Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: BVrSu32XSW/zVdL4n0EZYcS7WODXqrdA4FmByB66Sms=
Subject key identifier: A5:EE:73:38:90:E9:8B:B4:58:3D:A0:43:81:87:86:4C:ED:9C:02:4E
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 01A0E174605E6A654B0CE1104A41FED53D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 1327
Signing time: Sun 27 Sep 2026 06:01:35 +0000
Manifest this update: Sun 27 Sep 2026 06:01:35 +0000
Manifest next update: Mon 28 Sep 2026 06:01:35 +0000
Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: StnKewIPnsEvRSuy0sbF13d8eysNgBf+V8uJsDqfOOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:60:5e:6a:65:4b:0c:e1:10:4a:41:fe:d5:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Sep 27 06:01:35 2026 GMT
Not After : Sep 28 06:01:35 2026 GMT
Subject: CN=a5ee733890e98bb4583da0438187864ced9c024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:dd:c9:09:75:8e:96:fd:f9:13:16:42:3d:
97:d0:3e:20:98:ad:f6:77:ed:56:a3:27:af:0e:a1:
a2:c3:33:88:37:84:ef:86:90:19:80:4c:5f:91:fb:
05:5e:16:89:dd:7c:43:1d:b6:bd:87:61:99:27:2e:
36:19:14:ed:d8:bf:2f:9a:91:6a:e6:3d:ab:55:a4:
5d:7e:57:a1:e8:3b:4e:5c:8f:eb:55:34:86:6c:f2:
7f:08:b1:78:06:17:c1:5f:3e:52:ee:c7:00:af:a5:
27:c7:1c:53:56:79:64:c1:13:c0:c4:74:26:52:86:
74:c2:59:9d:ac:0d:18:79:00:04:51:ad:d4:dc:44:
9c:8d:f7:f0:9d:b4:b5:99:44:0c:d1:be:44:96:7c:
9b:94:7e:d2:ec:4c:51:1e:e3:68:3e:92:12:86:ab:
c6:33:55:59:97:7b:e9:5e:c9:ad:5e:5e:50:8e:f9:
a8:f2:c2:64:df:e7:8e:4e:34:19:27:28:00:48:e6:
0d:e2:b9:f9:aa:57:9e:09:4d:01:65:29:1e:fe:60:
fe:bb:a8:07:3c:80:65:d4:27:9b:12:96:98:3b:ae:
9d:93:70:a3:1c:59:fc:99:77:c4:81:74:fd:67:45:
8d:9a:61:f2:ad:f5:2a:9d:ce:46:3b:f9:19:94:41:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:73:38:90:E9:8B:B4:58:3D:A0:43:81:87:86:4C:ED:9C:02:4E
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:85:07:f7:0a:b8:bc:09:00:39:e3:56:b6:f9:89:e7:28:5b:
39:f3:04:3a:93:da:d5:b7:5e:f6:08:8f:48:68:9e:04:1b:47:
11:b9:ae:3f:8c:63:53:97:6f:1f:d8:8e:85:96:bb:eb:bb:9e:
ad:4c:d0:b2:b0:3e:1e:61:78:da:2c:7f:01:17:1d:e2:98:72:
6b:2e:b8:7d:c5:14:40:4a:8c:25:d6:ad:91:67:d6:24:75:43:
8f:6f:04:4f:54:2f:82:a1:3b:4d:d8:d8:c2:0b:ea:bf:1e:2d:
29:83:e9:76:c8:9c:cf:ac:67:8b:31:e2:50:b7:63:de:45:b3:
58:cd:58:a3:7e:a8:3f:8c:20:03:62:37:87:44:21:d5:66:6c:
35:ea:2f:c8:8f:ee:4c:e2:c9:a3:9e:8e:85:73:a5:d0:60:6e:
06:6d:31:90:2b:8c:1e:20:81:d6:2a:18:af:aa:a3:d3:ba:a6:
db:d7:71:cf:d1:9c:e6:25:3f:ce:5d:cb:19:74:e3:76:64:6b:
92:c8:15:33:d5:31:08:21:08:48:c6:25:72:4e:79:49:2e:63:
65:12:be:32:3d:27:8b:5f:fd:90:3e:bd:03:e3:2d:da:9c:a2:
79:97:70:42:6a:e0:14:55:d8:fc:a8:fe:3e:62:32:fc:c9:7d:
03:77:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:15:47 2026 by rpki-client