Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: ERCxClJEHzxHmQTrLR0VvpkYLfvq6VJiDzSXWk/Rgds=
Subject key identifier: 8F:EB:55:93:36:5F:B5:3E:42:94:1E:08:ED:AD:89:9E:6F:3B:0A:C8
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01A0DD607E9DFC98C89256E386719161D226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1A20
Signing time: Sat 26 Sep 2026 11:01:23 +0000
Manifest this update: Sat 26 Sep 2026 11:01:23 +0000
Manifest next update: Sun 27 Sep 2026 11:01:23 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: vxasJU+5+EKgbqQe6Hx2OjuSQqMssofAI+1IGXFQ7JA=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:7e:9d:fc:98:c8:92:56:e3:86:71:91:61:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Sep 26 11:01:23 2026 GMT
Not After : Sep 27 11:01:23 2026 GMT
Subject: CN=8feb5593365fb53e42941e08edad899e6f3b0ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:5f:fc:8a:f8:88:d5:ed:46:c6:31:38:fc:
94:63:60:65:60:2a:11:e0:a5:4d:19:52:5a:c0:63:
65:ae:83:1e:73:23:56:2d:49:80:2b:ae:be:5c:9c:
c4:3a:54:eb:87:84:6c:a4:f3:13:7c:2a:1a:f6:ac:
30:9c:16:e9:43:31:81:b3:59:07:10:4c:88:93:69:
79:3c:ca:35:bb:d1:77:a5:9e:e6:99:c6:77:12:a4:
89:4c:8c:40:d8:0b:15:4e:d4:41:3c:23:e9:03:5e:
b8:e1:9b:70:d2:0c:a4:19:10:b3:ec:95:a0:5c:c5:
9e:ec:7f:92:16:8e:7c:d5:87:d3:fd:91:0f:d9:36:
6f:54:ac:15:90:82:74:18:b1:7b:18:19:b7:34:a1:
ba:3a:54:12:c4:49:ad:6f:1a:86:3c:2e:43:a7:74:
9e:02:83:06:a1:1a:d8:ec:28:bb:8d:ae:25:da:25:
07:81:6b:0a:10:bd:de:34:77:d6:12:ab:11:49:06:
a5:5c:95:50:33:7c:b9:6c:66:77:07:de:43:6b:bd:
7b:a8:5e:fd:a3:df:5b:38:1d:0a:7a:43:60:1c:ba:
c3:ca:45:1f:5a:56:91:01:65:76:0b:a5:4b:2b:46:
6f:5c:b0:df:52:3a:00:df:a8:ad:2d:7c:8d:12:4e:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:55:93:36:5F:B5:3E:42:94:1E:08:ED:AD:89:9E:6F:3B:0A:C8
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:40:e8:56:6d:ee:53:76:bd:89:20:d6:fd:bc:04:a4:cf:4b:
98:a1:b2:60:7c:7f:c7:26:44:69:f8:a4:23:65:d7:88:7e:d1:
06:f0:1a:63:bc:d3:ee:11:b7:43:48:a4:85:42:ee:52:2b:52:
ee:1c:a3:29:1e:8b:d7:37:f5:0c:0e:c8:c4:81:32:21:e7:91:
73:80:18:d0:19:10:b8:93:7c:b5:59:09:89:b0:67:f8:61:6e:
2b:5e:f8:06:40:13:1f:cd:0e:d8:83:69:60:bb:ec:2a:64:7c:
c4:60:59:41:93:39:ec:1a:db:6b:ac:24:61:e4:a1:a6:41:48:
d5:33:00:61:d5:3c:d5:b2:4f:b1:36:8d:3d:c8:03:ec:84:e3:
83:1f:85:bd:95:ea:2e:ab:7d:f0:6a:e5:81:cb:55:05:c0:c0:
ef:73:5d:54:04:bd:91:3d:53:5f:c5:9d:17:89:1a:8d:b4:5b:
bc:6c:5d:99:e1:d2:b3:56:42:58:ed:f6:ca:d5:02:69:02:0b:
58:18:3b:c8:7e:f4:c1:5a:8d:ce:f1:5b:d0:c5:33:f3:e3:03:
52:3a:90:43:13:f1:a0:f5:6a:4f:38:d7:c9:69:a5:ad:91:ba:
b4:49:b8:3a:a2:97:3d:28:80:88:4c:11:3e:f9:54:98:c7:f4:
ae:1b:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:40 2026 by rpki-client