Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: Cks3Ve4zbIaMKNUz9OyU1+RDjM/nShWM6VicIZioqEU=
Subject key identifier: 95:FD:DD:78:C2:FC:A1:23:36:9C:18:29:2D:77:0A:90:2A:7F:40:DF
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01A0CF6D67E478FF0BF65D2FA49D7D88D81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0DCD
Signing time: Wed 23 Sep 2026 18:00:48 +0000
Manifest this update: Wed 23 Sep 2026 18:00:48 +0000
Manifest next update: Thu 24 Sep 2026 18:00:48 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: U5yOvcurguof+w6hhYqaPNIbC+Ti5G4U5cA/kNS+Fxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:67:e4:78:ff:0b:f6:5d:2f:a4:9d:7d:88:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Sep 23 18:00:48 2026 GMT
Not After : Sep 24 18:00:48 2026 GMT
Subject: CN=95fddd78c2fca123369c18292d770a902a7f40df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:00:14:4f:bb:f8:92:f2:7a:c9:1f:20:69:
f4:b1:af:bf:3e:3a:f8:e5:bc:51:6d:00:dc:80:67:
79:a9:e0:b5:d2:74:d3:b0:29:dd:cb:fa:6e:53:7d:
bb:90:cc:06:1c:85:9c:9c:d0:c6:02:1b:52:d2:7f:
35:a1:0a:1c:1a:9f:ff:e4:78:7b:f8:48:e7:6c:52:
45:46:ce:0f:91:12:b4:22:f4:05:1d:47:30:64:a8:
c7:05:7e:41:6e:70:a7:23:74:7a:33:ce:6d:78:87:
ed:98:e2:19:c8:84:e1:d8:56:52:21:f0:19:c2:88:
07:bc:88:fb:1d:e2:07:71:07:ab:27:f0:93:ce:a9:
fc:fd:1b:77:c2:3e:fd:77:c3:81:45:96:ef:1f:2e:
1c:4d:3c:7f:1c:d1:1a:2a:c7:c6:c1:68:4f:dc:09:
37:35:86:e9:01:20:7f:dd:68:15:f9:95:5f:35:0e:
35:dd:0d:13:6f:35:be:f1:34:a5:35:3d:17:c1:b4:
bb:c6:2d:9e:fc:0c:7f:fc:87:e8:f1:de:9b:4c:b4:
7c:9c:55:9c:29:83:dd:1a:3e:6b:0e:cd:23:08:cd:
75:f5:58:c3:aa:ab:a8:e5:39:fe:ad:25:ff:2b:5e:
5b:aa:75:e6:72:7a:9e:16:3b:98:ef:51:41:f2:75:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:DD:78:C2:FC:A1:23:36:9C:18:29:2D:77:0A:90:2A:7F:40:DF
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5e:e0:4b:8d:11:ec:60:1c:df:96:9e:6c:0a:ff:93:d0:67:
d6:8c:26:44:50:d3:da:b9:24:f6:0c:b2:43:55:dc:fa:18:83:
93:a1:d6:90:a2:27:c4:2e:b8:c9:42:cc:8e:df:08:f9:4e:49:
06:da:f4:2d:b8:7f:56:24:86:06:f7:0d:40:49:4a:a7:60:4c:
bb:3c:bf:1d:2c:19:02:84:d4:4d:33:8d:d5:0a:0e:64:ba:02:
70:0d:93:25:03:0b:70:be:48:ba:aa:5e:6f:9f:14:20:41:de:
77:ee:73:3e:6e:6b:d1:13:3c:85:0d:3e:ab:15:e7:3a:3c:4c:
a0:dd:26:2c:b3:aa:11:8e:18:c3:18:fe:27:c5:b5:a0:9b:b7:
7c:cd:3a:3d:a8:5c:bf:b5:80:24:48:9a:15:f3:66:95:3d:da:
97:5d:a2:ff:92:08:5f:35:ef:a3:05:4b:1f:90:e5:2f:4f:4b:
e5:4c:6c:3e:eb:26:4d:11:a7:90:36:0a:f0:96:0f:a7:ad:4f:
05:28:a5:40:27:e7:3a:66:0f:b2:c8:26:9f:6e:7f:09:db:2f:
4d:40:94:7e:5e:4b:1c:a8:3a:56:c8:5f:01:54:17:d9:cd:3e:
76:b5:36:e6:53:6b:97:f1:14:d8:17:04:41:99:a1:bf:de:af:
57:05:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:56 2026 by rpki-client