Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: OlLDaVEqxEznkaJDbTQmG4fzuwqw3qxOOr1CvHV8Gtw=
Subject key identifier: 82:3F:15:FD:F8:D2:C4:EB:0C:43:81:68:2C:67:43:44:45:94:53:A8
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 01A0D539598B33170914BA407824EAB02ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 11D1
Signing time: Thu 24 Sep 2026 21:01:40 +0000
Manifest this update: Thu 24 Sep 2026 21:01:40 +0000
Manifest next update: Fri 25 Sep 2026 21:01:40 +0000
Files and hashes: 1: Luk3GD16ZuaxlBoDKdF96n4X3Dk.roa (hash: 1v/i1kZJAPaWeakpaEAlVLItC/+EuwO/djTFONOVHBc=)
2: Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa (hash: //Zu89adA8vidZqbvniFI74+X1OldRsqrkjpoajtNHc=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: 0se/L19Vrk+5HNcJVzfs3kv0hTWPo/ABTRHPTG8XfJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:59:8b:33:17:09:14:ba:40:78:24:ea:b0:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Sep 24 21:01:40 2026 GMT
Not After : Sep 25 21:01:40 2026 GMT
Subject: CN=823f15fdf8d2c4eb0c4381682c674344459453a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:75:2f:f3:64:e6:55:21:2f:99:83:e0:9e:
6a:6c:d1:9e:86:09:3c:35:47:ea:7e:1e:08:69:c8:
ef:7f:a3:7a:ef:02:52:5c:16:b8:8d:f2:9a:16:4e:
5c:71:70:61:23:fc:32:b6:d4:c8:fb:25:83:0f:26:
1c:59:a4:80:d6:00:f9:84:7d:79:c9:3f:a9:39:97:
6e:73:2a:51:f7:85:8a:be:3e:d0:5d:9f:83:b6:52:
96:9d:aa:d8:ce:af:9a:10:2a:28:f0:21:c8:5a:e4:
68:95:0e:6d:be:fa:c7:8e:e4:07:6c:0e:7b:1d:d5:
fe:ec:ad:d3:0f:48:a0:37:8e:53:d0:21:b5:6c:ad:
fd:b5:d9:f3:db:fa:c0:7f:88:d5:51:3b:61:a3:83:
c8:b0:c4:7e:fb:a8:26:56:46:c5:ec:9a:7b:c5:7a:
ad:29:6a:e7:41:04:bf:36:4b:ed:f1:cc:11:39:6e:
c1:09:a4:92:23:8b:44:2d:f9:fa:c5:ab:81:0b:d0:
fa:f2:d5:b2:40:e3:4f:91:4c:db:97:3f:b1:3c:6b:
8f:55:81:67:ef:f3:6d:54:3a:80:0d:35:1e:85:15:
b0:7d:91:b3:60:3b:08:13:ab:02:af:21:0a:88:49:
ea:30:0e:6b:6d:9b:d7:16:46:66:e3:12:23:ba:7a:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:15:FD:F8:D2:C4:EB:0C:43:81:68:2C:67:43:44:45:94:53:A8
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:fe:59:3f:d7:69:66:d7:57:95:d3:14:5b:34:b1:6f:8e:
de:2e:12:99:33:a8:aa:16:da:3a:e6:6b:0c:1d:5f:bc:2e:42:
a9:1c:4e:29:50:89:de:18:be:dc:64:30:c0:4c:0e:e5:db:6d:
83:e9:d4:f8:1c:02:e8:7e:d1:e8:95:a9:5a:52:91:9d:3c:c1:
4a:87:39:29:36:6f:5e:0d:fb:12:40:2a:48:0b:8c:fb:c5:92:
51:c4:ea:fe:e9:fd:37:44:14:91:79:c0:6e:2b:b3:91:04:fa:
fa:dd:25:56:cd:80:f8:ba:99:e8:62:77:1f:d6:77:b3:7e:f2:
21:13:bd:ce:29:81:50:64:4b:77:2f:b6:c2:db:58:1b:8f:ee:
c5:40:b8:da:c9:68:1f:90:58:d3:10:fc:f2:47:f1:ad:7e:de:
0f:fd:58:b2:85:ec:35:39:bf:e9:aa:b7:c3:ea:7e:a4:9d:12:
99:ae:50:60:4f:89:51:33:16:69:6b:43:7c:6f:32:b9:c2:32:
ce:87:04:49:c2:91:2d:1e:ac:e4:8a:df:6b:5d:df:b6:fd:ee:
12:ad:04:cf:ac:44:1d:ba:03:04:e9:b5:46:b7:03:e6:6e:2b:
8e:21:fd:58:8c:d4:82:81:04:53:62:c2:e5:44:69:a6:c9:96:
6f:16:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:55:06 2026 by rpki-client