Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File: fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier: 1K6iNublZgxStzjtqim/8XieN8y2Xb59qx/vA+MyDJw=
Subject key identifier: E5:10:F7:68:56:F0:BC:2A:23:7D:40:68:7D:7D:26:49:61:22:7F:39
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial: 01A1AB5E3784FA9E05D2AE35A6A14C9C0AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number: 1540
Signing time: Thu 05 Nov 2026 11:00:40 +0000
Manifest this update: Thu 05 Nov 2026 11:00:40 +0000
Manifest next update: Fri 06 Nov 2026 11:00:40 +0000
Files and hashes: 1: JMoQAtlSwgIPEDgOxqxN_chfnzU.roa (hash: B9hvkkVw6cavGGlkuEdGYncWF7hdCzROq/BGKrEIOQo=)
2: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: KMbLpsvbbnjyGP+b4jiCZOtcstqKkDezA5kmbRlc6hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:37:84:fa:9e:05:d2:ae:35:a6:a1:4c:9c:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
Validity
Not Before: Nov 5 11:00:40 2026 GMT
Not After : Nov 6 11:00:40 2026 GMT
Subject: CN=e510f76856f0bc2a237d40687d7d264961227f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:d4:fd:fa:1a:80:0f:db:58:a6:af:29:60:
d3:a7:4b:d0:41:e4:6e:e3:d9:98:19:fb:10:84:b2:
d7:90:cc:37:0e:c0:f0:e3:10:7e:e8:f4:fd:df:aa:
fc:d8:17:6e:f7:df:2d:17:07:a3:02:7f:20:bf:11:
d1:3b:4d:5d:c3:17:ec:90:4a:e2:30:2e:91:fb:90:
de:9f:e4:a4:fc:ea:21:25:fc:31:53:12:24:9d:07:
ab:8d:a0:d7:f8:15:5a:1d:8a:32:53:d6:56:51:c6:
1a:9e:4b:2e:a4:9c:d5:e6:ba:5b:b2:99:06:78:b5:
1e:99:92:91:75:59:95:ef:73:ac:d9:bc:4c:ae:00:
0c:5d:c4:11:10:28:74:64:37:d1:85:99:8c:7c:9b:
75:31:5d:84:f1:8b:ce:20:c6:81:93:6a:92:88:64:
fd:4b:4f:47:68:91:33:53:a8:a3:4b:0d:23:b0:c0:
ec:cb:eb:fa:ff:77:c9:b3:1a:cf:08:9a:af:17:50:
4e:ee:c9:d6:e9:67:c0:8f:b6:a2:01:67:da:40:e8:
6c:d3:14:10:0c:4f:66:a3:d0:c3:65:d3:f5:71:29:
f6:01:66:70:33:ad:a7:74:44:98:fb:27:85:d7:7a:
50:fc:bb:14:70:8b:43:fd:2e:fd:9c:56:aa:04:b0:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:F7:68:56:F0:BC:2A:23:7D:40:68:7D:7D:26:49:61:22:7F:39
X509v3 Authority Key Identifier:
keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:72:5d:5c:8e:05:a4:2f:99:1d:e7:4f:77:c9:66:16:58:
f2:6b:da:80:53:ec:c2:aa:a4:4b:32:a8:26:58:b8:ea:3d:68:
df:7c:40:5b:8e:37:fc:b2:7b:97:59:16:95:5d:2b:67:93:ad:
c4:c3:53:94:b9:6e:53:ec:30:6f:ca:18:95:c4:ed:87:11:08:
c5:4b:b0:bc:52:21:e5:d7:e8:b3:38:82:75:06:ac:ba:90:27:
1d:9d:0d:e7:2f:03:8a:fe:de:a2:b6:a1:64:10:83:4d:30:1e:
69:d9:81:33:51:b3:48:b1:ed:ed:ca:e6:44:83:4d:68:b7:00:
9d:45:c8:23:b5:a2:b4:82:b3:ef:98:59:bc:d1:bd:7e:67:52:
bc:4f:9f:9a:fd:ce:9e:2a:47:8f:de:fa:09:49:e4:d6:26:4b:
f7:4d:2d:7d:b1:f6:ea:48:f8:10:d9:5d:0a:f4:54:19:21:0f:
76:f2:2a:1b:e5:42:07:7d:05:e4:a8:1c:41:93:27:35:0f:12:
c7:0a:55:50:dc:39:47:dd:f8:ae:13:55:dd:d8:8d:c0:b7:19:
f8:e1:70:cd:7b:8b:1c:ac:8b:a6:87:dd:1a:2f:ef:1e:99:e5:
2f:45:ed:a4:b8:60:08:20:ac:8c:e1:6e:76:d7:92:0e:f0:13:
27:46:c3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:24:42 2026 by rpki-client