Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: euegh03TWsm+IoWomfY5ONQYGhPDkG2EZ3OVMn8Am7c=
Subject key identifier: 9F:2B:4E:BE:A0:B5:3C:18:5E:63:DB:CE:BE:0A:C3:39:9A:02:9A:0B
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 01A0D192A2FEBEB668C95C0DCB2EBD2BF7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 04:00:43 +0000
Manifest this update: Thu 24 Sep 2026 04:00:43 +0000
Manifest next update: Fri 25 Sep 2026 04:00:43 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: FT5WNmAugAIj2IeGvZfc+8znxMVD3YGpYL/gxzZdo/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:a2:fe:be:b6:68:c9:5c:0d:cb:2e:bd:2b:f7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Sep 24 04:00:43 2026 GMT
Not After : Sep 25 04:00:43 2026 GMT
Subject: CN=9f2b4ebea0b53c185e63dbcebe0ac3399a029a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:b6:c2:98:85:9e:f1:57:f1:fc:a1:7e:b9:
71:34:5a:77:df:fd:e5:00:e8:cd:75:9b:d7:49:7e:
29:1f:ee:2d:5b:da:82:65:26:58:26:0a:ad:62:6d:
18:e0:de:e7:f0:92:bf:58:fb:cf:dd:f0:26:9f:23:
bd:8f:c0:3a:ff:9e:7a:a8:3b:bc:5d:5b:ca:1a:99:
51:32:5f:01:7a:15:85:38:ab:da:f1:6a:78:38:ca:
1f:26:45:76:90:aa:c7:e6:83:f8:19:aa:99:13:b6:
b4:8f:3c:9a:15:12:a5:ad:29:f9:da:69:2b:23:ad:
50:7a:9c:7e:6b:3b:63:99:77:11:55:db:3b:a7:dc:
80:34:16:50:37:04:1d:7b:45:67:e3:7a:65:14:56:
ba:05:9a:e5:a5:68:ce:51:e2:58:b2:1d:16:ff:20:
ac:5b:96:1d:40:8d:91:28:78:39:0f:66:ca:43:19:
99:97:9c:c3:cd:1b:e1:6f:cb:0a:77:7a:16:31:9d:
93:e3:4a:a1:dc:08:ab:4b:8d:67:1a:d5:06:a7:81:
6c:11:7d:b3:b2:7e:fc:bc:79:49:a0:01:e2:23:2f:
7b:a2:98:3d:c2:c9:e3:43:82:6e:cf:8f:69:63:73:
de:61:c3:8b:cf:0e:e2:87:b7:a3:a4:f7:b4:5d:b7:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:4E:BE:A0:B5:3C:18:5E:63:DB:CE:BE:0A:C3:39:9A:02:9A:0B
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:cd:df:06:be:0b:01:53:79:af:a4:76:bd:d5:0b:60:e1:
c0:0c:53:b2:d1:07:9e:66:5e:3d:df:2c:aa:01:08:cf:7e:56:
37:f9:2c:9c:82:97:ce:40:b6:01:bd:19:99:a0:bc:61:f2:dc:
e9:e8:e5:98:c9:c6:5a:44:28:8f:bc:55:48:6d:98:f4:a6:7e:
c2:25:1f:81:4b:ba:78:95:e7:db:fa:86:6a:c0:88:9e:ac:6f:
ef:e4:4e:68:e8:60:42:55:d8:70:4a:c8:bd:c9:e0:3d:9a:eb:
b3:78:53:8d:db:46:73:97:34:e3:54:2f:84:b3:d4:ae:ad:eb:
67:35:0b:79:d7:c5:7e:dd:bc:7c:65:78:12:ba:39:4a:6a:36:
26:f0:3c:13:2b:82:94:9e:59:2c:dd:2a:25:31:f7:6a:9b:bd:
3b:af:ea:f3:bc:03:24:f3:09:a8:75:3d:36:f4:7f:36:41:ff:
9d:61:a7:86:21:2c:19:54:ba:1b:9a:8d:7c:1f:b4:a1:05:8e:
d2:48:dc:96:ca:a1:6b:c4:fe:83:a4:c1:3d:a7:b1:b1:97:b5:
12:50:bc:37:4b:6b:09:72:ce:7b:f5:3b:72:bc:bc:ef:b5:03:
55:58:d9:e2:85:78:0a:e6:16:84:f9:18:90:34:e4:ef:25:da:
4a:f4:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:29:15 2026 by rpki-client