Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
File: FQo3NJOhCsuvMf30RWF6YsTUb88.mft (raw, json)
Hash identifier: UO/DLjpkm0xU+3eEfgK6KiDaAaLSf40XugOn6n1ujSA=
Subject key identifier: A2:5D:E3:BF:3C:7D:B3:BF:B1:7A:9E:13:69:FC:2B:BB:1B:B8:84:F2
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A0D75F90615376EF378BEE9D8034CCBF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
Manifest number: 01EE
Signing time: Fri 25 Sep 2026 07:02:39 +0000
Manifest this update: Fri 25 Sep 2026 07:02:39 +0000
Manifest next update: Sat 26 Sep 2026 07:02:39 +0000
Files and hashes: 1: FQo3NJOhCsuvMf30RWF6YsTUb88.crl (hash: 3BH8couH0jAK3NCFRnHtEeegD+1+Ue0xfuiGkquu3Qc=)
2: dekeUIUO9T5iudR5OgsQwRl5gKI.roa (hash: Thq7Xkhfa6hYvCBOhOwK4u/BZsc5f9iIPauMbjqNGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:90:61:53:76:ef:37:8b:ee:9d:80:34:cc:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Sep 25 07:02:39 2026 GMT
Not After : Sep 26 07:02:39 2026 GMT
Subject: CN=a25de3bf3c7db3bfb17a9e1369fc2bbb1bb884f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b0:f5:bc:89:f1:16:6b:0a:c1:5a:8f:3e:b9:
26:5c:eb:6a:e0:a1:3b:79:0b:2e:b5:c1:e1:5d:8b:
39:a7:54:55:e2:fe:43:8a:ab:11:ca:95:e1:c0:7d:
cd:d1:4b:ce:63:82:03:d9:1c:83:41:bd:fa:45:6f:
31:8f:65:11:49:25:3f:70:7a:35:89:a7:96:08:2f:
da:d7:1e:4a:bb:cc:21:7f:3c:d9:4d:45:da:44:27:
32:a7:3a:42:e2:88:77:a8:4a:56:67:bc:1f:41:f7:
85:6c:e9:09:63:79:3a:db:5c:c7:77:de:ef:fc:76:
31:96:7d:91:16:f9:a2:de:1e:50:ec:20:a4:03:0e:
01:8c:62:fa:bb:9e:b0:89:cf:3d:99:ce:c6:0d:e7:
71:28:7d:dc:86:b3:de:85:e1:a2:0d:cb:d1:07:bf:
10:de:27:72:5d:79:2f:34:0a:15:27:ba:f9:d0:5b:
8a:df:89:79:aa:a5:1a:45:e6:02:c9:73:4a:f7:a3:
e5:5c:24:1b:ca:de:22:85:57:eb:18:f3:cc:85:49:
f7:b8:cd:00:b3:b1:48:19:34:b3:15:49:d4:eb:a4:
05:03:58:52:83:34:a4:27:1f:c9:e6:3d:2d:2d:f8:
58:d1:39:df:4e:99:4a:7a:06:70:00:00:8a:b4:13:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:E3:BF:3C:7D:B3:BF:B1:7A:9E:13:69:FC:2B:BB:1B:B8:84:F2
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6e:82:88:fa:a0:94:5b:c1:a6:74:0a:82:e5:ad:e1:33:d0:
2a:29:e4:81:88:2e:d1:75:a7:03:7e:9e:e9:bb:66:60:2b:52:
74:6f:d3:b3:34:20:f7:18:31:ef:2b:3d:9a:63:b4:9e:f9:43:
fb:fc:60:6f:19:25:0c:4d:19:97:48:83:6b:ef:59:75:88:e5:
71:74:05:f4:cf:26:0f:79:b1:9a:0f:28:bb:96:7d:76:de:1a:
42:13:c1:29:c4:e2:a4:4a:85:be:7f:75:0f:04:72:d3:47:89:
a7:d9:1e:5a:af:2b:58:9a:0a:eb:9d:49:8e:dc:9d:70:ef:cb:
19:a6:38:cf:8d:2b:a3:5f:db:ed:78:2b:ed:6f:35:7b:82:cf:
f7:87:aa:53:eb:54:b4:2a:50:6e:36:de:31:67:10:0e:43:0c:
ca:f6:28:5b:1b:96:d4:c9:48:07:51:b1:5c:bd:96:7b:7c:0c:
dc:82:c4:54:a6:53:6d:b7:da:60:35:31:bc:c0:6c:6e:3f:15:
4e:37:ee:ed:84:a6:68:52:4b:4e:7b:1e:9b:fd:82:18:bc:6c:
6e:88:56:9c:9f:0b:56:32:2c:45:c4:d7:2a:48:66:9e:f5:1c:
f2:ac:ac:fe:5c:d4:a6:2a:3d:1b:1c:31:5b:5d:a5:9b:7b:b6:
b5:15:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:35 2026 by rpki-client