Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: Dlu33UATBPAt+LdsrvDV+bQOJx5iC1XJYAC89Zt6kIc=
Subject key identifier: FC:D1:C0:67:D5:AC:F5:5F:C6:70:63:D7:1C:EA:22:46:5E:D9:7D:6E
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 01A13E94CF3F686FF135B2FEECD75A9CCF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1A35
Signing time: Thu 15 Oct 2026 08:01:41 +0000
Manifest this update: Thu 15 Oct 2026 08:01:41 +0000
Manifest next update: Fri 16 Oct 2026 08:01:41 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: OH8pryq8Lk0NAD/D6PsIWf4hcQXfp82rLcNZkKiX9rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:cf:3f:68:6f:f1:35:b2:fe:ec:d7:5a:9c:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Oct 15 08:01:41 2026 GMT
Not After : Oct 16 08:01:41 2026 GMT
Subject: CN=fcd1c067d5acf55fc67063d71cea22465ed97d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:4f:7d:47:4e:d3:32:70:8a:67:85:75:40:
ae:49:91:8a:b9:80:16:7c:31:ea:14:9e:7a:8e:c9:
77:5f:9c:d6:2c:b8:c1:29:73:61:98:f1:b6:82:90:
c2:f9:3e:1f:aa:39:e1:9c:c1:58:92:d6:3a:2e:e0:
08:69:bf:ab:8c:e9:52:dc:51:53:4c:da:d7:6b:3d:
09:f0:a6:5a:f6:b5:1d:00:15:ae:fe:f7:d6:66:91:
00:2b:a7:1d:c5:82:66:4d:a8:dc:32:a4:66:62:cc:
ab:15:57:4d:15:13:b2:3b:04:a7:6e:95:c7:af:84:
5f:9f:fe:50:4b:d9:80:cf:77:35:39:95:73:9b:83:
9f:31:16:df:bd:bb:be:2c:87:fa:38:1a:ca:f8:58:
24:cd:ee:17:a8:d4:e1:80:06:79:e7:a0:73:b6:c8:
22:0f:9f:a7:7c:77:11:33:50:da:08:3f:c2:01:34:
7a:09:ee:79:2e:30:a3:83:a8:fb:f7:11:45:33:44:
5e:a4:50:85:bd:0b:ae:6c:35:43:61:6d:4c:b9:99:
76:c8:94:24:ce:0c:f8:9c:d1:21:8a:6e:80:95:79:
4d:b7:0c:6d:bf:99:c1:ae:04:90:09:44:33:b9:aa:
19:96:2e:36:f4:6a:64:df:a3:a0:79:eb:51:42:da:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:C0:67:D5:AC:F5:5F:C6:70:63:D7:1C:EA:22:46:5E:D9:7D:6E
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:01:25:e9:55:5b:c8:19:ed:66:e3:c6:91:b0:ad:1b:6e:29:
b3:4b:54:22:85:01:32:fe:d3:86:92:2d:68:7d:05:c9:f2:fa:
83:fa:fe:4b:02:45:30:43:3e:b7:e3:a4:a5:e8:7e:b3:ea:0b:
62:e6:07:43:20:99:d5:9b:95:68:e8:77:ed:97:b6:e4:1b:a0:
1c:93:13:0e:cf:fd:44:6c:78:fd:b8:6d:40:bc:08:22:79:96:
35:5e:b2:aa:4d:71:1c:fe:63:5d:82:ca:b4:2d:eb:a8:b0:64:
27:21:0d:b9:0a:c4:70:82:85:aa:b3:ac:25:0d:45:86:2f:62:
f7:22:f2:7b:80:9d:1b:cc:e3:3f:a6:8e:9e:80:c4:dc:72:92:
38:4c:8e:25:38:a9:c9:d7:7d:51:30:13:18:6d:f6:30:5a:16:
27:bd:03:96:d6:98:21:58:ce:c4:46:00:06:0f:e7:8a:6a:6e:
5c:89:91:3c:82:a3:01:40:cf:a5:81:a5:f3:1d:72:e3:49:01:
5e:89:04:03:ec:6e:6c:4c:47:f1:f0:8a:5d:3d:49:5d:e9:08:
04:1c:13:51:c6:da:64:d2:ee:ac:1b:66:c0:f0:7d:84:9e:65:
18:28:8f:bc:1c:1e:3d:2a:dd:21:08:c3:bb:09:37:c1:b6:eb:
9c:aa:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:33:12 2026 by rpki-client