Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
File: FQo3NJOhCsuvMf30RWF6YsTUb88.mft (raw, json)
Hash identifier: JigxVtcVcRFOc5qWwIRYObE5yDFPikCK9ZQPruZbl6Q=
Subject key identifier: 9A:D8:0C:45:DB:93:79:1B:DA:03:07:76:4F:2D:15:B6:74:7F:10:D9
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A0D192A5F2793DA904D34D5F8F68B3B273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
Manifest number: 01EB
Signing time: Thu 24 Sep 2026 04:00:43 +0000
Manifest this update: Thu 24 Sep 2026 04:00:43 +0000
Manifest next update: Fri 25 Sep 2026 04:00:43 +0000
Files and hashes: 1: FQo3NJOhCsuvMf30RWF6YsTUb88.crl (hash: f70K+QqVSP6e5aDLjDNICZBuXK0jO6Hf/I1YkGIvqqc=)
2: dekeUIUO9T5iudR5OgsQwRl5gKI.roa (hash: Thq7Xkhfa6hYvCBOhOwK4u/BZsc5f9iIPauMbjqNGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:a5:f2:79:3d:a9:04:d3:4d:5f:8f:68:b3:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Sep 24 04:00:43 2026 GMT
Not After : Sep 25 04:00:43 2026 GMT
Subject: CN=9ad80c45db93791bda0307764f2d15b6747f10d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:58:cf:8f:c7:e6:97:a3:9e:28:22:97:4a:
b9:28:72:00:e8:d9:72:56:9b:6a:c2:a2:c2:b8:d6:
c1:2a:4a:09:5e:a7:12:41:84:6b:9c:d0:87:b5:68:
39:fd:0b:bf:28:3b:b9:3c:e8:a4:05:4b:e9:f1:50:
29:2d:ff:22:0a:04:c8:d0:d8:81:ad:f4:cb:12:71:
3b:00:d0:38:a3:77:70:26:e9:35:85:54:16:ab:37:
fb:65:21:4e:68:99:5f:e8:b8:b3:02:b6:1f:0e:08:
cc:9b:55:93:d5:05:dc:b8:5a:85:f9:30:74:51:79:
cf:1d:a4:fa:bf:ba:0e:d9:35:29:bf:19:5d:a7:16:
c7:43:07:0b:c1:91:24:ab:a9:f6:0e:a0:14:66:e5:
7c:1c:2d:ba:d2:6a:5f:5c:bb:bc:f9:f8:88:30:63:
f8:f1:53:d0:d6:60:6d:5e:e6:82:02:96:db:fd:80:
1a:aa:fe:7f:cc:3b:e9:27:ad:33:33:cc:b5:d6:20:
bd:38:12:85:d7:3e:22:2b:3e:5f:7b:e1:7a:e2:0e:
6b:3f:dc:bb:b7:9f:8b:9f:4c:15:b8:d5:53:a3:bf:
11:e5:e3:fd:04:8b:01:dd:eb:ab:1e:84:9b:a3:6f:
75:a1:40:8f:f7:a3:3d:8f:03:9c:9b:ab:2a:fa:cc:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:0C:45:DB:93:79:1B:DA:03:07:76:4F:2D:15:B6:74:7F:10:D9
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:35:b6:9b:85:3c:66:9a:e2:7b:5d:c2:6b:27:ee:08:c0:
89:69:63:37:9a:8f:c9:49:ab:b9:52:3a:1b:fb:67:32:de:57:
b8:57:fd:e3:80:15:84:d6:d6:26:11:3a:62:a3:e2:51:98:52:
a4:6d:42:d4:99:34:ba:a1:77:f2:05:86:aa:1d:8a:29:fc:55:
8c:b9:81:b6:4e:9c:60:d6:e1:67:f6:69:0a:67:f4:17:ee:d8:
4a:a0:9c:f1:d5:f0:f7:68:c4:76:36:60:24:f8:9f:9f:d0:bd:
9f:38:fa:6c:4d:30:e8:5d:c5:58:21:e1:d8:9c:b2:a9:57:8b:
d3:46:3b:59:47:9a:a1:70:e6:de:4d:a8:c6:b8:75:c0:e0:df:
a3:98:fb:9d:8d:21:c3:6a:dc:8a:18:42:09:94:23:3b:e5:3a:
8f:cc:70:09:38:24:e8:79:4d:2b:e0:92:21:48:30:62:b9:83:
15:ba:c6:31:ae:6d:a9:41:03:79:86:31:5e:42:59:5e:d2:b4:
c6:12:09:58:56:58:d0:10:93:a4:28:3d:10:2b:86:d5:37:8c:
14:10:c1:af:13:24:a3:88:b9:0e:f5:8b:5c:1d:b0:43:fd:f2:
da:63:a3:d8:42:f4:ba:c5:65:e2:c9:e2:be:ba:e8:69:f5:e6:
07:84:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:53 2026 by rpki-client