Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: 1yz6LyAm12nyzEsTBpyybRTMV+49ZXOqRK+MsqvZoHs=
Subject key identifier: C2:A8:72:CE:31:92:08:F0:AE:35:97:74:83:08:27:1E:17:E2:AE:3E
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01A0E1751B0D7C799C7D278E447E100C54B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 149C
Signing time: Sun 27 Sep 2026 06:02:23 +0000
Manifest this update: Sun 27 Sep 2026 06:02:23 +0000
Manifest next update: Mon 28 Sep 2026 06:02:23 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: 11WkR11FR+ucxxnphaR5Pm+ezkJKD6gdeeztvXjjU28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:1b:0d:7c:79:9c:7d:27:8e:44:7e:10:0c:54:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Sep 27 06:02:23 2026 GMT
Not After : Sep 28 06:02:23 2026 GMT
Subject: CN=c2a872ce319208f0ae3597748308271e17e2ae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:77:30:2c:20:52:16:75:8e:e1:a2:f8:1c:
9f:89:5b:31:d2:94:ba:dc:a1:2f:bf:65:6b:bd:06:
7b:8c:c1:d4:6b:58:72:e5:df:3c:5b:5a:ae:65:7b:
9e:75:0d:4e:33:b1:d4:e5:3d:94:82:b8:97:6c:6d:
d6:b2:05:a3:2c:6d:1f:8b:95:54:67:1a:e8:9a:cd:
58:90:41:c3:e3:a5:1d:ac:c6:4b:41:4b:f7:5c:c4:
be:9a:e0:af:b2:85:47:84:b7:0f:17:4f:d4:a3:cd:
d7:4b:e1:f7:a5:71:64:21:c9:9d:63:08:c1:4f:d1:
d6:cc:e2:6d:d2:fe:6b:dc:f0:bc:2f:10:c9:43:a5:
43:fc:84:03:a6:2b:ea:e3:1c:f6:a5:55:d3:53:c1:
bd:58:33:0b:c2:e5:36:9d:8a:84:dd:68:5a:37:62:
d9:2b:2c:44:fb:28:4b:42:4f:88:cf:49:63:26:74:
70:d2:a0:14:06:67:b1:6d:b0:d0:38:50:4c:02:70:
0b:ff:80:87:73:0f:f8:75:cd:e6:8e:fd:58:ab:ad:
64:f0:02:58:15:48:24:7e:5c:f8:0f:23:fe:59:56:
0b:b5:a3:86:42:47:1d:74:59:82:72:28:00:80:e4:
5f:6d:dc:b0:84:a8:96:cb:56:8e:f6:1f:1a:ff:52:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:72:CE:31:92:08:F0:AE:35:97:74:83:08:27:1E:17:E2:AE:3E
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2b:08:9b:74:aa:f5:13:78:89:19:e2:ac:34:8c:4d:8a:ee:
f8:f8:2f:e5:75:23:f2:39:b1:06:f3:e1:b4:ce:0f:ca:aa:aa:
45:9b:54:e1:bb:dc:2d:46:ed:13:ad:7f:72:e6:db:0c:4b:91:
34:77:19:65:76:d7:ee:75:8e:d1:03:d8:b6:e5:a1:e3:37:6d:
46:0c:d4:46:b2:69:f3:d2:fa:72:1b:6c:f3:a1:c5:79:7f:fd:
77:13:c5:8a:3b:74:78:33:0f:1a:a8:c2:32:53:72:8b:d1:71:
83:a3:f5:72:b7:5a:44:23:a7:0c:3a:a3:0b:53:9f:e4:11:83:
28:18:1f:cf:a3:fe:d0:43:f1:e4:e4:99:a4:83:86:b0:70:90:
c3:46:97:71:1a:6a:e9:bf:24:8b:01:4c:d0:c5:5a:17:84:0b:
88:8d:58:2e:00:e4:5a:c2:19:82:d5:fd:f9:24:e1:47:a1:30:
a7:c4:f5:b2:0a:08:ba:39:5a:ee:35:84:49:5b:f2:be:4c:04:
c4:be:ef:52:bb:6a:e8:1b:52:79:61:fb:b6:0f:c9:c7:dd:cd:
38:3e:9c:83:07:8c:84:8e:22:a5:06:ee:ea:24:1e:3d:2a:b4:
e3:09:57:9d:ca:4e:07:ca:3f:73:05:44:45:b8:3c:d3:4c:00:
fb:88:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:06:39 2026 by rpki-client