Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
File: FQe7zTFN1RPt1WowSBK-vj4Qniw.mft (raw, json)
Hash identifier: Q6i//7aiaYkOhSfhoeAN68MDr87H28YjCpxMup4U1tk=
Subject key identifier: 08:8E:8A:BF:38:93:9C:6C:1E:77:95:73:58:11:A1:51:E0:9A:03:F1
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 01A11BD0A4733950E9C6B6014C3611E2E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
Manifest number: D2
Signing time: Thu 08 Oct 2026 14:00:20 +0000
Manifest this update: Thu 08 Oct 2026 14:00:20 +0000
Manifest next update: Fri 09 Oct 2026 14:00:20 +0000
Files and hashes: 1: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (hash: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=)
2: FQe7zTFN1RPt1WowSBK-vj4Qniw.crl (hash: 6jzqHHPzb1rttOUWhtcL7mZdOPolv8e62Zb+F8Aw440=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:a4:73:39:50:e9:c6:b6:01:4c:36:11:e2:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Oct 8 14:00:20 2026 GMT
Not After : Oct 9 14:00:20 2026 GMT
Subject: CN=088e8abf38939c6c1e7795735811a151e09a03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:f6:f9:8d:98:33:0b:3d:d2:6a:02:25:09:
e1:06:5e:87:7a:55:08:e3:7d:49:59:70:68:6b:ba:
2c:e8:60:01:60:94:9f:bd:08:40:8c:b2:74:63:6c:
99:39:f1:20:c5:85:45:96:fc:83:6c:2d:34:65:2f:
01:f1:8b:0b:24:ed:04:7c:4c:06:d3:cb:01:6a:fc:
89:c5:3f:a7:d1:f8:3a:58:35:9c:fc:3c:10:f7:f6:
5e:bc:b2:ab:8b:59:74:7c:47:80:ea:00:7e:49:64:
2a:70:98:54:01:74:31:13:49:8c:49:3e:1d:98:3e:
6a:79:84:4c:76:b6:b0:28:37:a4:97:f0:55:06:71:
4a:b0:ca:46:be:b7:65:af:13:a9:98:c2:f6:5e:65:
95:b3:82:4e:65:44:81:5a:02:f7:4a:83:a2:4c:ec:
65:8a:b7:63:d2:c7:1c:92:6e:65:4e:d7:22:22:c9:
4f:61:af:b7:b8:de:d5:99:13:78:76:36:32:55:ab:
3a:dd:b9:97:03:e2:28:c8:f3:f5:eb:2c:72:5e:a3:
14:b5:9d:7b:f8:9a:42:04:93:1a:08:f2:d6:ee:ad:
11:46:91:4d:36:a5:7a:70:57:3e:86:91:ac:85:66:
bc:71:05:57:62:72:eb:34:54:9d:ce:30:66:2e:f8:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:8A:BF:38:93:9C:6C:1E:77:95:73:58:11:A1:51:E0:9A:03:F1
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:42:82:2b:84:60:7f:d1:ac:3f:a5:90:d9:66:86:9c:b1:a1:
6c:ec:5a:44:07:28:e2:d7:07:0c:e7:7a:e5:62:02:1e:30:26:
55:1f:8b:95:f7:c9:c5:21:a5:e8:af:7b:c1:c6:66:b5:70:77:
6d:ca:77:47:e0:0a:94:43:86:e0:3c:37:a6:6e:2c:6f:3e:07:
19:c2:c6:ca:02:9b:f0:10:86:0c:57:3b:2f:8b:19:d7:91:cd:
08:bd:81:3e:58:b6:04:56:ae:46:5e:e4:c1:9b:e2:ec:dc:70:
0b:4d:83:54:32:8b:61:7d:e3:87:ad:84:ce:f4:a2:7a:f1:a0:
e9:48:86:6b:87:c1:c5:ad:9d:71:5f:9a:2d:9e:6d:d9:2c:ab:
84:fb:d4:a2:16:02:f7:a1:3e:61:f1:14:c3:dd:25:c3:77:0a:
a0:24:67:c9:eb:1e:3f:ad:f5:c9:d4:2b:b0:0d:04:b2:2d:f7:
fa:84:cb:36:65:40:a5:5b:f2:39:f3:84:84:0a:70:7d:b2:8e:
b0:2c:b7:ba:dd:00:d1:ed:35:df:c3:28:12:b5:1f:da:40:69:
40:b6:9d:39:aa:6c:27:41:9a:2c:68:3e:84:67:56:fd:7a:f3:
ab:6a:af:09:ba:07:16:1a:48:2f:c4:44:46:3d:55:55:1d:70:
13:4a:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:07:00 2026 by rpki-client