Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: 7iaFAkyBG/WBphGsFKYL0br7zjFK2Jz1HkelyJUQuVc=
Subject key identifier: AE:C5:AF:7B:AF:0B:8A:91:B3:1E:E3:9A:86:56:1E:C8:BA:57:92:6B
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 01A0C669FA3B48D688523B9EC8CA13FDACC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 052A
Signing time: Tue 22 Sep 2026 00:00:29 +0000
Manifest this update: Tue 22 Sep 2026 00:00:29 +0000
Manifest next update: Wed 23 Sep 2026 00:00:29 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: IOt72qiRXqzU/yxVAnXR4WzwLW4gzz3Jq3NyA09h2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:fa:3b:48:d6:88:52:3b:9e:c8:ca:13:fd:ac:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Sep 22 00:00:29 2026 GMT
Not After : Sep 23 00:00:29 2026 GMT
Subject: CN=aec5af7baf0b8a91b31ee39a86561ec8ba57926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:a0:b8:09:cc:74:88:4f:1c:9f:9d:e4:87:
74:ba:97:2b:10:24:a7:e5:92:e6:0b:48:46:7b:0a:
9b:55:49:94:eb:07:f9:f5:f7:57:21:21:40:e1:24:
39:69:b9:63:4a:87:96:59:b8:51:84:68:e9:49:e4:
a1:f5:82:ab:b6:13:95:d4:f2:1a:b5:73:7b:1e:28:
5a:be:fd:67:5f:f1:e6:2b:41:f7:02:01:81:99:1a:
27:89:05:ab:3e:20:39:46:e5:03:83:6f:c8:06:44:
56:4e:2b:50:d1:ae:8c:7a:29:42:b7:d7:0d:d1:27:
08:87:8e:9f:11:7e:04:67:93:14:03:bf:51:57:8d:
68:94:9f:68:bb:f3:7d:ce:30:37:6e:f9:0c:8b:0e:
df:46:e4:71:a6:c3:dc:a2:e3:a7:44:b4:b9:2b:81:
1d:77:15:30:9c:a2:8a:ce:9c:37:df:69:a7:e9:06:
0e:6d:c5:49:1b:07:f2:47:5c:c6:cc:d7:e6:de:60:
a5:2e:07:83:2f:1d:fe:23:ed:ae:c0:9e:10:3f:f9:
b2:8d:12:d6:0b:59:f8:5a:d6:df:40:48:c9:4c:72:
06:1a:6e:bd:81:8b:91:49:0f:29:c7:79:69:40:73:
b5:a5:3a:2f:f7:09:c0:b8:ec:9a:ee:bc:5e:f4:08:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:AF:7B:AF:0B:8A:91:B3:1E:E3:9A:86:56:1E:C8:BA:57:92:6B
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:35:d7:1f:f0:a8:4f:e4:68:66:e0:1c:7d:51:4c:96:40:4a:
69:7d:88:fd:c6:5e:61:74:3c:fc:72:7d:0f:a0:48:a6:d0:19:
22:f9:1d:7b:a2:35:d2:aa:1e:21:70:6b:ea:7f:5c:9d:40:c2:
60:2e:44:ea:77:38:d0:66:3f:9c:8f:4b:3b:a0:77:06:99:ff:
5e:24:17:eb:23:8a:1d:49:51:71:bd:cf:3f:29:53:f5:a9:bd:
b7:53:ca:38:02:73:8f:8d:a4:c6:bb:00:c7:f7:5c:97:b9:0b:
67:89:bc:21:81:b5:68:6a:34:4d:2d:d3:04:58:bf:59:ce:c9:
40:bb:b2:65:82:d8:f7:c9:96:01:07:01:d4:4b:06:fa:69:6e:
31:ab:b8:be:f3:ab:b3:77:12:28:fc:f3:fa:a5:90:e6:d5:cd:
20:59:76:b8:45:e9:e5:78:eb:57:a9:aa:1a:34:1c:cd:da:50:
6e:26:be:fa:09:84:18:c9:ed:b6:b2:ec:2e:cd:d7:bc:75:6e:
b6:40:77:9c:9a:94:b6:61:8c:75:37:2a:de:a7:09:42:59:89:
1e:17:90:58:bc:60:59:61:86:77:88:2a:1a:cb:c7:2f:d8:70:
dc:93:4a:01:d4:1e:f7:ea:51:09:8e:9f:4f:68:f0:8a:40:13:
7f:8b:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:39:59 2026 by rpki-client