Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: N/RsYCAQ3qv8hZfOfIslqxdEBa1vM31yeKAjlePETpo=
Subject key identifier: 28:9E:1E:75:07:4D:C1:36:B9:91:BE:22:63:A4:CB:12:B8:19:A9:DD
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 01A0DFF4470B551EF29BD4237F83EF9B9E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 141D
Signing time: Sat 26 Sep 2026 23:02:03 +0000
Manifest this update: Sat 26 Sep 2026 23:02:03 +0000
Manifest next update: Sun 27 Sep 2026 23:02:03 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: sVgikPBHW6RdYfORmFAiaXZK3TXfwPe9QFF7GRALaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:47:0b:55:1e:f2:9b:d4:23:7f:83:ef:9b:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Sep 26 23:02:03 2026 GMT
Not After : Sep 27 23:02:03 2026 GMT
Subject: CN=289e1e75074dc136b991be2263a4cb12b819a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:14:73:a1:2f:0a:7b:fa:0b:bf:c4:7e:8f:
01:9c:b6:4a:bd:8f:66:22:8d:59:e3:40:28:bf:3f:
76:0d:2d:18:c8:73:e7:bf:70:13:de:6c:ab:2d:8f:
0d:26:ea:4b:72:67:e6:1e:d1:24:61:b2:60:8a:94:
9a:10:e3:f4:59:ef:8a:f2:73:0a:08:ea:23:a9:cb:
cc:9e:a2:3d:b0:7e:95:15:f8:13:3a:02:e4:74:51:
9b:f8:c9:b0:62:07:5f:7c:1c:dd:91:71:60:ac:54:
f8:8e:fe:90:5b:e8:4c:43:f3:ae:3e:83:e0:be:76:
2c:5d:00:86:03:1d:79:74:a4:9b:23:b0:7c:6e:4b:
c0:b1:8b:3f:b8:65:1f:4f:f8:76:45:a1:c5:b1:9f:
2d:7b:12:1d:bc:44:9f:6c:a4:0a:ae:92:13:7e:7d:
ff:77:81:7e:aa:50:52:42:71:09:f1:e7:9e:f0:2b:
e1:38:db:8f:06:18:37:82:5e:f2:17:6c:75:59:1d:
62:eb:e1:bf:d3:86:4f:7a:49:a6:d4:e8:cd:c7:76:
d5:05:53:ba:f1:6c:17:c2:ba:c1:3e:da:04:8d:2e:
d1:6e:bb:c9:51:b2:20:52:57:5b:1a:7f:6c:23:27:
56:56:ac:9c:00:c1:6e:73:79:b1:93:51:b5:8b:61:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:1E:75:07:4D:C1:36:B9:91:BE:22:63:A4:CB:12:B8:19:A9:DD
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ca:32:71:4b:a5:61:98:fc:51:72:dd:c9:66:49:b9:d4:cb:
fd:3a:55:75:df:c5:29:b9:87:3e:f4:d3:b7:1d:af:3b:55:7e:
e8:f4:04:d4:6d:dd:8b:4c:22:d5:56:e6:35:e5:ce:65:08:1f:
76:fb:e2:54:f6:e3:e1:e8:60:0f:7e:94:21:e2:cc:3b:33:31:
fb:bd:94:c2:74:db:77:6d:ab:7c:eb:8b:73:25:62:7c:fc:63:
56:ae:f8:d1:42:9f:16:b0:5d:1d:2e:3e:6f:04:1a:e5:df:3b:
60:39:52:87:08:ff:c3:96:c1:4d:39:14:c7:0b:8c:0d:96:6d:
9c:64:bc:56:1b:6b:aa:08:cc:c8:39:5b:9d:02:6c:87:ab:4b:
28:b1:1f:78:fe:08:62:de:e7:fe:18:7a:ca:9b:f5:bc:b0:75:
24:08:d0:db:25:05:ee:05:74:2e:82:4d:b0:a3:fb:ce:46:ac:
6e:37:d7:08:f3:ea:47:f8:30:d7:fd:e1:37:9a:da:d1:be:1c:
9d:ea:82:69:9c:28:38:e9:10:d7:18:92:60:18:5b:e8:0c:d0:
50:90:6f:2d:03:ae:3b:3c:00:2a:31:5d:53:50:58:b8:36:cb:
9b:34:b3:89:fb:d0:82:29:ce:7b:05:ad:c4:2c:c4:32:0f:a2:
c0:14:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:23 2026 by rpki-client