Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: GNDAmvGi0fG1ym0jTaiROmiDhG2CKI+X57EIQFj6mRk=
Subject key identifier: DD:C3:79:41:B3:FB:00:8F:FE:D1:29:68:B3:72:21:04:FD:D9:AA:4F
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 01A13B24DB85319A68C86D5ECAED4A665D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 16:00:33 +0000
Manifest this update: Wed 14 Oct 2026 16:00:33 +0000
Manifest next update: Thu 15 Oct 2026 16:00:33 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: lsihUHzk7hBLEAdI9Z/T4lGZj8LLVGr5mjzHjDzBN5w=)
2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:db:85:31:9a:68:c8:6d:5e:ca:ed:4a:66:5d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Oct 14 16:00:33 2026 GMT
Not After : Oct 15 16:00:33 2026 GMT
Subject: CN=ddc37941b3fb008ffed12968b3722104fdd9aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:f8:d7:4e:84:8d:ac:c1:f2:3e:5a:69:4e:
58:a9:02:1e:e5:14:10:f9:44:0b:5d:b0:56:52:7a:
08:68:9f:6f:93:8e:79:ed:27:b1:55:ed:b5:93:ce:
17:c0:43:a3:73:cd:73:b5:86:c1:d1:90:78:08:05:
16:0d:b4:21:df:69:b1:ca:82:75:16:87:f0:9c:bb:
b8:99:47:87:97:f0:0d:4a:6d:54:c9:bf:a8:2a:91:
da:c0:ae:48:b0:91:5b:cd:b9:fc:97:fa:ea:16:e2:
f2:41:d5:00:20:7b:a2:fc:86:9e:54:39:fd:11:74:
4d:67:af:7d:0a:8e:5b:ed:04:d1:46:a7:69:8f:4f:
8f:df:f7:23:15:eb:86:48:33:a9:93:cf:b3:ca:e5:
4a:25:12:21:e3:74:1e:15:a9:72:f9:57:86:56:36:
ec:72:94:98:77:9f:af:8d:5b:7e:6c:78:bc:1b:4d:
f6:c7:3e:b1:c3:c4:97:88:6f:49:ab:f0:ad:37:af:
14:52:58:d9:ed:c2:29:86:fe:3f:13:0f:0f:75:1a:
a6:33:7b:d2:40:75:43:78:41:a6:e5:fd:4f:2b:6c:
48:8a:2f:14:88:9b:ec:21:6c:f0:b5:fb:f3:ca:1a:
01:55:3c:1f:9d:98:af:75:3d:68:6f:c9:c4:28:69:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C3:79:41:B3:FB:00:8F:FE:D1:29:68:B3:72:21:04:FD:D9:AA:4F
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f7:de:cf:0c:81:bd:7a:b3:e7:70:bb:b8:88:cc:b7:ec:44:
e8:f9:78:cb:99:1e:b2:be:fe:cc:74:81:32:70:a9:e8:78:82:
8a:99:39:72:fa:aa:a0:20:13:b2:ef:67:8a:59:44:ec:50:07:
f1:91:85:00:2d:6e:9e:d2:12:9d:56:d8:64:51:39:15:7b:2e:
e9:3b:da:72:58:a8:e8:25:b6:c5:89:e6:77:a9:b6:5d:ff:49:
61:09:cb:bf:18:e9:69:9a:cb:b1:c3:14:96:83:c4:9a:e7:38:
3a:1b:f5:9f:95:ae:65:e9:a5:71:09:11:05:cb:dd:be:89:5c:
72:ac:4f:b0:01:51:25:8c:2a:35:b5:8c:25:ee:23:d8:5b:4c:
6f:3f:cf:f6:89:4a:9c:6d:ac:70:df:bb:d0:11:37:18:81:2b:
f8:19:06:f0:ca:6d:07:84:85:d9:27:af:03:93:03:c0:6b:c5:
69:cf:b1:6c:4a:45:7d:8d:e0:1c:e1:f3:25:52:02:52:8d:2a:
b5:83:64:f2:4e:ea:14:19:66:35:53:02:56:a0:b1:d6:c8:47:
35:79:5c:96:54:e9:16:d6:d9:23:44:ef:bd:71:ec:79:54:fd:
3d:be:5e:3b:8b:2c:6f:a8:cd:ec:10:a1:fb:c7:66:b0:7a:a9:
46:6a:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:16:12 2026 by rpki-client