Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 5uyAuBzlbCpyzCBYelZJ2iRblXRr4Qe2U0UPhCtgdaI=
Subject key identifier: 10:AD:1C:B2:0D:71:B9:B7:AE:30:D9:19:D8:11:27:68:2E:F7:E0:3F
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01A0C70EBBEC08AF28DB9A9B8AB16714C8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 03:00:26 +0000
Manifest this update: Tue 22 Sep 2026 03:00:26 +0000
Manifest next update: Wed 23 Sep 2026 03:00:26 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: /Wp1UFrqUoiUpXLn+IG8PV5DOv04PedFXzMMpQNJ6p4=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:bb:ec:08:af:28:db:9a:9b:8a:b1:67:14:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Sep 22 03:00:26 2026 GMT
Not After : Sep 23 03:00:26 2026 GMT
Subject: CN=10ad1cb20d71b9b7ae30d919d81127682ef7e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:d8:7d:09:72:9d:c4:0d:ad:7f:ec:37:44:
09:60:0e:35:f5:b2:0a:63:4f:a4:07:fc:cf:db:5c:
c6:6d:93:13:e0:b9:2d:e3:90:5b:f9:1f:fe:da:b3:
4f:c0:f2:ab:41:da:f5:96:94:12:3d:59:7e:ed:82:
9b:f6:68:e9:bd:e1:d5:93:33:e5:8c:47:7e:e8:3c:
af:31:2c:30:f9:dd:2c:6f:3f:1f:94:d8:db:2e:60:
e6:58:77:7a:4b:78:f3:c7:86:58:e1:a9:7d:49:0e:
86:32:74:f2:bb:79:ae:b0:38:13:ea:f6:db:c0:59:
5e:f1:bc:25:8f:a0:33:63:5d:65:c9:29:ef:6e:79:
5e:e7:04:1a:76:23:1e:6b:0f:a4:b9:9f:4d:35:94:
58:22:a7:ea:02:b8:09:3c:1c:f2:48:cd:3a:2c:d8:
96:00:c4:96:10:03:30:a0:36:dd:17:a6:57:4b:aa:
ab:d9:54:6a:ad:a6:fe:38:b3:81:82:30:40:48:b8:
84:28:3e:d0:89:8c:1c:b1:6f:76:58:46:1b:6c:5f:
9c:17:5e:e9:3f:f5:d7:e3:1f:76:70:e3:0d:3b:08:
d7:ad:a3:6a:f7:e2:b9:b8:a6:15:63:7a:43:bb:ba:
3a:60:4e:5d:b9:dc:3e:0d:10:05:8e:b0:f4:27:e0:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:1C:B2:0D:71:B9:B7:AE:30:D9:19:D8:11:27:68:2E:F7:E0:3F
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:11:b4:35:1a:af:32:8a:dd:38:40:94:24:4c:a7:9c:96:e2:
98:07:f7:65:ea:f2:c0:63:ea:86:b9:10:2f:25:74:ef:bc:4c:
2f:ae:10:fd:89:58:7d:98:7c:cd:29:cd:ce:54:86:61:06:45:
33:0f:9c:9a:73:d8:bf:68:f5:c3:e3:10:49:79:ea:2b:9d:86:
26:30:dc:ff:d7:90:1f:6b:65:62:1e:f8:ff:fc:fb:af:63:b4:
e2:22:88:6c:93:c6:f3:73:7a:64:6f:32:c5:91:ea:ce:38:61:
aa:5a:20:70:2d:b2:4c:5a:62:88:3a:f5:ec:40:61:f9:f1:60:
51:d1:b5:30:de:aa:71:3d:7b:69:8f:1b:f6:bc:48:4f:ba:2c:
98:d1:9a:2e:fa:e2:b5:81:bd:e0:b6:6b:da:77:c3:df:28:61:
1d:17:a5:a0:bb:f1:a8:de:2a:de:5e:49:c5:b5:ec:5d:78:76:
38:bc:28:55:61:86:46:19:34:91:b5:72:3b:24:97:e6:6a:8d:
80:06:7e:05:18:54:25:74:55:08:93:08:0f:ef:8e:78:08:62:
da:e8:8f:13:d4:64:5f:40:f6:cd:2c:dc:10:c3:07:d1:35:73:
d3:09:8c:08:96:64:3c:ea:7d:dc:b9:cc:a3:85:0a:cd:de:e9:
43:d2:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:44 2026 by rpki-client