Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: +z+XYt4TVquwlngl2yd6CgTuoV6RRWlrVoBe31gvqCE=
Subject key identifier: F4:06:BC:B3:90:F3:3C:58:F9:CE:3C:BC:CB:C4:1E:01:97:18:B9:7C
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 01A0D3EFACEE9CBFB6FA797B3CC296F77A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 020D
Signing time: Thu 24 Sep 2026 15:01:34 +0000
Manifest this update: Thu 24 Sep 2026 15:01:34 +0000
Manifest next update: Fri 25 Sep 2026 15:01:34 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: GmAki5PBEUlymS7qrp2PLy1HKEfCtw8oAtYGh9D9h5U=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:ac:ee:9c:bf:b6:fa:79:7b:3c:c2:96:f7:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Sep 24 15:01:34 2026 GMT
Not After : Sep 25 15:01:34 2026 GMT
Subject: CN=f406bcb390f33c58f9ce3cbccbc41e019718b97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:fd:16:28:8e:29:89:5f:52:8e:51:44:ce:
27:dd:f1:d9:af:ee:71:d5:4d:ac:11:ac:9a:02:8c:
50:cc:4c:73:6e:9b:0a:5b:4e:57:bb:fe:70:6d:32:
d7:a4:0c:5d:1e:73:a7:2a:1c:5a:bc:d3:54:da:fd:
e2:bd:38:36:d0:1b:38:c8:2a:61:0a:a7:44:75:0c:
7b:10:8d:c4:73:26:d1:99:ca:3a:a1:31:ae:84:c5:
f3:57:45:bd:87:92:74:c8:38:b1:d0:65:fe:12:94:
4b:63:65:9f:74:d6:10:3f:b7:81:df:18:56:69:45:
9e:4c:ed:db:e5:2d:69:3f:95:7a:b3:c6:28:e4:b6:
35:70:8d:84:46:6c:85:ca:8d:6b:9a:63:08:ac:01:
09:4f:0e:1a:ac:98:0e:9d:76:cf:e7:18:97:f5:51:
d8:5b:dd:35:0a:af:cd:e8:e9:83:e4:b7:7a:c4:78:
bb:5d:68:29:4e:15:51:1e:bc:52:23:0c:7e:b1:2d:
02:6b:3e:84:08:d8:b8:0a:cc:23:30:03:d9:94:ca:
54:06:b6:4c:90:d5:2b:4c:65:a1:99:71:17:45:e1:
ab:10:d7:18:06:39:1e:c0:b8:eb:0c:fd:63:cf:db:
a8:f6:76:f5:b5:4e:29:90:41:97:40:bb:1f:17:62:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:BC:B3:90:F3:3C:58:F9:CE:3C:BC:CB:C4:1E:01:97:18:B9:7C
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d7:e3:9f:18:b2:32:b8:90:d5:6e:0c:cc:04:36:c7:0e:b9:
01:76:ab:09:c4:6d:4b:bf:42:27:cd:a0:c7:ec:42:d2:91:28:
a6:8c:40:b3:e0:97:61:b6:ed:df:b0:42:fa:9e:c7:bb:47:76:
92:72:c8:59:e6:ce:04:6f:dd:12:f5:e8:38:69:99:fe:c0:e4:
17:d7:35:58:f3:55:b9:59:1d:6b:fd:db:a0:c0:a8:4f:d0:bd:
ae:48:64:55:cb:b5:b1:26:0a:10:d4:32:29:2f:15:9d:ba:1c:
ea:cd:58:4e:c3:1b:7b:61:51:2d:ce:ce:a1:c7:22:da:c4:d1:
8b:3c:57:9f:80:a0:0b:fb:22:41:ae:44:d5:65:b5:85:ec:31:
08:70:73:2d:56:91:7f:e2:ce:ae:98:71:91:1e:de:eb:2f:54:
79:6a:5b:0a:27:27:8c:af:95:1a:6e:1a:5b:98:55:23:e0:04:
52:dd:ed:bc:e9:6a:a4:63:32:74:3c:23:ea:93:1d:4e:6b:c2:
24:68:f5:7d:c2:6e:8c:50:8d:bd:f6:07:0a:c5:de:6a:0e:ae:
95:02:0d:a3:ac:f7:e2:25:d7:36:ed:88:44:f8:31:3f:cc:7f:
26:dc:14:6a:a0:44:7a:38:2d:0f:ad:dd:1c:86:b5:88:b0:3f:
20:db:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:03 2026 by rpki-client