
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File: fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier: sQMUBe0e7hFqAeu1fSvRV3PK11ZWa/YKgm7DoPJjwng=
Subject key identifier: A7:62:CC:5C:E9:66:51:D2:C0:50:36:78:A1:88:F6:D6:5A:04:40:0F
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial: 01A0C5FC93D98CCF1EE1BB3FF984345BAC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number: 028E
Signing time: Mon 21 Sep 2026 22:00:59 +0000
Manifest this update: Mon 21 Sep 2026 22:00:59 +0000
Manifest next update: Tue 22 Sep 2026 22:00:59 +0000
Files and hashes: 1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: S2ucYaVdHgwQTueCmbajjikRk5onhB7F4GEvyiQXiI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:93:d9:8c:cf:1e:e1:bb:3f:f9:84:34:5b:ac:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Validity
Not Before: Sep 21 22:00:59 2026 GMT
Not After : Sep 22 22:00:59 2026 GMT
Subject: CN=a762cc5ce96651d2c0503678a188f6d65a04400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:eb:24:48:91:29:ad:8f:8e:34:da:30:7c:
62:75:42:3d:4a:b5:7a:e9:f5:03:fa:57:85:cf:db:
dc:eb:b1:f0:fe:1f:13:54:ba:89:c8:4b:a0:0c:66:
2d:b5:0a:b3:fd:3e:1a:c4:37:0d:fa:f7:57:63:3a:
f7:29:7f:58:df:e6:41:89:38:88:12:0b:e5:54:c4:
1e:4b:00:de:37:fc:89:aa:6c:a8:1f:a6:6e:f4:12:
28:b2:1c:8a:c2:f0:d9:35:f9:5b:18:1e:72:5c:1c:
43:7c:2b:0d:fd:86:a5:14:36:49:9b:7d:51:95:69:
82:ba:c2:e3:8c:51:d3:b2:02:bb:bb:72:09:6a:03:
f2:84:a9:2a:57:b1:b1:a5:a6:3a:bd:e5:a6:f1:4a:
7f:b8:a1:91:67:eb:6f:98:6f:0d:9c:06:04:ba:b8:
78:1d:44:28:9e:97:57:17:df:46:a7:ac:62:d3:48:
af:8b:89:fa:f9:14:c5:d3:2a:13:cc:f2:83:2a:4d:
a0:31:10:e1:0c:ea:46:2b:02:b4:05:31:e8:0f:1d:
90:70:15:55:c9:18:6d:19:d8:fb:00:74:68:44:a4:
f8:c6:db:6f:b6:c1:cf:81:8e:00:53:95:8f:01:51:
f7:a5:71:fc:64:16:10:f2:cf:83:61:83:8b:89:ce:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:CC:5C:E9:66:51:D2:C0:50:36:78:A1:88:F6:D6:5A:04:40:0F
X509v3 Authority Key Identifier:
keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c5:ed:07:78:ff:ed:76:0f:30:93:c6:f3:4f:4d:65:78:9f:
6b:e4:75:fd:b1:c1:21:23:50:d0:5b:ff:d5:0f:a9:30:91:0c:
e3:84:cb:33:ed:a1:f7:c4:fc:34:0c:5d:8f:6e:54:de:42:01:
46:48:f0:7c:da:25:6d:9f:95:b6:bb:f0:24:01:a7:bf:bf:f8:
20:d7:50:6b:97:98:64:32:41:c5:06:79:66:15:af:45:89:d1:
4e:e7:f2:7c:be:38:12:94:b3:a2:7b:5a:44:ba:d8:c0:f0:5f:
e6:e1:24:b8:6a:06:86:ce:b7:45:b4:ea:45:27:92:d5:19:26:
3e:d6:7c:6e:9d:05:d9:23:0c:e2:e7:38:29:9e:ef:9d:8f:24:
87:42:ea:44:64:0f:ef:41:2c:5e:44:2a:e4:8d:11:89:ea:21:
a6:d4:18:95:97:68:33:1d:39:d7:26:20:6c:fe:5c:a3:6e:f9:
8f:d5:4d:9c:7b:36:7e:85:60:7b:e5:af:86:4c:13:9c:89:82:
87:60:43:9c:12:bb:ec:0e:18:47:21:83:4a:d0:0c:04:68:c2:
45:5a:95:bc:3c:5d:98:9b:63:a9:ec:cd:8c:7f:59:4f:d3:a9:
74:d1:31:88:05:ee:b2:4c:22:3a:d1:6a:2d:0f:c0:2d:a0:4a:
d2:64:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:45 2026 by rpki-client