Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
File: FQo3NJOhCsuvMf30RWF6YsTUb88.mft (raw, json)
Hash identifier: orLVCS97wKyxGtoWaqfdAR1O80zakhUtjb81B7pxDuo=
Subject key identifier: 72:A0:16:CB:41:C6:32:10:8C:BD:CC:25:FD:C3:66:6C:51:13:B4:7F
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A1DCB92D6D6F038767F5A4D0B7A56A7F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
Manifest number: 0278
Signing time: Sun 15 Nov 2026 01:01:25 +0000
Manifest this update: Sun 15 Nov 2026 01:01:25 +0000
Manifest next update: Mon 16 Nov 2026 01:01:25 +0000
Files and hashes: 1: BIY2MX2D0f-mNcLAONx2M9CRE1E.roa (hash: E71Iw3f7ZgCSn9KHFz6FA0A/seI+S/3wuQbzCMUre0w=)
2: FQo3NJOhCsuvMf30RWF6YsTUb88.crl (hash: wJ3tbSn9yT7ldN6w2hTTKfdAtjI6w+TWny+cvUah5ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:2d:6d:6f:03:87:67:f5:a4:d0:b7:a5:6a:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Nov 15 01:01:25 2026 GMT
Not After : Nov 16 01:01:25 2026 GMT
Subject: CN=72a016cb41c632108cbdcc25fdc3666c5113b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:4e:48:80:45:33:60:54:a6:50:1d:29:fa:
05:3a:16:85:91:6f:fd:71:9b:c2:08:a9:48:1f:a6:
7c:d6:b8:b8:5a:9e:3e:d5:44:58:e5:a9:ff:39:3b:
2a:3c:2c:f5:d1:5e:47:7b:22:c9:c7:48:4a:ca:3f:
c5:cf:3a:38:6f:f4:9c:5c:7d:4a:67:3e:3f:a4:78:
80:6e:bb:09:cd:3d:d1:22:65:80:ba:72:1c:c2:93:
1b:fb:cb:99:77:de:66:e4:27:d1:94:88:38:70:33:
05:09:fb:df:19:cc:4b:1f:f1:ca:61:81:8d:a3:bd:
b9:90:e3:14:15:da:f9:e2:7e:a5:93:97:a9:b5:c1:
d2:27:a5:e7:70:70:e5:ca:29:70:e9:a7:2c:7b:d1:
86:b6:a6:5e:f3:97:bf:37:b0:b2:d1:ba:64:6a:bf:
04:4f:2c:ad:84:d6:86:95:9f:ac:14:e8:83:a2:e2:
61:e2:25:9e:08:5e:fb:3f:27:aa:2e:15:4c:2d:b1:
6c:f9:45:5c:3d:38:a5:21:b0:df:b4:19:c6:45:58:
fc:99:78:c5:ac:40:98:4a:69:5f:4d:12:ae:8f:45:
3e:13:c4:b3:ea:27:e5:59:78:09:e7:da:69:2f:7a:
f4:f9:cc:0b:fb:9b:c8:5c:db:89:38:22:ed:80:35:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:16:CB:41:C6:32:10:8C:BD:CC:25:FD:C3:66:6C:51:13:B4:7F
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:51:91:e8:0a:01:3e:fc:d9:c6:b8:b6:f0:a8:e6:5d:fd:
bd:e5:de:3d:05:ae:0f:e1:9d:16:ff:33:0c:fb:bd:8e:2c:7f:
2f:aa:9e:60:48:b0:dd:c9:0b:df:b9:6e:05:69:2e:39:2d:18:
92:1d:3d:b2:b8:55:84:18:87:e0:0a:5f:79:3d:f2:87:dc:72:
4d:fa:2d:fe:94:1a:26:85:23:a7:65:40:ef:44:b5:29:5e:a7:
b0:0f:b8:f3:ee:9d:c4:6b:8f:d5:8f:f7:8b:eb:cb:5b:f5:51:
de:b6:80:3f:cc:8f:a1:1f:e0:20:26:4b:fe:99:be:fb:29:0c:
40:c8:a7:2e:1b:30:0f:6a:2b:1d:c6:c5:57:ef:c8:3e:36:20:
2e:1e:33:71:8e:e1:71:27:c6:6a:fb:8f:cd:1e:43:8b:d2:6d:
82:dd:8d:c5:e4:fc:d5:04:cb:36:1e:99:86:4a:3e:36:5b:8a:
01:73:19:3a:ad:cc:b0:33:f9:ea:78:3b:c9:18:a1:ab:22:fd:
d7:a1:03:8b:fb:81:4b:3d:6e:3c:5a:04:ed:15:87:63:ec:a3:
e6:4c:5b:4a:8f:b6:71:4e:e6:91:bb:2c:f4:de:e4:8a:9e:44:
f2:7b:52:d2:82:83:17:2d:45:8b:d8:3c:0e:5e:a8:b3:c7:b2:
b5:74:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:51:49 2026 by rpki-client