be:3f:fc:22:
1b:7f:4e:94:38:ae:4e:ae:56:fc:1a:3d:47:54:38:
74:b0:fe:c3:45:d1:8a:fe:ca:89:97:cc:97:3d:51:
00:9c:0e:18:1c:b4:cc:87:04:de:fe:42:4a:59:99:
5b:9f:61:83:c8:3c:f7:67:6b:1d:67:91:83:0d:3d:
93:c5:db:f1:eb:2a:a0:3c:f7:93:d1:45:bf:9b:98:
0e:8d:3c:70:bd:ae:ee:90:7d:f6:90:9e:60:60:ca:
80:64:bc:40:99:7b:d9:91:2f:a9:41:d6:6f:43:eb:
af:0d:40:b0:8e:5e:83:a3:fd:db:19:9f:b8:47:3a:
fb:bc:e1:c0:40:b0:e0:88:66:b9:08:31:5f:31:44:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:9B:4B:2E:EE:B5:4F:A4:1E:25:F5:F3:13:A3:C0:CA:E6:09:D8
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a0:21:dd:b1:98:77:23:79:4b:d3:75:1f:d8:13:34:11:62:
1a:24:c0:e7:f7:ed:ca:ee:56:02:1b:01:15:dc:fb:b6:3b:ee:
7e:22:10:b8:1a:0d:26:23:2b:a2:e6:0e:e7:47:9f:4d:2d:a7:
3a:1c:78:2e:0b:0a:87:97:df:33:d9:b9:93:0f:18:f1:11:49:
de:a0:3e:78:82:ba:24:9f:95:91:57:46:96:f5:cc:c8:62:c5:
91:7b:6a:64:ee:ff:8c:77:17:c6:d1:aa:1c:53:5f:7f:bd:f0:
6a:e7:12:43:66:6a:65:50:89:c2:10:83:7b:8d:c0:07:5b:bc:
50:de:3f:54:40:d4:a6:79:90:1c:b0:2d:e4:5b:8c:0d:21:d7:
1b:d9:5a:41:13:30:60:b0:34:c0:da:c2:0c:86:d6:73:bd:8e:
9a:48:e4:e9:a7:8f:94:57:3a:0d:be:ca:4a:8a:5d:5d:21:ad:
32:ef:0a:15:08:8d:64:60:0a:44:a3:71:f1:5f:85:71:a3:04:
2d:16:40:e0:47:ea:6c:63:fa:34:b3:8d:c1:a6:9f:d5:30:7b:
41:06:d4:4f:a8:1c:94:c1:0e:f1:fa:99:69:b5:57:8e:bf:78:
0f:dc:16:8d:21:22:24:5d:f7:c4:99:1a:86:27:71:d4:f7:b7:
50:af:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:55:02 2026 by rpki-client